Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7ce19574-3070-3ce4-bd7f-95fdbe12203e.roa
File: 7ce19574-3070-3ce4-bd7f-95fdbe12203e.roa (raw, json)
Hash identifier: dFHfzAi+sStejP82pNhFxQ/rrSljQkGFF/lgyQs8Jno=
Subject key identifier: 4F:65:E8:AD:F7:37:77:90:C1:EE:52:D9:C3:6F:88:B4:B5:A8:7A:B1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF70246DDD1D3CDC90BD1ED80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7ce19574-3070-3ce4-bd7f-95fdbe12203e.roa
Signing time: Thu 19 May 2022 12:00:00 +0000
ROA not before: Thu 19 May 2022 12:00:00 +0000
ROA not after: Fri 24 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 192.39.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f7:02:46:dd:d1:d3:cd:c9:0b:d1:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 19 12:00:00 2022 GMT
Not After : Jun 24 04:00:00 2022 GMT
Subject: CN=10a2d806-460a-41f9-b2b4-e1df81c6a8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:c8:14:2c:0f:f6:19:4f:61:8b:1e:59:de:
98:28:9f:33:82:a7:99:ca:3c:13:99:c6:3c:84:4b:
18:5f:7d:5c:9c:b5:1e:f9:e2:5b:2c:66:4e:49:25:
b8:b0:72:21:b6:ad:dc:75:04:18:1a:63:9a:f0:39:
99:ac:f1:8c:b8:26:2a:56:f6:2e:b2:b1:04:83:79:
58:cc:97:5c:6b:ce:0c:d5:2a:e5:93:d5:fe:de:30:
0d:c4:2e:b1:f9:0f:bb:23:4c:85:40:9f:c1:26:70:
d2:f9:ca:54:96:23:f7:96:3b:e2:e4:26:6a:db:59:
b1:db:3f:ac:1d:f8:aa:32:90:bf:39:03:80:1b:d4:
14:68:e9:cb:d3:f0:fb:88:05:14:7e:b2:ff:be:a6:
7d:a6:ae:6b:bc:95:08:5b:3a:fd:d2:42:f2:c5:d9:
a8:a9:2b:38:59:32:bb:b1:e4:3a:a1:8f:fd:56:de:
36:e3:6a:01:1a:1a:8a:9a:d6:5c:a0:81:2d:3f:90:
ee:c1:39:b4:ed:cd:70:89:03:64:07:de:2e:1f:0d:
fe:48:0c:9b:b5:e1:0a:41:19:78:70:2e:4e:2d:e0:
4c:22:33:d8:35:76:b1:3c:c2:91:32:c4:12:99:3a:
f2:92:14:f3:fe:1b:3b:34:f9:c6:55:3b:cd:bd:95:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:65:E8:AD:F7:37:77:90:C1:EE:52:D9:C3:6F:88:B4:B5:A8:7A:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7ce19574-3070-3ce4-bd7f-95fdbe12203e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
192.39.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:d7:30:ef:5a:bf:56:b0:e8:1c:dd:7c:55:12:5e:5a:c2:fc:
f4:af:d2:ef:41:14:cf:f6:94:54:56:e5:b3:2a:a6:78:4c:fa:
7b:d2:76:47:0d:e8:33:1f:21:16:28:f4:60:94:93:c5:b4:a2:
7f:21:9b:e2:48:b3:50:b2:4f:3d:7c:21:44:54:63:66:7d:37:
7a:95:50:fb:95:09:cd:7f:6b:32:87:ae:06:22:b9:bc:50:33:
c1:9f:17:1f:7a:70:d4:66:f1:d5:69:e1:b3:94:4d:0e:79:50:
20:b3:e1:b9:11:45:3a:f1:d6:49:f2:85:3e:eb:f8:09:38:3d:
e9:3a:bc:55:2f:f7:19:cd:77:00:60:55:9e:3c:6f:74:6b:96:
1b:24:8d:79:58:6d:c2:a3:a2:05:99:18:bf:a1:15:5d:40:77:
55:fa:8c:af:7b:23:a6:9a:7d:24:6a:fb:78:da:5c:37:ff:54:
b6:53:89:ff:6d:40:76:42:af:1f:97:88:fe:e8:35:27:d2:14:
63:96:2d:79:65:55:7f:5d:73:af:f4:b7:97:94:73:12:bb:59:
59:33:36:47:d5:ed:a7:43:c0:ec:67:31:a7:31:6d:cc:aa:c9:
75:e1:38:68:c0:33:04:5d:87:79:06:b9:eb:ae:f3:4b:9b:0e:
b8:13:11:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:48:26 2025 by rpki-client