Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/72703e39-fc3a-304a-9377-afce48d21ebc.roa
File: 72703e39-fc3a-304a-9377-afce48d21ebc.roa (raw, json)
Hash identifier: SnnTH5UcoIX9LkMVDL0viheChh3H/Tfh5REirNHYU7I=
Subject key identifier: 07:43:50:C2:3D:BF:6B:D2:A7:27:D8:34:79:96:93:68:91:A8:6E:16
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401A4E14CE4B9003EE5690FA00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/72703e39-fc3a-304a-9377-afce48d21ebc.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 144.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:4e:14:ce:4b:90:03:ee:56:90:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=778640aa-8ae7-4b85-818f-eaac10fbca88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:93:9c:2d:ab:19:a9:32:49:73:35:65:67:a4:
94:77:57:3a:16:58:a4:b5:48:ec:f9:52:b9:3b:bb:
f5:34:c0:20:ef:6b:f5:d5:48:b8:d0:40:c4:d6:67:
dd:ad:ac:7f:83:4b:46:73:98:8d:cd:f1:fa:a8:62:
81:25:27:d8:9d:f2:68:fe:bf:95:58:23:13:8a:0d:
ad:63:19:e1:49:71:d7:04:77:37:3a:e8:80:77:4b:
64:36:c3:40:a4:4d:1d:a1:3b:55:b4:7c:35:71:62:
a3:bc:ef:0a:15:7c:01:a4:38:cc:a8:52:36:8f:87:
e1:4d:7c:98:c6:34:3b:4a:3a:82:b2:44:4e:06:8e:
4d:28:26:72:d9:46:cb:d0:57:fa:5f:00:ef:be:86:
1f:24:99:e1:8c:71:c4:98:e7:9e:f1:9c:fb:e9:4d:
fe:79:c6:74:79:61:f0:66:60:0c:c8:c1:47:5e:80:
58:76:09:3e:23:3b:d4:de:3c:36:a1:a6:6c:b5:c5:
e1:c7:26:65:22:2d:79:b2:2f:0b:22:a0:02:4a:71:
f1:1e:2f:04:d1:ad:44:e1:fa:5c:ef:1e:0c:3b:bf:
3b:c4:7d:52:69:77:2a:bd:86:ef:f6:80:1d:e5:58:
4e:fa:43:9c:33:b3:42:6e:2b:80:a7:67:fa:05:1d:
c9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:43:50:C2:3D:BF:6B:D2:A7:27:D8:34:79:96:93:68:91:A8:6E:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/72703e39-fc3a-304a-9377-afce48d21ebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:a9:be:d1:ca:ab:53:09:f5:a3:5b:bf:8b:e9:31:af:cc:cf:
2d:d5:f7:5c:16:3d:b0:16:58:43:ec:f0:ff:f2:aa:c9:9f:d8:
19:c4:8f:05:5b:36:d7:26:81:7c:18:97:78:59:29:83:2d:ad:
50:6f:96:66:d8:52:a6:13:89:7e:5f:1c:77:0e:f7:d9:52:0f:
71:ef:8a:aa:95:f4:64:ef:f8:8c:cf:46:06:8b:75:00:39:6c:
5f:38:41:7d:53:6d:e7:9b:5f:33:58:fd:2f:86:60:f6:93:ed:
5d:90:99:ee:2d:d8:8c:69:a5:27:88:42:1b:a4:4f:cc:7e:cf:
68:3d:be:3d:fb:45:0d:2b:9f:e9:7e:06:63:ad:45:77:9d:b3:
c9:38:97:0e:66:8d:2f:1c:a8:85:e2:c8:bc:ed:e3:ce:e7:0d:
bc:b5:b4:a0:5e:3b:73:6f:6b:0e:a8:d3:ab:e9:86:43:56:54:
9a:61:2c:3b:f6:73:ad:1a:11:50:02:dc:53:31:9e:fc:5b:5b:
49:bd:a8:04:4b:c1:6c:84:3a:8a:e0:5f:a5:b9:57:b9:89:87:
20:0a:a7:ec:54:1a:ce:dc:4b:49:29:4d:ab:9f:59:86:6e:02:
97:db:fe:3f:f9:f2:ff:13:d8:f3:46:84:31:a8:2f:a7:ab:46:
ce:f7:c5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:46:40 2025 by rpki-client