Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9568068c-56b1-3038-acf2-23bf31b56ec8.roa
File: 9568068c-56b1-3038-acf2-23bf31b56ec8.roa (raw, json)
Hash identifier: UzyuU3+W1GxvXuogUpL5WkoEcf/f9mXAJls/2WmmwjU=
Subject key identifier: 42:FE:95:3E:C0:89:03:D1:7F:D8:D7:FB:07:CE:7B:27:C6:3F:25:BA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584072EA2203CB28DF0E1275A120
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9568068c-56b1-3038-acf2-23bf31b56ec8.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 165.208.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:72:ea:22:03:cb:28:df:0e:12:75:a1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=4b2e37fe-339f-4d1f-b739-6dc1d3d7553a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:08:59:71:67:61:7c:35:11:c3:5f:10:84:44:
37:46:22:0e:ae:e8:7b:10:a5:40:72:72:ef:60:13:
e8:9d:c4:c3:1a:1e:ca:74:33:2a:9d:01:9d:4d:d9:
31:2d:6c:8a:94:a9:d6:bb:0a:d0:27:5a:17:42:a4:
e1:8a:1a:a5:51:27:9f:66:08:c6:b8:37:e5:b9:83:
7f:52:bf:ec:b1:e2:de:d5:3f:ae:26:f0:28:16:47:
92:6c:9f:8e:7a:10:f2:6c:b8:d5:e5:18:63:cf:72:
a3:42:01:70:6b:06:50:bf:a7:de:07:2e:26:86:cf:
d9:24:65:39:20:b0:d8:09:8a:3d:19:2d:64:3c:57:
d8:2f:47:b1:87:f1:12:a2:5e:20:22:14:1e:83:c7:
50:8e:58:3a:75:11:88:a2:5f:87:dd:a2:00:4b:e5:
88:1b:84:e4:9d:2b:9c:91:c2:08:3e:59:af:5a:8d:
a1:d1:22:08:bd:d2:2d:3e:cb:6e:49:e0:47:d5:c6:
1a:bf:f6:6d:67:80:82:6f:99:3a:43:fd:24:06:0f:
34:3a:f5:dd:f2:dc:9e:dd:fc:75:da:89:84:14:ec:
40:38:72:fc:5a:8e:c4:15:af:4a:0b:f8:dd:a6:ea:
15:8e:0a:0c:8b:2d:d5:01:50:ab:32:33:33:90:b1:
d4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FE:95:3E:C0:89:03:D1:7F:D8:D7:FB:07:CE:7B:27:C6:3F:25:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9568068c-56b1-3038-acf2-23bf31b56ec8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.208.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:c0:91:4a:8a:3a:d6:b8:47:50:aa:d6:12:43:fa:ec:30:8a:
73:ca:2b:a9:9b:9f:c3:42:9b:8e:02:ec:a8:47:0a:53:54:f3:
27:a8:39:92:c5:d6:dd:1c:60:e9:00:aa:08:4d:18:a1:0f:e5:
25:19:d5:09:e9:8d:e2:70:ce:32:10:95:6f:ad:5d:2a:98:9c:
63:22:76:93:13:5a:84:63:ca:c4:6c:3f:32:69:10:c2:c7:5c:
7c:f6:92:9a:62:f6:a0:38:80:2a:e9:a3:a3:e3:1c:48:9d:d0:
91:88:2d:b3:89:1a:14:72:0f:ab:41:93:43:5f:15:36:4e:f5:
a8:a0:c9:16:0b:f5:be:10:63:f9:53:fe:da:4a:9b:cc:d1:54:
0e:1c:53:7b:de:61:1f:0c:8c:c8:74:3b:b7:d4:a3:a5:4c:60:
0d:8b:4f:a4:fa:96:60:8b:f2:8d:7c:d1:08:f5:ed:ee:36:23:
13:bd:a2:08:87:4d:82:91:68:a7:9d:cf:0f:c6:ea:1b:40:d9:
2f:09:00:2b:c0:97:b4:fb:06:27:12:a8:ae:76:28:ba:1c:bf:
ac:cd:cc:d5:fc:94:bc:9d:5c:1c:3a:f1:04:25:42:30:0d:67:
50:5a:7b:43:d7:ce:f9:4f:fa:ee:76:c2:ef:84:15:c7:37:4d:
b3:7d:85:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:52:05 2025 by rpki-client