Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8640288c-fdb7-3cc2-8820-14d83d0be275.roa
File: 8640288c-fdb7-3cc2-8820-14d83d0be275.roa (raw, json)
Hash identifier: /TpLu/EWPUff5ddmO2VLlghxpy0rYcrj/PzGL4Q8kt4=
Subject key identifier: 8A:AF:E0:DB:AE:75:20:9C:3E:B7:68:2B:33:50:E8:21:59:3E:2E:7E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3183DB9A2DE9457D4FB57380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8640288c-fdb7-3cc2-8820-14d83d0be275.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 170.58.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:31:83:db:9a:2d:e9:45:7d:4f:b5:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=48847be0-6838-429a-bfe0-a427a89c628c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:fa:0b:31:a6:4a:d7:58:f5:6d:a0:a7:1f:
b2:b6:35:44:d9:2b:d0:18:66:5d:92:a8:8c:87:28:
fc:03:99:fc:60:a6:1b:b6:fa:9f:62:10:c0:a7:be:
99:36:71:e2:6d:94:ea:1b:1e:85:87:70:db:5e:25:
fc:96:32:5c:c1:49:9d:a2:84:5d:b5:4d:e5:cc:3c:
8e:6a:1e:83:9a:54:d4:6f:81:1c:2b:a7:d4:03:2e:
25:bd:05:fe:81:c7:df:52:14:38:02:53:73:73:9c:
7e:b9:ce:4f:cd:e1:7d:69:ce:bb:3d:27:82:51:f7:
b6:ae:7b:bd:cc:5f:f4:45:22:96:be:ae:54:a0:45:
77:ec:3e:c1:4e:d5:87:04:46:a7:4f:59:f2:3d:f1:
3e:27:ad:e2:e5:a1:cf:1d:17:94:61:f0:81:6f:f4:
0a:86:34:52:ed:1d:bc:59:d6:f5:70:78:75:70:f8:
e4:5b:24:c0:8f:8f:2d:c3:9d:55:82:b7:3e:fe:4f:
87:47:16:a8:ed:d0:f0:43:22:6f:c0:40:30:56:d2:
58:77:f8:17:46:ed:d7:ab:a5:0e:18:38:b2:c4:9e:
5d:17:28:90:07:44:f7:20:5b:fe:cd:b9:7e:97:2e:
41:0a:ad:67:f5:7d:db:6e:a4:59:ed:a4:fd:17:e0:
fe:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AF:E0:DB:AE:75:20:9C:3E:B7:68:2B:33:50:E8:21:59:3E:2E:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8640288c-fdb7-3cc2-8820-14d83d0be275.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
170.58.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:12:b1:61:a0:7c:2b:67:78:36:26:fb:7a:e8:3b:ed:bd:ba:
a0:82:1e:d3:55:cf:21:cc:0a:c4:3b:eb:cb:ec:c0:20:7a:84:
ee:77:e1:4e:81:00:82:50:7c:b3:7f:91:df:60:ff:d2:68:df:
71:1d:1c:ea:6d:0e:d3:78:6f:05:46:39:81:c6:35:0b:31:2f:
ac:ae:c2:4a:2b:b1:21:a6:0b:a8:9b:48:6b:34:cd:3b:45:68:
1d:01:27:e2:14:ca:d0:3b:13:7e:98:f6:e7:c4:52:43:84:f5:
35:5a:3e:11:95:e4:4a:88:bc:7e:f5:cb:29:bd:a6:d8:e5:a6:
9c:ad:fe:20:0b:b9:1a:c4:7f:35:37:03:67:7d:8d:82:55:3d:
00:c4:b9:fd:a1:5e:33:91:0c:eb:8f:74:2f:75:aa:e4:4d:10:
ff:ea:c6:9b:64:a3:9f:66:74:f7:a3:eb:18:df:a4:ab:3e:5a:
94:08:a7:92:7a:14:86:6b:7b:f4:0a:02:53:ec:b4:44:37:19:
eb:90:3e:1f:96:30:d1:58:ad:6a:56:d7:e6:88:4c:00:f1:bf:
3e:90:d2:5f:70:b7:c4:b0:c3:0a:13:00:d3:a5:38:f8:cc:e9:
0c:be:22:ea:4c:94:82:70:00:c6:ce:39:d9:7e:e9:96:bf:50:
c2:96:6a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:31 2025 by rpki-client