Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/856dfab7-ead7-3fda-b4fc-ad7dbd279bf8.roa
File: 856dfab7-ead7-3fda-b4fc-ad7dbd279bf8.roa (raw, json)
Hash identifier: qdqq8JnvFQchwL+bLgO+vesl17QNX+hXj341ZyNyyBI=
Subject key identifier: D3:24:E8:1A:29:F7:52:BD:4B:EA:F2:53:E9:4F:A6:97:0D:01:84:EB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E48DF1CD2D40652C65DB280B0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/856dfab7-ead7-3fda-b4fc-ad7dbd279bf8.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 146.78.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:48:df:1c:d2:d4:06:52:c6:5d:b2:80:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=ac91034e-0fe1-4c69-a55e-d5c16b6ec1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:86:b6:ad:62:30:14:03:3d:61:ac:e5:d2:
f6:ef:72:dc:dd:d8:7e:b6:02:f8:1c:dd:2c:8f:70:
13:63:d6:4d:b3:1a:f6:c5:29:c8:44:e0:84:fd:ae:
8b:36:b4:27:ad:03:88:77:03:27:56:86:ba:f2:e0:
cd:fc:f6:ef:0d:5c:8d:28:ff:2f:28:37:1b:cf:d9:
0f:69:7f:28:a1:c4:7c:3c:af:7a:ad:ec:ff:76:eb:
eb:4f:c2:ee:1b:2b:0a:7e:38:a9:06:83:ef:31:19:
46:0b:03:25:ab:d5:80:19:e3:16:4e:f7:7f:87:c4:
71:1d:48:3c:94:15:12:4c:ae:17:3b:6f:10:79:47:
2c:9a:89:a7:75:1d:29:7e:13:27:88:22:ad:b9:54:
c0:17:96:cb:e3:ce:3b:4d:80:cf:36:2a:95:f0:e9:
b0:53:88:3b:7b:90:97:5b:3e:fe:e7:d8:d3:f0:35:
1f:cd:f2:90:74:5d:ac:22:5b:20:8a:79:19:1a:d2:
4b:e2:24:2c:d9:c9:81:90:b7:e7:80:41:e7:4e:71:
34:b6:0b:88:72:f2:be:f0:af:e1:bd:2a:e1:b0:41:
09:9d:76:03:bd:28:35:4a:91:04:e0:ad:62:b9:40:
f2:78:1b:59:af:c1:ed:c4:b9:41:2b:1f:96:26:60:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:24:E8:1A:29:F7:52:BD:4B:EA:F2:53:E9:4F:A6:97:0D:01:84:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/856dfab7-ead7-3fda-b4fc-ad7dbd279bf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.78.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:b3:f2:ea:b1:8a:2f:39:04:78:3e:a0:d5:b6:a4:15:72:da:
82:9e:a3:70:ca:84:e9:f1:76:0c:df:08:cb:40:b9:54:9e:4b:
34:ff:23:25:f6:f8:a7:dd:a4:a3:d1:2d:1c:be:47:b3:f1:e9:
17:24:e6:e6:fb:60:27:f3:24:6b:ff:f3:8d:70:1e:73:74:fd:
7d:c9:55:e4:a7:f0:52:61:43:c0:a3:ef:f5:98:1d:93:a5:41:
5c:79:14:1b:b2:fd:72:97:c2:b0:01:1b:af:2f:9a:cf:6c:68:
43:fa:28:64:e8:d6:96:dd:13:03:ac:cc:65:00:ac:e3:94:b6:
ab:8e:51:61:7e:ef:f5:95:e8:4b:b8:a3:e5:68:4a:61:a7:9e:
1b:b8:91:fc:cd:b7:3b:c1:31:5a:56:2c:e4:95:1e:bc:af:b0:
2c:01:12:35:3d:73:9c:6e:06:f9:da:32:03:4e:2b:51:1c:70:
14:88:4d:91:72:c7:1a:e0:5c:e6:2f:85:9d:f1:4f:05:9a:a6:
99:54:f6:01:36:77:49:fa:ff:0c:19:18:45:82:29:d4:82:25:
34:8e:45:08:5e:b0:cd:ad:6f:13:53:dc:59:f4:ad:4d:63:d5:
00:d3:1c:e8:23:a1:e0:1d:9e:f3:e4:77:c1:b1:df:54:56:af:
ca:af:ab:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:56:16 2025 by rpki-client