Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65e180af-d1c5-3c58-83d2-7fd6ebdfc867.roa
File: 65e180af-d1c5-3c58-83d2-7fd6ebdfc867.roa (raw, json)
Hash identifier: dIU06KBVvxgwBR+EctN4uZUpnjS9Ph7VhfgZRkp56jE=
Subject key identifier: 56:36:EC:BD:3E:FD:AF:40:F1:B4:AD:10:EA:46:67:18:B2:EA:AD:1B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840402B27C10702C22D159EB180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65e180af-d1c5-3c58-83d2-7fd6ebdfc867.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 165.94.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:40:2b:27:c1:07:02:c2:2d:15:9e:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=270d022d-bce8-4c30-820a-c4a85e1ae38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:08:22:8b:4b:20:f8:90:78:a4:b4:5d:aa:20:
cb:d7:93:a3:c7:48:34:05:c0:05:ed:94:f2:01:64:
6c:5b:f9:a2:02:70:1e:d8:6c:6d:b4:40:64:20:9e:
b6:28:f6:72:e0:e7:ec:bf:67:d2:94:06:3f:7b:d7:
a0:33:09:44:e5:c0:bc:48:05:68:2b:2e:92:7d:61:
98:36:48:2c:48:c3:3b:17:09:4f:c4:86:5b:f1:78:
71:23:e7:eb:f2:de:7a:0f:86:12:da:58:41:a1:af:
af:bf:24:4a:29:0b:95:e5:aa:17:c8:0b:5e:dc:51:
df:5d:0a:94:51:0c:39:e4:47:99:12:71:79:47:56:
75:ca:18:d4:5b:1c:1d:11:dd:fa:6b:fb:86:bf:f8:
ce:f0:fe:0a:cb:43:aa:b1:42:45:e2:cd:d9:d9:09:
2a:09:da:81:84:14:d8:12:d4:c8:e4:38:db:67:e8:
31:3a:86:bb:66:71:13:79:8b:7a:52:d4:86:94:32:
02:f6:ec:b9:40:23:06:b5:28:84:ec:d4:ac:58:11:
48:25:51:fd:bd:29:b4:8e:48:b0:f6:fd:6b:47:27:
58:a4:a9:11:29:55:e1:e3:e5:ed:b0:71:8c:4c:e9:
37:5a:e0:21:bc:47:31:eb:19:86:5a:ec:3d:43:c4:
4d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:36:EC:BD:3E:FD:AF:40:F1:B4:AD:10:EA:46:67:18:B2:EA:AD:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65e180af-d1c5-3c58-83d2-7fd6ebdfc867.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.94.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:aa:5f:6e:f5:0d:ce:05:13:9e:25:39:68:35:33:94:eb:d0:
49:7c:72:7b:48:d3:69:37:ca:3a:4a:0a:c4:f2:f0:85:78:ac:
61:32:e1:23:14:63:6b:7f:5b:01:3c:90:bd:7e:ed:32:c5:bd:
70:b7:6c:9d:7a:91:74:4e:9e:99:c8:32:e6:d9:30:ca:81:4c:
c6:bb:c7:f2:ab:aa:dd:64:f8:0f:84:54:48:f1:c0:8a:ef:6e:
5d:d1:55:73:b4:6a:21:be:fc:ae:bf:32:c7:1b:07:e6:6f:33:
5b:92:ae:bb:f0:0f:59:7e:e3:06:25:9f:8c:ab:9b:84:f3:6a:
cc:03:0f:61:dc:f9:bc:e0:ae:3b:36:a4:e8:fd:17:96:83:25:
b7:52:2d:93:1c:59:15:2e:cd:b7:a6:9b:9e:ca:4b:5a:03:c7:
ce:a2:00:70:ae:79:09:f7:0d:c3:55:4f:71:75:25:5b:41:6e:
08:94:a7:bd:a9:0f:f4:95:b1:12:e5:a9:2c:b8:08:88:1a:5a:
10:20:90:82:fa:c3:69:b4:bd:c2:a4:c1:1f:82:e4:54:db:fa:
c7:91:77:b1:41:2e:e1:00:f6:de:5c:75:aa:89:3e:a6:5d:2c:
e4:4f:60:34:bf:27:9e:6c:0a:30:30:af:ae:71:f9:8b:c0:b9:
c5:6e:b4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:22 2025 by rpki-client