Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a54d08e9-f332-3dfb-a92d-ccb111265835.roa
File: a54d08e9-f332-3dfb-a92d-ccb111265835.roa (raw, json)
Hash identifier: QSIZ2lP76hJ/CNyq9CcgVqJAKcJZ1cJVOmkdfXn/UuI=
Subject key identifier: 5D:B9:91:CC:9E:B3:26:08:55:53:95:0C:26:24:A2:9F:AF:B1:21:37
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D940C2D0E62625731BC7EE800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a54d08e9-f332-3dfb-a92d-ccb111265835.roa
Signing time: Fri 15 Apr 2022 04:00:00 +0000
ROA not before: Fri 15 Apr 2022 04:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 141.186.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:94:0c:2d:0e:62:62:57:31:bc:7e:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 15 04:00:00 2022 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=9a004254-9b51-42ef-b42d-f78bfc0e5be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3e:83:3f:92:0f:b6:74:4e:70:f8:3c:e7:25:
0f:b6:cd:0d:81:f3:1c:d5:30:2d:ba:86:68:44:03:
55:b7:5b:28:38:1b:d3:0f:ea:3c:e8:6e:27:9b:4e:
64:9c:f2:2a:fa:ad:d8:68:2e:c5:12:26:c2:ba:02:
15:94:34:44:5f:f5:10:69:a0:3e:9a:73:df:11:97:
3d:a8:7e:ea:27:3f:b5:82:74:53:08:6f:48:33:34:
a1:8d:8e:6f:fe:46:41:ad:86:91:b5:7c:52:33:cb:
e2:66:b5:08:10:a9:09:83:b7:4f:2d:b9:c2:55:5b:
35:42:28:4b:a3:36:a4:e8:93:46:b9:95:53:6a:de:
eb:46:fb:59:58:41:82:36:77:f9:68:28:8b:91:97:
66:ef:cb:3e:d4:51:65:6d:0e:58:0b:c3:b8:66:34:
3c:30:60:33:75:9e:bd:91:00:0f:45:11:47:98:60:
12:b0:75:31:f2:75:0c:35:95:b8:59:25:96:da:0c:
17:27:cc:2a:bf:be:2a:05:06:43:14:4f:58:5a:ab:
95:0e:7f:06:4b:d0:ed:bf:89:f5:65:fd:64:26:92:
fd:ee:9b:7c:fc:7c:af:e0:b9:16:ad:ed:95:6d:9b:
92:64:3b:af:a6:40:b2:ef:6d:b2:82:13:78:58:73:
67:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B9:91:CC:9E:B3:26:08:55:53:95:0C:26:24:A2:9F:AF:B1:21:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a54d08e9-f332-3dfb-a92d-ccb111265835.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.186.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:27:db:67:c5:81:80:cf:b7:51:93:09:c0:2a:35:da:7b:b0:
41:9b:99:30:50:09:e2:e0:c1:17:aa:73:2f:5d:53:fd:bf:05:
e1:5e:1e:42:9a:0f:96:ed:8b:86:3f:6b:f1:ec:0c:17:a7:e2:
16:e5:c4:88:c2:d0:70:a7:92:d1:28:24:f3:85:a4:dc:a0:9a:
45:96:cf:05:a8:52:c4:6a:fc:0c:11:26:f7:ea:ea:db:85:9c:
3c:8c:52:b0:96:7f:8a:af:af:8c:55:67:57:d5:0e:28:42:bd:
84:ce:50:07:9b:77:15:26:c2:9b:e3:87:1a:71:6c:8d:21:57:
98:15:d9:58:37:c6:90:56:d6:6e:58:04:b6:dd:31:a7:b4:46:
fb:29:49:3f:ff:ff:c3:f4:d1:5b:6b:98:b2:24:6e:cd:3c:36:
5a:3e:eb:83:0c:3d:88:bf:2e:f5:5d:62:d0:61:67:fa:81:ed:
68:e1:67:e8:11:55:25:6a:1f:d2:e8:e9:14:d1:be:e8:22:a6:
63:26:92:91:3f:9e:c5:4e:55:82:6f:50:3d:ed:fd:17:48:f6:
d2:43:63:8b:36:73:cd:da:01:28:57:ca:c7:90:dd:9c:01:df:
96:24:bc:73:62:2b:33:6b:94:c3:f7:64:84:f9:8a:d2:3c:10:
cb:47:f8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:07 2025 by rpki-client