Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a10fd4f4-4992-32c9-ba41-03c9949085c4.roa
File: a10fd4f4-4992-32c9-ba41-03c9949085c4.roa (raw, json)
Hash identifier: LKS5Q1bKRHti4jDHcuWnDVdxyvfmlDPkz1GDBec3PUc=
Subject key identifier: 39:60:F8:6F:DF:3F:13:44:28:0D:C0:B4:7A:B1:00:43:F1:EA:33:53
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C904553F8ACF19CEE67FC2580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a10fd4f4-4992-32c9-ba41-03c9949085c4.roa
Signing time: Wed 12 Jan 2022 05:00:00 +0000
ROA not before: Wed 12 Jan 2022 05:00:00 +0000
ROA not after: Wed 16 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 158.221.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:90:45:53:f8:ac:f1:9c:ee:67:fc:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 12 05:00:00 2022 GMT
Not After : Feb 16 05:00:00 2022 GMT
Subject: CN=750ea97c-3603-4169-9cad-a58f3b3c224a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f2:bd:f9:44:2b:0c:7a:9c:df:5b:3d:6d:ce:
34:82:72:86:14:42:c5:03:2c:d2:0f:0c:c6:a6:6e:
8b:7f:c1:83:eb:f3:61:1e:07:20:e1:49:19:2d:da:
58:77:1b:7f:e2:0c:b7:26:2a:c2:fd:3f:23:85:42:
1a:70:46:d7:2c:80:04:37:d3:a9:4e:88:91:0f:03:
35:b0:93:c6:d9:a8:52:2c:66:2c:a9:30:75:29:22:
e2:c7:ce:0f:9a:f4:be:cb:2b:1d:9e:b8:25:c5:f9:
cc:dc:10:f7:48:3a:55:cc:2a:8b:af:f0:23:93:65:
9d:b6:9b:ad:57:f8:19:c4:52:a6:46:ac:e1:2e:c0:
3b:be:d1:3c:c7:25:51:30:e0:12:e4:62:61:19:e9:
84:1b:da:8a:21:38:3d:66:d4:42:91:30:96:02:64:
c5:ee:64:5b:7a:b7:0b:4e:65:ed:e9:5f:b2:f5:63:
dd:b9:c3:77:be:ca:e1:72:1d:fd:ef:10:0a:6e:37:
1a:e0:79:b2:c4:fc:8b:5f:20:a7:bf:33:1e:ca:54:
05:f5:d9:4f:02:78:f4:16:db:c7:c4:67:f5:d6:dd:
e4:9a:87:f4:b2:c7:44:99:77:cf:3d:e3:6b:3e:54:
4b:6e:c8:7f:64:29:99:de:5e:06:1e:36:f7:7e:ec:
12:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:60:F8:6F:DF:3F:13:44:28:0D:C0:B4:7A:B1:00:43:F1:EA:33:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a10fd4f4-4992-32c9-ba41-03c9949085c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
158.221.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:5a:6d:5c:09:ee:d7:02:20:63:a9:2f:47:1f:24:c7:a3:0c:
d4:09:9a:31:d7:54:1a:7b:2f:f5:f6:07:4c:27:fe:3f:a1:aa:
74:28:cf:e5:d0:7b:ad:29:ee:ea:71:b1:ce:81:0c:b6:de:90:
d3:07:57:0f:25:66:e0:48:aa:d0:10:d4:91:85:8e:0f:14:7a:
70:35:18:38:f0:6c:9b:29:ea:3c:59:69:c0:94:36:5f:ec:e9:
10:21:1f:30:21:16:bd:e3:f3:47:a8:2a:b1:a0:a9:96:ac:84:
3e:85:bc:1e:eb:a8:9f:19:d8:a9:3d:86:fd:ab:62:46:b4:1f:
ef:c2:47:f4:aa:c5:3b:b6:6b:04:4b:64:a4:38:aa:e8:5b:4d:
04:c8:3f:86:ff:11:4f:d9:fa:03:4d:82:d7:73:7f:1e:5c:2f:
84:e2:29:15:02:4b:78:28:79:5c:32:1e:12:32:d8:f3:8c:c7:
a6:56:e0:a4:7c:dc:d4:f5:5e:eb:2a:98:13:4a:a5:ec:41:82:
19:8a:cb:12:81:91:eb:08:9d:fc:ac:63:90:7f:e3:65:03:fe:
50:15:19:de:cb:88:2f:38:d8:5a:97:91:f1:6f:e8:7b:69:6a:
fd:a0:0c:fa:3d:0c:d6:bf:72:68:f1:e7:31:4c:ed:30:98:d8:
42:eb:29:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:51:36 2025 by rpki-client