Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c820168-bccc-3ab4-9429-11f7e6245384.roa
File: 7c820168-bccc-3ab4-9429-11f7e6245384.roa (raw, json)
Hash identifier: FcmRjb/K/gxiXyIU/4Uo9sgz9SzMNOfCYnj268ebAG0=
Subject key identifier: 94:10:01:33:EA:C5:FD:4C:47:E6:5C:A1:05:1B:E7:B1:59:5A:49:6A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584094A5EB5E73805DC7CC423B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c820168-bccc-3ab4-9429-11f7e6245384.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 130.71.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:94:a5:eb:5e:73:80:5d:c7:cc:42:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=78d10bb7-edbb-40f1-b599-f47b7e197b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:30:8b:c5:a5:5e:f8:33:97:dd:b3:0d:15:dc:
51:3b:8a:ba:aa:41:6f:80:fe:da:fe:84:fb:b4:30:
f2:a2:d1:98:de:8a:0e:1a:d7:39:c7:9e:c1:7b:a8:
76:4c:a6:22:66:71:1d:2e:8d:47:57:b9:b9:aa:6e:
ee:98:67:93:bf:29:dc:19:b4:52:c9:1e:79:a8:a8:
89:2e:9f:ac:d1:6c:c4:95:fc:d6:f0:65:b2:44:47:
6d:0a:85:5e:82:2b:e4:c7:da:5c:7c:75:18:d5:e8:
53:8b:05:a7:59:9e:81:0e:2b:06:99:ba:13:81:41:
7b:77:cf:3b:bf:ef:64:0e:e7:eb:1a:2e:c6:1c:08:
85:3e:43:db:3d:6b:fe:04:45:d4:f9:48:e7:31:4b:
ee:1a:fb:83:84:68:a9:2f:7b:0c:b6:39:61:fd:e9:
01:3f:9b:b2:2d:b2:4e:07:9c:e4:7b:c6:23:56:82:
0b:bf:b1:d9:05:8f:8c:ac:4f:9b:8d:6e:ab:58:1d:
69:df:50:9c:cd:ce:6b:56:fc:2d:bc:87:eb:c5:66:
01:ca:c4:6b:4a:84:84:9a:47:35:a2:6b:ea:45:61:
df:7b:1e:c7:c7:f6:ff:f4:38:9e:01:03:f9:0d:3b:
22:f5:64:6b:11:98:ff:1c:06:90:0d:2e:ed:dd:e4:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:10:01:33:EA:C5:FD:4C:47:E6:5C:A1:05:1B:E7:B1:59:5A:49:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c820168-bccc-3ab4-9429-11f7e6245384.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.71.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:8b:89:64:01:b5:68:cd:c4:e0:49:cb:c8:46:e7:67:27:7a:
4a:00:a7:de:a6:15:68:b4:87:0e:dc:07:2a:49:9b:f7:67:47:
c3:4a:ee:be:92:43:95:d7:1e:4b:11:e5:d2:18:0f:b3:9e:ad:
ce:c1:4e:65:7e:b8:7f:78:34:af:64:f8:b5:d1:60:f8:6c:60:
d6:d3:8a:4b:b2:62:b7:17:8d:6d:d0:d6:61:42:ba:31:b4:96:
3d:85:53:89:e0:8a:ab:fa:03:44:fd:18:e8:9e:c1:0a:31:c8:
ac:ca:8c:3e:ef:f3:92:74:c0:7b:75:74:21:44:89:d3:07:24:
2b:4a:23:4c:0b:70:da:25:74:d7:4e:ae:cf:f7:2b:6a:e9:1e:
63:61:c7:69:f5:7d:ad:25:cc:05:60:ca:eb:92:42:70:43:98:
68:39:9f:64:32:76:50:15:fc:66:ee:4f:dc:92:85:6c:a4:34:
5d:de:9f:b2:b2:4d:93:d0:92:00:a2:1d:77:ec:58:ec:a1:2f:
5e:3e:ca:9d:49:76:1a:4d:23:4c:20:ad:be:c6:ee:c8:4e:e3:
1a:d9:dc:88:90:20:1f:97:15:61:0c:d9:b8:aa:20:f1:8c:6f:
b7:77:5f:ea:ac:78:ca:88:60:04:57:5a:7d:a4:af:4f:30:3a:
4c:b0:0a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:12:20 2025 by rpki-client