Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d6de46e-4aeb-3935-8934-7c3dbafb006c.roa
File: 5d6de46e-4aeb-3935-8934-7c3dbafb006c.roa (raw, json)
Hash identifier: jgou2llekRdK70KgiTlFG6ltxZq5fPJlxBg1EiveK60=
Subject key identifier: 58:63:A8:56:AF:17:49:2D:BC:F9:3A:5A:67:3B:92:23:7B:77:B7:F7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFB92FA6D73887E5BFAB54C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d6de46e-4aeb-3935-8934-7c3dbafb006c.roa
Signing time: Sat 21 May 2022 12:00:00 +0000
ROA not before: Sat 21 May 2022 12:00:00 +0000
ROA not after: Sun 26 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 130.71.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fb:92:fa:6d:73:88:7e:5b:fa:b5:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 21 12:00:00 2022 GMT
Not After : Jun 26 04:00:00 2022 GMT
Subject: CN=7fd3354d-bfa6-4f4b-81a4-655cfcb5d0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:70:fa:1d:04:05:6c:4d:da:11:06:1b:cf:48:
a9:50:f4:b4:ad:ad:13:b7:da:6c:04:55:dc:db:dc:
68:a4:19:18:a6:d0:d1:cf:ca:0a:e5:28:2d:67:20:
45:e5:e3:cf:c1:f1:db:ec:f6:8b:b6:f5:5b:d7:ab:
dc:5d:84:e9:6a:4b:35:2b:f7:53:fe:19:00:42:c3:
5c:94:19:24:f1:ba:35:1b:92:e6:85:a5:da:79:6a:
63:fe:cb:91:56:d8:0e:3e:fa:62:45:f7:c1:da:0b:
79:6e:02:ba:22:39:17:bb:d2:00:bd:3d:79:3d:3b:
85:be:f1:c0:54:a8:b1:87:58:e2:4f:f2:7d:95:80:
12:74:66:58:1b:47:a6:1d:63:99:4e:cf:2d:2b:29:
3f:eb:2c:0d:e6:64:d7:83:0e:0a:5b:2b:f3:fa:db:
d1:8d:38:82:6a:6b:f4:6a:12:0a:8b:90:1b:15:2a:
ff:96:2a:5b:71:36:b7:b0:2c:1a:c1:19:74:5c:fb:
49:02:e1:a9:9a:c4:fc:73:97:27:b6:95:39:0a:62:
75:ab:5f:7a:e3:49:f0:f7:b6:c5:65:38:44:0c:08:
43:95:f2:aa:e3:fc:ce:55:26:cb:ea:a9:96:b3:ce:
d8:f8:e9:f5:93:09:b2:c3:22:00:a6:7d:95:1f:9f:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:63:A8:56:AF:17:49:2D:BC:F9:3A:5A:67:3B:92:23:7B:77:B7:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d6de46e-4aeb-3935-8934-7c3dbafb006c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.71.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:de:f2:66:87:34:ec:f7:b6:6f:ae:e4:49:07:b5:92:61:6f:
aa:64:8a:6f:cb:f5:40:23:0c:d8:8d:ee:7f:a6:89:49:62:5a:
22:b1:5c:fd:9c:ff:cc:e6:23:00:1a:13:21:03:3c:be:1a:47:
07:d0:c5:ec:bf:64:19:d3:8f:df:8d:5b:70:a0:d3:96:f7:3d:
9b:d4:f2:0d:16:e3:a8:1d:96:d5:08:bb:94:40:d5:07:cc:3e:
62:91:ff:43:ab:20:41:7d:2c:b1:33:af:80:9e:c6:42:e1:8b:
0f:dc:eb:2e:ea:a5:27:8c:7e:1d:c2:a4:e7:91:0c:69:a6:bc:
13:ee:25:74:77:cb:ff:35:fd:7a:43:aa:b8:a7:98:72:a2:63:
58:a3:31:0e:ab:64:a2:08:53:a7:b2:e5:b7:d9:29:dd:7f:d5:
d4:ed:3c:0e:7f:ec:92:14:0e:f9:e8:3d:0c:16:28:08:2d:07:
d6:8e:9a:36:ef:4f:2c:04:bc:99:06:31:0c:2d:fe:bd:8b:3e:
1d:98:dd:72:73:cc:b9:f0:5e:31:fc:00:d0:54:a7:98:e9:5b:
0f:e8:8c:d3:da:bf:9a:68:a3:2d:8c:a3:23:d8:3f:13:2b:1e:
60:55:f0:56:d6:ca:2a:95:2c:00:b9:35:53:47:6b:12:d4:32:
86:49:ec:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:48:17 2025 by rpki-client