Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68ffcede-6fd4-3097-b1aa-a259b8d8dd06.roa
File: 68ffcede-6fd4-3097-b1aa-a259b8d8dd06.roa (raw, json)
Hash identifier: Sk918fO646GVYQmKzMyN1xwWugsk7qmn8SS7HmLLn4o=
Subject key identifier: AC:50:11:52:5B:E6:C5:06:67:9C:5E:D4:CC:78:38:6D:6B:53:D1:5A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F9E4E2C3E2CDE3554D5871300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68ffcede-6fd4-3097-b1aa-a259b8d8dd06.roa
Signing time: Tue 18 Oct 2022 12:00:00 +0000
ROA not before: Tue 18 Oct 2022 12:00:00 +0000
ROA not after: Wed 23 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 3.64.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9e:4e:2c:3e:2c:de:35:54:d5:87:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 18 12:00:00 2022 GMT
Not After : Nov 23 05:00:00 2022 GMT
Subject: CN=6b420fd0-a467-4a47-ad02-b3acd9b6a328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:67:7a:5c:ee:90:c4:f1:af:ac:0d:ea:cb:
88:8f:b2:d3:31:93:33:ed:a7:a7:38:00:d2:55:fd:
26:96:15:8e:7d:f4:75:6f:de:4e:16:7b:0f:30:bf:
ae:69:e2:03:22:87:60:66:88:0c:ff:43:c2:ca:d4:
6b:72:41:20:76:f9:f4:b4:44:ce:77:fd:54:5b:2f:
81:9e:bb:27:7a:67:9b:c8:fb:03:d4:74:ae:31:7a:
55:5a:06:eb:5a:81:05:67:7c:2c:66:d2:29:74:6a:
17:73:7e:05:0e:db:d6:1e:75:d2:bd:23:cb:f6:19:
6e:f9:09:28:99:8b:78:de:a7:96:c9:df:5a:f1:fa:
44:42:4f:a2:69:3a:3a:4a:6c:7d:c9:7c:53:58:6a:
18:8e:e5:b7:22:20:9f:83:64:cc:21:ed:13:33:47:
78:8a:dd:1a:b6:3d:fc:44:0b:ae:10:b8:06:a9:07:
0c:ab:13:c5:04:cd:43:20:ea:d6:3e:96:26:71:49:
15:08:b6:67:91:45:5c:9c:53:9f:67:6c:ab:c9:47:
b9:6f:dd:0b:a4:24:d4:9a:65:44:eb:e4:3c:98:8e:
41:9e:13:2a:2f:ac:b7:7e:34:9a:61:3d:e2:20:8a:
40:26:b1:a5:c1:82:db:ca:31:41:10:43:3a:3e:7f:
d8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:50:11:52:5B:E6:C5:06:67:9C:5E:D4:CC:78:38:6D:6B:53:D1:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68ffcede-6fd4-3097-b1aa-a259b8d8dd06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.64.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:7c:1b:e4:8d:25:dc:91:d1:28:5f:3a:a6:ee:8a:bf:e7:2b:
cb:d0:21:a8:26:4d:de:cc:df:42:4b:8a:07:45:b9:47:67:5a:
a8:d0:b2:9d:c0:bf:70:cf:5f:b6:2a:38:a9:65:7e:a5:94:b2:
6d:93:ca:1d:64:1b:52:2c:30:e4:0a:b4:47:31:db:b2:f9:2a:
e9:29:7b:01:d2:37:2c:c6:17:31:b3:c9:d8:33:c9:71:4c:70:
07:11:53:ee:bf:94:d4:de:0d:cb:e3:c6:48:55:ae:7c:de:3f:
26:5f:fa:7b:08:b6:39:84:aa:f2:8a:25:55:5a:bb:f3:c9:20:
08:36:2c:b6:fe:32:5d:2b:d4:1f:5b:b8:21:15:5e:e3:75:0b:
2f:14:2e:e5:39:02:c2:41:65:1e:a8:8a:ce:73:8e:51:1f:43:
8b:c5:a9:38:9e:9a:bf:a8:41:a2:52:0c:d3:42:56:1d:b2:a1:
ff:d2:fc:e9:6e:c1:51:e7:8e:9e:11:85:f1:20:fb:ca:94:85:
48:d2:ff:57:17:9f:29:d9:06:b9:ae:41:b9:74:2a:6b:8b:3a:
df:32:5b:a2:4c:71:3e:f5:8c:18:77:90:2b:33:7a:e5:3f:0c:
73:cd:89:a2:4e:99:16:55:0e:2a:6d:04:0d:24:42:97:b3:0b:
de:19:0e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:51:30 2025 by rpki-client