Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/66c405bf-eb0e-36fa-8c8e-8e03883c3702.roa
File: 66c405bf-eb0e-36fa-8c8e-8e03883c3702.roa (raw, json)
Hash identifier: fTa9ElvMGkXCPGFiFWY1wlbR7XBMfauZYHgYGdVtn9U=
Subject key identifier: 32:99:3C:D9:AF:F8:8C:8B:70:EF:DF:7B:81:69:92:2E:3D:77:66:7C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F558BE991E50507735A03EA80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/66c405bf-eb0e-36fa-8c8e-8e03883c3702.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 165.94.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:55:8b:e9:91:e5:05:07:73:5a:03:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=30d0742f-a02f-42a0-b77f-b500448decbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:d1:59:c1:35:e1:c4:04:c4:4d:fd:cc:a1:
5c:bc:ea:13:91:36:20:9d:e1:e7:9d:7f:be:72:62:
4d:f0:7c:c9:73:93:a6:32:96:8e:48:cc:d2:60:96:
4b:34:e3:93:fc:1c:de:e6:af:77:a2:a6:4b:35:6b:
9e:6a:bc:69:cd:71:e3:8c:71:8a:24:74:dd:ae:87:
25:f7:a8:78:32:73:17:c7:cc:eb:33:ce:33:1a:f2:
f8:c3:13:82:63:58:32:50:33:ed:8f:99:c5:4b:19:
74:dc:b5:21:48:da:6e:e0:cd:a0:15:7b:69:48:f2:
0a:b9:31:72:bf:f9:c6:9d:73:3f:f3:9e:fd:79:5f:
e3:3e:d9:c2:bb:dc:ed:c8:b3:55:9d:4e:52:12:47:
59:f5:fb:15:4f:27:a9:7b:dd:c4:44:a4:76:7b:64:
6c:da:22:d8:dd:f9:f4:b8:6b:4e:2b:bd:b5:e1:b6:
28:75:52:fd:6e:f5:3f:39:46:6e:f0:ca:ba:30:44:
8b:4b:96:b9:bb:2b:c2:22:67:47:08:e9:2b:6c:94:
df:bf:42:b3:fc:72:96:77:14:20:ea:f0:15:cf:7a:
8d:b3:1d:17:17:8a:af:e4:d5:77:40:d6:62:ca:47:
9b:2d:9d:28:bc:fe:b8:7d:e2:42:65:f0:22:a2:28:
fd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:99:3C:D9:AF:F8:8C:8B:70:EF:DF:7B:81:69:92:2E:3D:77:66:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/66c405bf-eb0e-36fa-8c8e-8e03883c3702.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.94.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:db:e8:2c:e7:03:f5:2a:29:65:d7:88:54:9c:12:e9:cc:cc:
f8:ea:c0:fa:60:17:bc:8f:45:e8:24:4a:01:a8:b6:45:8d:b5:
cf:07:a3:8a:66:25:b8:58:f9:8a:18:08:c7:65:8f:1d:2d:70:
27:a0:48:65:d7:6f:78:50:36:e4:13:3d:d0:2a:f7:0c:1e:0f:
e8:92:8a:bb:d6:70:99:b5:96:be:99:ff:db:fb:d4:66:8b:21:
db:2b:49:a5:8c:83:c0:e9:e4:2e:10:55:e6:97:1a:75:fa:2c:
8f:5e:83:e9:78:0e:35:cd:5a:ac:b6:eb:2d:3f:41:66:bf:c8:
32:5a:90:a4:36:da:3d:4b:e3:c6:52:a9:f5:50:ba:5b:73:9b:
73:02:1d:08:27:d9:83:19:94:8c:8c:cc:21:8d:47:ba:ff:77:
2d:c7:6f:a3:c6:66:9b:6e:5e:95:d5:b7:18:2e:fd:fa:de:ea:
2f:02:54:2b:a0:21:d1:38:9d:dd:90:22:b9:ad:0e:30:e7:19:
d2:63:0b:4d:e9:a2:68:58:0c:69:1c:e6:a8:33:55:b0:be:10:
1e:71:9b:e3:c9:7f:fd:a6:c4:d8:91:c4:95:e8:ad:a1:2d:ba:
af:b8:b1:a9:c3:75:61:78:7d:47:7d:56:5e:2f:db:49:7f:93:
1c:60:d8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:01:00 2025 by rpki-client