Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5dd699d4-3695-327a-a2e3-8ca4fc2eed87.roa
File: 5dd699d4-3695-327a-a2e3-8ca4fc2eed87.roa (raw, json)
Hash identifier: ebPtUoA6kHrM8EYNCXWVhhARmitAMt3eqpTuQvIz98w=
Subject key identifier: A8:A7:93:A1:A4:6E:AC:7E:35:D0:CB:99:70:5D:53:4F:9E:17:56:24
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D5A440E6944BEBDE9B717FE40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5dd699d4-3695-327a-a2e3-8ca4fc2eed87.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 128.181.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:44:0e:69:44:be:bd:e9:b7:17:fe:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=8fdf21d2-84f5-437d-b9d6-1369fbb08a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bd:ad:00:02:3d:fc:84:5f:99:f1:02:8c:f7:
4d:4d:6a:ed:6d:21:04:92:41:4a:c0:cb:93:14:dd:
83:58:60:92:c1:a6:87:a8:aa:9e:1e:b5:94:02:ed:
4f:f0:50:07:e7:98:b6:c4:81:bb:2d:3b:0a:ab:0e:
d5:25:0b:29:5f:33:17:62:7d:f4:55:67:13:c1:8f:
48:23:31:3d:92:54:31:48:f8:e4:f6:ff:57:e3:f4:
2b:ce:6f:00:2f:9a:61:3b:8c:78:ae:ba:14:ac:88:
a4:72:75:4b:f9:c0:5d:be:ee:0f:f0:2a:4d:a3:43:
80:e1:eb:ae:37:92:00:cf:1f:8c:6f:ea:43:1a:c6:
bb:3e:6a:48:15:99:0d:fe:85:a0:bc:21:18:35:af:
21:f2:39:67:1a:59:99:56:7b:a7:fb:a0:d6:7c:ea:
a3:47:9d:af:e4:7e:fb:ce:4a:ed:5d:4e:9d:64:e2:
a6:5b:1f:d5:57:e9:c3:0a:0d:b3:df:1f:65:6b:b0:
7f:68:90:0f:d4:b2:54:55:02:a7:02:81:a7:10:d2:
f1:14:30:7a:fa:af:3d:c5:05:a6:f8:71:2a:36:ae:
01:9b:e8:b6:a1:56:ab:03:f1:b9:d1:2e:12:18:4d:
ce:be:a5:55:f4:4d:9e:21:68:a0:66:50:d7:55:e8:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A7:93:A1:A4:6E:AC:7E:35:D0:CB:99:70:5D:53:4F:9E:17:56:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5dd699d4-3695-327a-a2e3-8ca4fc2eed87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
128.181.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:c7:68:d5:b3:70:26:98:6c:ca:3d:14:f2:75:c0:67:65:6d:
5a:ea:00:6c:94:9f:82:9f:49:d4:5d:57:31:1c:5a:86:ff:21:
46:2b:42:7d:07:68:63:2d:ed:38:b5:81:81:e9:ad:4a:a8:3a:
63:de:86:17:ae:0a:fb:7a:d6:f3:9a:45:e1:1a:4e:e0:37:7b:
8a:cd:79:d4:6e:62:09:a6:da:47:98:fd:57:71:e3:a2:bf:1e:
96:58:1d:a5:2e:a4:6b:37:f7:1c:c5:8a:e6:0d:e4:ad:28:c2:
75:91:f7:c4:0d:0f:e4:6b:53:73:c6:8a:af:19:c5:24:18:f1:
b4:cd:41:76:09:24:2e:11:ec:88:f2:a8:05:81:bc:c2:07:b8:
b0:93:45:3a:72:69:6d:1d:f7:be:ab:08:16:f1:e9:fd:94:3c:
e0:f6:42:a5:c2:55:07:1e:8a:09:8d:fd:2b:42:90:39:6b:c5:
7e:71:14:fb:c2:d3:a8:e4:b0:d5:2a:87:a8:bb:2d:ae:33:c5:
f9:17:c4:bb:d4:43:e5:90:66:0b:05:6a:03:61:e4:a8:4a:72:
7f:08:af:2e:d5:ef:9e:07:c4:2c:d8:73:46:ff:11:63:dc:b1:
b3:d5:02:0e:7c:62:2c:59:64:8e:09:c2:f2:e4:3b:b6:ea:2e:
40:33:65:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:48:17 2025 by rpki-client