Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae1bae0f-556e-305a-8961-ffa08193801e.roa
File: ae1bae0f-556e-305a-8961-ffa08193801e.roa (raw, json)
Hash identifier: +99/5gnjdATcYu9GytvFXk+ML+Nt1Nk90xS5CgIpteE=
Subject key identifier: 67:43:3B:B6:31:74:AD:6D:C1:7A:C1:25:44:39:BD:34:9C:9F:A6:C0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840437BD8FFBC68F9F212DA9B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae1bae0f-556e-305a-8961-ffa08193801e.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 153.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:7b:d8:ff:bc:68:f9:f2:12:da:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=8a6b115b-4853-4e6c-8c0d-013639146358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:65:3f:61:5c:8c:a1:10:fc:02:58:fb:96:6f:
87:db:d2:91:d5:8e:c9:05:e9:81:b4:d0:0d:5d:69:
42:06:75:9b:3a:0b:d8:bb:40:4c:20:a3:f3:8c:7b:
a9:68:75:db:ac:0e:0f:d7:b7:29:52:65:80:58:de:
2f:df:75:ad:40:96:9b:85:29:6d:4c:6f:11:41:8e:
f4:b8:d9:65:0f:65:11:a5:63:a3:0b:d8:4c:a6:a3:
c9:c2:9b:6b:8a:1a:92:08:85:ab:ef:4d:25:c2:89:
1d:61:5f:ba:ab:8f:79:1c:a1:ef:9c:eb:36:c9:50:
f8:e6:1f:82:fa:6c:f4:bc:f1:a0:ff:a8:88:4d:f6:
f2:fd:1b:6e:f0:21:df:74:91:94:49:07:8b:84:a6:
b4:15:92:6f:7c:00:f0:d4:88:ba:9d:9b:e7:21:37:
43:7e:f9:c3:c4:19:cd:02:33:47:f2:75:e6:89:68:
9a:bf:0a:3e:90:73:6c:f3:44:36:6b:ca:a3:8e:00:
a0:6a:51:b1:96:8a:3e:ae:88:aa:1b:c5:75:7e:8b:
df:f4:30:ce:17:a8:af:b4:d5:01:7e:d2:02:9c:f9:
88:a2:23:80:1d:d6:9c:4a:33:db:65:4f:3b:1d:53:
5b:9e:20:18:b3:f7:53:3d:02:76:9b:4e:e1:70:16:
e6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:43:3B:B6:31:74:AD:6D:C1:7A:C1:25:44:39:BD:34:9C:9F:A6:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae1bae0f-556e-305a-8961-ffa08193801e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
153.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:66:78:9e:00:95:1a:5d:c3:0c:9e:63:d2:f5:8d:ea:c7:d6:
3b:d8:20:ed:ac:e1:7c:51:3a:73:ff:17:6a:ab:da:c2:95:d7:
b1:d8:9e:d2:e6:f0:4e:7d:6c:17:1c:82:c0:3f:f0:8e:41:9a:
c2:9c:ef:d4:56:f4:f0:40:d4:88:8e:fb:9f:99:c9:bd:18:5e:
0f:9e:b0:9f:e7:47:7e:0e:21:32:3a:48:57:16:a6:04:ae:96:
d9:08:ae:6a:51:3b:08:95:1c:ca:98:4d:b3:37:03:30:a5:50:
cb:7e:30:f0:17:7e:01:64:b9:fc:f3:ee:3d:42:01:26:5b:86:
6a:ec:15:40:ac:f8:0e:f4:bc:4d:00:e0:86:51:e7:17:d7:52:
dd:7d:bb:11:ce:39:b4:dd:e8:28:d3:38:b9:ba:fc:18:52:0d:
23:1b:46:4c:a5:96:cf:89:0e:25:30:bb:d3:21:53:2c:a3:d7:
d6:26:8b:0d:63:7c:89:80:7e:b2:90:86:32:e2:b3:f5:26:f3:
b4:6f:20:67:0a:43:aa:57:14:be:23:76:c2:6e:25:2f:d6:e3:
99:4e:3b:34:73:d8:1b:1d:d3:86:53:15:19:1e:a6:a7:e2:31:
3e:31:0c:5a:7b:fb:b5:57:61:84:91:be:9a:21:82:57:c7:e7:
1d:c0:16:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:31:55 2025 by rpki-client