Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ac5e1d11-52da-3c7e-9ace-9fecf28ada32.roa
File: ac5e1d11-52da-3c7e-9ace-9fecf28ada32.roa (raw, json)
Hash identifier: sGEkT3EVtp9qA5Rlscr+gLu31HQCBLiEa4aH68JcsHI=
Subject key identifier: 53:43:D1:12:9C:FF:4E:87:1B:53:36:D1:62:30:EC:27:C4:A1:B0:2F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBC1676FFB32666C2F3AF51C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ac5e1d11-52da-3c7e-9ace-9fecf28ada32.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 168.163.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bc:16:76:ff:b3:26:66:c2:f3:af:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=a96b7ebd-6693-4ce4-92e9-45a6713b862d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:b8:ba:d0:f6:84:91:95:c2:01:06:30:92:
0e:26:94:a0:52:02:5d:0f:84:97:b7:de:50:91:54:
69:f7:28:e1:ff:f7:d5:9c:cb:51:4b:92:36:a4:59:
df:2f:54:53:2f:bf:52:1d:4a:b2:af:5b:40:fd:72:
2c:eb:58:bf:01:a8:52:90:81:c3:24:2a:94:86:1c:
b9:64:0f:b7:4c:46:15:a2:04:5d:5a:c5:70:dc:90:
34:98:00:5f:a0:37:dc:a3:4e:a2:d8:ed:b9:ca:df:
fc:b7:70:31:87:12:b8:02:4d:4f:7a:03:49:fb:c4:
c6:4c:c0:27:86:63:72:d8:e3:42:ef:34:b6:a9:e6:
67:b1:83:ff:3e:3d:03:18:f2:3f:1b:33:8f:03:fa:
be:69:9f:83:bd:14:63:a4:1f:bb:3b:f4:51:d0:6a:
25:1a:d7:22:29:cd:d9:8c:a5:2c:cd:89:b5:3a:db:
f3:4f:56:41:17:a0:b8:3f:25:55:42:8b:3f:a0:f5:
7d:de:8c:54:9f:02:66:f2:51:2e:c0:b4:6c:57:32:
09:2d:20:cd:36:50:7e:1c:0f:8c:0c:19:68:02:51:
8f:88:83:d8:ec:3e:22:81:20:59:8e:77:0e:b6:37:
6c:7c:b9:97:4d:cd:bc:5b:35:ac:dc:1b:7e:02:18:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:43:D1:12:9C:FF:4E:87:1B:53:36:D1:62:30:EC:27:C4:A1:B0:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ac5e1d11-52da-3c7e-9ace-9fecf28ada32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
168.163.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:ae:5a:46:84:54:ce:d9:3b:b6:9a:1f:ca:3b:6a:c1:22:6a:
b2:72:bd:9c:d2:18:b9:61:d5:26:01:bc:56:73:15:3a:f6:a3:
5e:86:8c:a9:7c:1e:a1:df:87:7e:2f:2d:6f:a2:d1:52:2a:db:
31:04:76:b0:7d:7c:ce:ba:2e:05:f5:c1:b7:bc:ce:e1:33:68:
5e:de:9e:26:67:2e:47:16:e2:74:9b:3c:ae:c1:f2:08:e5:31:
c7:2b:a0:f8:13:97:1d:8f:96:9f:39:1c:1e:fc:3f:62:94:ef:
f9:5f:28:11:21:ff:88:7c:df:94:43:aa:db:c8:31:a3:82:ca:
01:3a:4f:20:3d:15:d4:eb:22:44:4e:24:a4:77:cb:92:37:3c:
57:da:9f:65:61:b5:2b:a2:09:fd:ee:dd:fc:52:3b:0d:ae:81:
ed:65:bd:3d:44:9d:41:b4:5f:95:fa:ae:8a:86:e6:45:f5:7c:
7e:53:52:3e:68:76:68:75:96:8c:94:4f:0e:fc:db:2b:b1:0b:
32:81:df:94:a2:f5:d0:fc:64:98:d3:4f:24:b0:fe:49:4d:5b:
6b:23:3a:55:b6:25:ae:2a:ce:d6:65:cc:89:d1:0a:cd:2e:63:
55:e0:eb:f4:80:92:d3:45:a1:95:4e:ac:9c:ec:8f:51:20:f5:
2f:78:d8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:34:01 2025 by rpki-client