Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c69ab95-efe4-36ee-b72c-3d1dcdf059eb.roa
File: 7c69ab95-efe4-36ee-b72c-3d1dcdf059eb.roa (raw, json)
Hash identifier: 92pTuW6uRO1xPCShlCyLXuV+h2AI+u/t4IU2t762Xfw=
Subject key identifier: 5D:C2:A0:F6:2A:B0:AE:5A:0B:44:7C:8E:05:C9:01:D0:CB:A9:3E:F1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E89932184E08E2F0AA0F62470
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c69ab95-efe4-36ee-b72c-3d1dcdf059eb.roa
Signing time: Mon 11 Jul 2022 12:00:00 +0000
ROA not before: Mon 11 Jul 2022 12:00:00 +0000
ROA not after: Tue 16 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 138.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:89:93:21:84:e0:8e:2f:0a:a0:f6:24:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 11 12:00:00 2022 GMT
Not After : Aug 16 04:00:00 2022 GMT
Subject: CN=41b3b73f-d29c-4490-af6a-937ddb0dabe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:81:48:ba:23:30:00:fa:6d:9f:66:ce:38:86:
b4:fa:19:4d:c0:3f:06:5c:64:7e:ad:fa:ac:54:c9:
d1:7b:1b:71:81:a4:76:8a:d2:2f:75:58:e9:c1:27:
52:5c:66:64:3e:f7:80:ef:4a:0e:b4:5c:fe:77:dc:
1c:78:43:0b:a7:9c:a8:30:41:1b:b2:9d:f9:e6:d3:
90:cb:d2:26:19:5a:1d:d0:4f:a8:26:4a:d3:c2:b3:
1a:ae:d8:ba:3f:3d:1a:09:d9:d2:d9:d7:e8:2e:0b:
47:ac:fe:39:aa:93:f0:98:08:6c:d0:8a:74:b4:93:
36:6b:5e:b3:fd:35:e4:ea:ef:fe:d0:2f:39:dc:04:
99:eb:b7:f3:92:bd:5d:0d:e6:d9:cc:cb:78:bd:9b:
81:dc:c2:b3:79:61:1b:38:97:86:9c:d3:86:7e:80:
e1:3f:27:72:30:5e:e3:51:a1:ae:81:a7:44:83:54:
e8:51:c6:e5:bb:ee:cf:b2:22:4a:db:56:d9:99:56:
a6:5d:3a:6f:9d:5d:3f:c6:a3:67:44:85:2f:96:ba:
75:f1:7b:3d:4e:df:f7:f1:4e:03:38:82:03:1e:1a:
54:e8:5e:35:e6:08:ef:b4:d7:a8:76:57:3e:86:09:
c8:fa:54:43:9a:62:c4:11:b3:75:2f:0d:6d:f8:13:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C2:A0:F6:2A:B0:AE:5A:0B:44:7C:8E:05:C9:01:D0:CB:A9:3E:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c69ab95-efe4-36ee-b72c-3d1dcdf059eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
138.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:0d:26:f5:27:f3:df:ae:cc:bd:31:11:41:34:e7:70:b8:b7:
e8:36:8c:2b:d4:94:74:eb:a7:fc:f4:88:f4:ee:56:fe:8a:83:
02:db:f0:5b:05:ac:ee:fd:8b:21:59:1e:a8:3b:c6:9d:4e:72:
28:ae:74:ce:1e:7f:92:a2:43:84:b3:f7:21:ac:f5:cd:22:3a:
30:1c:a0:13:03:3a:6a:c2:98:36:af:6b:04:e5:7d:ea:13:4b:
66:17:57:5e:04:74:b3:f6:90:78:1d:1c:22:4a:cd:06:e9:13:
66:94:55:0a:a5:c9:ab:d3:1d:6c:f3:ad:68:42:09:37:22:a8:
06:cb:f1:d5:aa:c6:47:b7:67:c1:a8:4e:7f:65:84:c1:29:20:
4c:71:c4:c4:e2:a5:a3:cf:13:a3:ab:76:4f:77:28:22:f3:16:
1f:43:a2:a3:61:a7:71:56:ea:3b:ed:4c:95:0e:8b:22:0b:7c:
46:a4:53:cd:54:01:05:f3:ae:be:20:b9:4e:aa:49:ec:a2:ef:
59:d8:29:03:c7:31:00:56:01:ba:0d:40:ce:7d:87:80:24:14:
d1:bd:16:e2:8e:44:c8:09:cc:dc:5a:f3:78:d8:49:52:d1:a8:
45:6d:0a:0c:9e:aa:22:06:9c:fb:6b:f0:e6:84:18:3d:b7:ca:
c9:fb:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:43:04 2025 by rpki-client