Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ac7bcfe0-6d48-3103-bbde-af3510a5bc1f.roa
File: ac7bcfe0-6d48-3103-bbde-af3510a5bc1f.roa (raw, json)
Hash identifier: iAHtlKxAdGzu/gH6yW+x1LuslKxunExiiUMvcC8c5aA=
Subject key identifier: 0E:0C:07:4F:AC:C9:CB:3F:A4:38:83:4D:70:A5:A3:63:3E:B3:CE:91
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E0B91B4AE305724E5FEB6E400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ac7bcfe0-6d48-3103-bbde-af3510a5bc1f.roa
Signing time: Thu 26 May 2022 12:00:00 +0000
ROA not before: Thu 26 May 2022 12:00:00 +0000
ROA not after: Fri 01 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 157.241.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:0b:91:b4:ae:30:57:24:e5:fe:b6:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 26 12:00:00 2022 GMT
Not After : Jul 1 04:00:00 2022 GMT
Subject: CN=4289c1f3-ddbf-4c0a-a914-2dfdefc8bdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:13:6a:48:0f:d8:b1:6a:ac:a5:9f:75:a6:84:
af:07:f5:d8:9b:1a:4e:1b:05:42:c0:79:f2:be:08:
a8:e9:cb:c9:7b:2c:bf:4d:c5:12:e8:1c:68:ad:5c:
61:bc:d9:9c:5c:4c:29:fb:d0:17:11:37:a3:0a:fe:
4b:5d:d5:26:60:fe:89:29:d5:ed:f2:01:d2:51:2a:
50:07:77:f1:2e:af:34:58:33:e5:e1:f5:5c:78:07:
5c:7f:5e:6c:20:1f:a0:7f:e6:04:a7:60:c7:a6:3c:
c0:e3:7e:ce:ce:81:8e:a7:72:7d:7b:2f:b7:80:62:
88:af:4d:6d:89:43:a9:45:88:83:c1:da:bd:f2:db:
4a:df:05:f6:2b:1d:39:fc:8b:7c:4e:fe:e4:75:ef:
eb:af:88:1a:13:12:ef:78:ec:bb:e1:b3:41:b4:82:
b5:29:1c:3e:b7:23:78:34:43:c7:4b:48:6f:81:42:
84:cf:33:f4:14:75:7e:e4:3e:a8:fb:40:1b:82:c4:
f5:ad:ed:52:6a:05:ab:7d:42:b7:a4:a6:e8:6d:fd:
79:55:7c:7e:13:74:af:e0:24:19:ca:76:87:d6:ec:
61:80:82:d4:3f:d0:1d:62:1c:88:0f:e3:17:bf:e3:
5a:68:c5:29:a1:9a:e8:ef:db:04:bd:3f:38:85:07:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0C:07:4F:AC:C9:CB:3F:A4:38:83:4D:70:A5:A3:63:3E:B3:CE:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ac7bcfe0-6d48-3103-bbde-af3510a5bc1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
157.241.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:f8:71:3e:cf:f6:85:5b:5d:5c:8f:e1:34:6b:aa:de:38:ad:
d4:ad:fa:8b:52:22:4d:e6:5a:df:64:60:22:e2:27:4b:8e:84:
23:34:0e:98:fa:72:3f:91:57:4f:a9:86:5c:2d:2e:56:50:7f:
1b:6d:63:16:7b:b0:a6:b4:98:b0:83:38:27:7f:6c:ba:71:61:
d2:10:fc:09:f2:b3:bf:7c:b5:9d:88:f5:0e:b7:cc:48:71:f8:
0d:1e:85:b2:c1:db:b6:e3:c3:00:d7:55:39:c9:7f:bd:81:38:
ca:50:b3:3d:be:a7:dc:61:21:bd:b9:94:17:46:ee:0f:31:37:
f1:59:01:95:cc:0c:50:ec:6d:50:58:e1:99:0a:d5:7c:c3:5d:
e5:4c:dd:47:4b:aa:e6:ea:03:1c:96:87:54:19:94:48:da:d3:
6c:b5:cc:99:cc:7c:97:4f:d9:06:f6:5c:f8:eb:67:ba:3a:0d:
21:b6:9b:51:e2:8a:bf:55:ca:84:51:02:41:b4:d0:b6:9a:b0:
02:77:da:11:09:53:4e:bf:ed:84:f0:7c:8f:83:37:7b:05:d4:
47:fc:34:63:2c:4f:bf:48:05:a0:69:29:23:04:ce:d5:82:2a:
28:69:56:21:f8:65:8d:c8:d7:30:6a:75:58:ca:20:f5:f7:11:
40:ec:1c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:42:39 2025 by rpki-client