Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/698cda31-8d5b-360c-910e-2349ae32a4d5.roa
File: 698cda31-8d5b-360c-910e-2349ae32a4d5.roa (raw, json)
Hash identifier: PwYw/MxdTlzNIn8/QyR0owzHqGG1Fg1ChUuKUTlMthw=
Subject key identifier: 42:69:EB:F1:D0:12:A9:3F:CF:91:CA:DE:1F:C2:85:1B:39:24:19:CC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E9376869E732BAB69317CEE60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/698cda31-8d5b-360c-910e-2349ae32a4d5.roa
Signing time: Thu 14 Jul 2022 12:00:00 +0000
ROA not before: Thu 14 Jul 2022 12:00:00 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 192.39.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:93:76:86:9e:73:2b:ab:69:31:7c:ee:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 14 12:00:00 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=e5e87736-7013-46ec-ba8d-bce1fc502334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:48:b9:61:cf:be:04:79:62:6b:0a:55:56:
43:ca:5a:59:e4:33:23:8a:25:b2:f0:ab:9c:29:69:
c7:b0:8f:76:cc:df:71:02:54:a4:19:12:6d:35:f4:
3f:7d:e5:18:23:be:43:3e:1b:17:d2:18:37:c2:52:
0a:79:a4:bb:3e:b5:3f:f0:60:d5:af:d8:48:6e:61:
54:92:79:6a:f5:36:cc:46:a7:e6:dd:bb:ca:bd:96:
fc:0c:bb:70:c7:27:8d:75:2a:df:3e:8e:e2:e7:2f:
a5:39:b1:2d:05:ff:5b:9e:1d:46:cb:37:45:dd:f1:
e9:68:c3:6a:d1:4d:b1:19:5d:66:3d:a3:09:b7:e8:
da:e3:b9:43:8c:db:86:f1:66:64:88:1c:c0:ca:37:
0a:e0:d4:af:87:ab:1d:7f:f1:1a:32:68:0d:45:00:
93:be:00:5b:99:b9:33:19:a1:9c:95:3d:a5:af:bb:
13:0a:e6:7a:81:03:a2:05:1a:f1:8e:89:e6:6a:26:
6d:48:9d:6c:ae:1f:ef:63:d7:e1:d9:86:fc:97:95:
d0:29:77:a9:0f:56:ae:9e:46:72:bd:01:5c:3d:78:
85:13:9f:22:b4:e8:07:f9:cf:d2:b1:e8:72:49:39:
c2:35:30:81:7b:d8:84:53:71:d2:2b:ce:39:06:c2:
d5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:69:EB:F1:D0:12:A9:3F:CF:91:CA:DE:1F:C2:85:1B:39:24:19:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/698cda31-8d5b-360c-910e-2349ae32a4d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
192.39.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:31:92:98:0c:61:fe:37:bd:15:dc:29:9a:a1:64:6c:d3:4d:
19:2f:0f:1a:03:1c:4f:ba:8a:31:0e:14:67:c6:1d:13:eb:b0:
5a:cb:32:84:c8:71:db:5c:11:8c:a5:9d:21:0f:3c:07:45:3f:
03:5c:e2:c3:28:67:91:03:2d:20:d5:2f:73:85:8d:09:91:63:
a2:41:a8:33:41:1b:a8:64:6c:df:f6:ad:e4:a1:44:b6:c0:d8:
46:80:e9:a7:2f:be:6f:1b:e1:97:71:08:fd:fc:41:5a:3f:39:
39:92:43:0e:93:dd:75:d3:9a:a6:89:41:12:ef:2e:17:11:d3:
00:26:b6:d9:05:93:0f:fb:10:ff:66:74:ba:58:0b:c9:84:33:
30:c4:3d:cd:7e:0e:de:6b:ed:ee:ba:82:ac:aa:cd:2f:98:0a:
52:0f:01:d5:bc:f6:63:62:f1:7f:e0:0b:36:dc:10:2e:2d:cc:
69:b8:e9:5b:f9:b3:ec:49:e0:82:ad:24:99:b5:b0:13:25:7d:
a0:3f:f5:5e:94:be:85:6d:46:34:96:2d:f8:6a:c4:ca:ce:35:
21:92:58:44:6c:ec:35:78:76:b7:71:46:d5:80:f6:d0:e0:9e:
46:79:9c:5c:dc:30:41:ff:08:af:a0:e6:2e:8e:68:3b:21:87:
66:09:64:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:07 2025 by rpki-client