Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7330f2a2-9b70-350d-a592-454610e00ac6.roa
File: 7330f2a2-9b70-350d-a592-454610e00ac6.roa (raw, json)
Hash identifier: C23HaGZYHAQvgLu2KSJZeOfwQ4fAQs7o/1Rt1fY2uWg=
Subject key identifier: CB:7F:FB:C3:E1:B9:88:D0:5B:0C:CE:2B:38:1A:2E:D7:7C:B4:1F:EA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA70F365EED34D65D6E13ADC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7330f2a2-9b70-350d-a592-454610e00ac6.roa
Signing time: Fri 21 Oct 2022 12:00:00 +0000
ROA not before: Fri 21 Oct 2022 12:00:00 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 153.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a7:0f:36:5e:ed:34:d6:5d:6e:13:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 12:00:00 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=3f6cafcc-1963-4db7-831f-18b989f44ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:e5:1a:14:cf:c0:86:93:93:00:47:76:c2:
6f:3f:bb:35:07:c1:b2:e1:9d:97:ea:e6:3b:cc:8a:
af:b6:7a:4f:94:18:8d:c3:85:a4:58:ea:ed:4f:eb:
ab:0f:bc:49:fa:fd:22:94:34:27:f3:88:82:54:d5:
39:e0:ce:c4:22:ad:61:5f:2b:36:f6:c8:a5:f6:1b:
f2:6a:f9:26:24:44:ec:84:f8:19:d8:ce:6f:ee:f8:
3b:0d:cc:af:d9:51:8d:de:2e:fc:b5:74:40:d7:61:
6e:95:41:a2:42:74:0f:b1:a0:ce:9f:ff:24:81:b8:
6f:28:17:10:05:3f:26:d6:b1:28:95:87:cd:78:92:
31:ca:18:93:52:ea:1c:cf:63:3b:80:d1:94:9b:db:
c3:6c:d7:0a:ff:f9:1e:1e:ff:79:3d:fe:90:01:ee:
e0:50:1c:44:08:76:e7:8b:66:71:b2:45:54:d3:03:
90:81:f4:ea:50:cd:6f:fb:04:42:e9:6f:2d:ed:dc:
d2:3b:90:86:f8:6c:78:5a:d2:e0:7b:33:30:dd:4d:
f9:07:45:98:98:8d:3f:f7:dd:1e:47:99:0c:86:80:
5f:54:05:67:da:4c:d3:fc:f7:3d:25:ff:45:4a:33:
11:97:ee:be:5e:92:cd:df:6d:b4:74:91:9f:22:8f:
48:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7F:FB:C3:E1:B9:88:D0:5B:0C:CE:2B:38:1A:2E:D7:7C:B4:1F:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7330f2a2-9b70-350d-a592-454610e00ac6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
153.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:22:93:aa:d1:69:ad:32:f9:84:cd:21:57:80:40:fc:5b:52:
bc:3d:66:07:1f:a3:d6:05:3a:85:b2:81:16:d3:f7:5d:6e:01:
f5:07:44:b6:21:65:ff:a1:ca:39:42:12:25:a7:65:c5:d6:e9:
40:f0:18:ca:8d:bd:bb:5d:9c:7c:97:69:67:cc:d9:b7:4f:36:
5e:60:0a:b0:04:45:04:63:63:06:fa:94:35:7a:a1:ed:0f:a6:
1c:53:e4:a8:d9:25:de:d9:11:f8:40:a0:04:aa:a0:52:c6:27:
49:31:76:24:0d:1d:a8:ca:c1:5b:d2:b6:68:78:0d:ae:6e:18:
61:a8:bc:4b:e8:a0:6e:a7:0c:1d:48:00:4f:df:2f:15:1c:54:
7b:d4:d7:df:df:30:7f:c4:8d:1a:16:17:06:e4:bd:5c:3f:3d:
54:d4:3e:da:b1:a1:1e:cd:2d:1b:31:60:60:5e:43:12:5f:a9:
f0:37:bb:22:bd:39:9d:96:92:c7:70:75:67:1d:47:02:5a:36:
21:cd:87:39:34:60:b6:91:c6:c3:0d:77:b6:5d:76:a8:08:6f:
91:3e:4b:3e:cc:31:c7:f1:eb:fc:75:30:2d:b6:81:3d:7c:66:
7f:60:7b:68:7f:6b:b0:6f:37:14:09:15:a1:29:9c:5e:3c:d0:
fe:30:f1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:24:33 2025 by rpki-client