Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/98b63f9f-b9e2-3536-a152-d86cfdfccac4.roa
File: 98b63f9f-b9e2-3536-a152-d86cfdfccac4.roa (raw, json)
Hash identifier: 0QyHCWSgwVqD6uWPMUt4E7SY7XfPeCf+r/4+qB5TOuQ=
Subject key identifier: 5A:63:40:AB:4B:77:62:C8:E7:52:BC:F2:4B:E4:90:F2:F6:CA:C8:6C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E22B772D04635A87CA87326C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/98b63f9f-b9e2-3536-a152-d86cfdfccac4.roa
Signing time: Sat 04 Jun 2022 12:00:00 +0000
ROA not before: Sat 04 Jun 2022 12:00:00 +0000
ROA not after: Sun 10 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 129.160.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:22:b7:72:d0:46:35:a8:7c:a8:73:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 4 12:00:00 2022 GMT
Not After : Jul 10 04:00:00 2022 GMT
Subject: CN=9d85b1a2-33d5-41a9-bf6b-afa4440c72d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:1b:56:25:37:b4:30:db:55:44:02:f7:15:
62:a1:a6:21:f6:00:39:07:80:cb:79:36:2e:df:c9:
db:d2:fc:01:f7:2e:31:1d:ce:b3:e3:85:cd:ee:a4:
d5:db:1a:cc:52:74:ea:18:c4:bb:16:fc:0e:f3:e8:
9e:d4:c3:cc:ea:a1:f4:b6:06:a0:12:80:82:13:67:
41:52:30:61:2a:26:58:b6:6f:16:c0:5a:a3:eb:29:
23:11:2d:b6:b7:3f:db:26:95:58:1d:87:c1:9a:3b:
bd:54:d8:37:7d:bf:ac:fb:61:60:da:69:15:27:79:
1e:55:f4:31:6b:75:c7:60:74:7d:7d:8b:a5:1a:75:
8d:20:9e:02:af:b8:f7:a1:a4:0e:d8:06:77:82:cb:
32:52:82:16:5b:0e:4a:96:a6:16:45:1d:10:20:ab:
25:12:fa:fe:0a:46:02:c5:c9:ec:89:7e:c9:36:71:
17:f3:a7:48:7c:e2:e2:e0:d5:97:9a:4a:a1:7e:48:
56:45:02:24:a3:f3:00:3d:b5:6f:72:c7:1d:83:97:
e5:7a:89:10:3e:26:96:9a:ff:a1:9f:f7:48:f3:71:
16:4d:58:61:0c:b9:fc:c4:10:5b:2c:29:32:cc:8f:
5e:50:a2:52:40:4c:85:3f:d5:c8:a8:68:79:73:54:
b1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:63:40:AB:4B:77:62:C8:E7:52:BC:F2:4B:E4:90:F2:F6:CA:C8:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/98b63f9f-b9e2-3536-a152-d86cfdfccac4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
129.160.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:23:e8:65:45:69:8d:48:1d:75:2a:b5:7e:23:95:86:7a:4b:
1c:a6:a4:ff:57:72:ef:ff:ef:08:47:45:59:88:96:41:de:3f:
d5:e9:aa:59:a6:d0:cd:e4:ef:5d:6a:e9:4f:33:b2:69:cb:1d:
3f:ca:12:b3:a3:52:cf:90:b0:a7:14:b3:11:e7:2a:37:c0:f3:
21:3c:c8:e3:eb:ad:3b:b2:10:f3:8c:63:02:f6:1d:96:15:ea:
66:1c:d8:9b:62:f6:ef:5e:38:69:55:3a:0a:b0:5f:ac:02:ae:
f7:95:05:37:87:fe:ce:88:47:57:28:8a:e8:bd:0a:28:b4:cf:
db:e4:c8:43:55:90:87:ce:a4:6a:af:19:5b:07:cc:88:77:7e:
a1:7d:b5:81:7f:6c:c5:1b:44:80:e9:3c:00:19:a7:a5:16:53:
5b:90:50:40:86:80:46:51:f1:6b:f3:97:5d:90:26:3f:2b:a9:
a1:d6:61:aa:b3:30:3a:82:de:21:e7:51:c1:03:f0:29:fb:b0:
14:7b:a1:1e:cc:a8:9a:0a:94:9b:83:3a:4b:11:b2:6d:d9:93:
ca:c3:36:59:eb:a0:27:6d:75:a7:21:95:84:da:8f:c6:ae:e5:
a6:23:1d:77:2f:9c:e3:40:0f:a0:29:34:40:89:79:2c:08:9a:
9f:2b:6f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:56:17 2025 by rpki-client