Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a9e1131c-c8c7-32ca-a86c-65ea3d4eb675.roa
File: a9e1131c-c8c7-32ca-a86c-65ea3d4eb675.roa (raw, json)
Hash identifier: 8TSfANal3vzmuKpKNVr3qD8inREg1vPXpAIBVU7PrTg=
Subject key identifier: FA:E9:2C:76:A2:1A:9F:4E:79:70:53:C6:EA:24:78:DA:E2:60:13:6F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584094A5E50D5C47492F855CAF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a9e1131c-c8c7-32ca-a86c-65ea3d4eb675.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 130.71.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:94:a5:e5:0d:5c:47:49:2f:85:5c:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=0b98bcc3-5141-4f37-9790-91268f42d5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:74:55:8e:a1:be:b4:07:90:3b:69:ba:75:c1:
a3:b3:ca:8c:1c:97:6c:0c:b5:7a:86:a2:fa:9c:94:
4e:1c:6e:f9:b0:db:dc:a0:0d:75:3a:a0:60:d9:66:
55:06:9f:66:7c:db:78:8f:c1:ea:f4:b9:5f:69:8d:
b2:92:a4:05:38:fb:c5:cb:37:87:c2:2e:72:35:0d:
de:f3:df:46:9c:96:46:9a:d5:32:15:a5:f8:fd:18:
92:2f:81:23:90:bd:4f:de:6f:ee:5a:f6:4c:28:ad:
11:67:68:ee:0c:66:fb:87:8c:28:a9:0f:c5:77:d9:
a4:0e:cc:fb:8f:3f:60:fe:d7:5c:2a:21:d6:2d:fb:
04:b7:89:9b:75:ac:f6:f4:a3:27:ec:1f:df:2a:e2:
6d:18:03:1e:d1:e5:8e:dc:1a:02:1a:cb:f2:63:6e:
b2:f4:0b:9a:4c:7c:be:69:dd:5d:d6:2a:df:4f:8c:
ce:65:ea:a1:9c:bf:31:ef:43:db:98:89:a9:f6:c1:
27:36:bc:0b:3d:62:d8:45:75:86:2b:00:4b:12:bb:
55:0c:f8:eb:dd:67:19:e4:93:e1:e0:01:5a:52:e6:
dd:bd:6c:b4:6f:23:16:10:d7:31:42:9d:ff:35:1a:
70:15:88:0e:c6:41:b6:41:59:3d:3d:88:1c:93:9f:
2c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E9:2C:76:A2:1A:9F:4E:79:70:53:C6:EA:24:78:DA:E2:60:13:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a9e1131c-c8c7-32ca-a86c-65ea3d4eb675.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.71.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:55:bd:1d:45:68:ff:1b:06:08:79:9a:55:14:0b:47:fd:2e:
9c:2a:55:15:2f:32:45:a5:c2:b0:1d:20:5f:57:89:88:66:4d:
17:37:73:9d:eb:63:74:67:b4:04:4c:9b:d9:14:cd:74:bc:19:
16:2a:23:01:4b:aa:24:34:19:bb:83:a6:5e:a8:f1:42:6e:a2:
bc:9b:51:2c:11:00:7b:c1:da:c8:03:5b:59:bc:b6:c4:11:ec:
70:61:35:6f:a1:cd:d7:93:56:1a:c5:d0:63:59:c0:fb:de:10:
8a:d4:dc:7b:26:1a:ac:08:8e:60:94:7b:20:fe:81:56:08:f6:
c7:f6:f3:27:77:1e:af:d1:c1:57:27:a0:82:45:11:6f:21:4d:
a4:82:fe:a5:20:cb:54:78:be:d7:2c:f5:2b:c5:00:58:45:1a:
10:1a:41:64:36:4a:1e:d7:c4:d2:4d:06:36:fd:d5:87:84:3d:
50:55:76:7c:5a:db:80:8e:03:ae:54:4d:cc:0a:6a:bd:f7:3b:
c1:e1:d1:cf:ba:0c:0d:99:06:83:3e:66:c1:92:a5:62:77:9a:
cb:89:96:1f:6a:04:30:db:00:aa:4e:6d:e9:bd:0c:f5:9a:11:
24:80:e7:d2:d4:98:91:de:50:4e:6f:e4:78:f6:89:a5:b2:24:
6e:61:70:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:54:59 2025 by rpki-client