Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b064645c-9a71-3de9-9cbc-a85728a9bd80.roa
File: b064645c-9a71-3de9-9cbc-a85728a9bd80.roa (raw, json)
Hash identifier: k/ZHKXxDiMjBPfEy6xAXqexUxjg0WbNMkepX2ACH4SE=
Subject key identifier: A3:42:30:D9:7F:E5:75:1C:3B:83:35:8F:84:B3:2E:35:33:92:16:60
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F579C4A6893E19DB0C3BA8F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b064645c-9a71-3de9-9cbc-a85728a9bd80.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 140.145.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:57:9c:4a:68:93:e1:9d:b0:c3:ba:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=cc1e5816-c5a0-4ef2-8f33-82399217f9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e3:94:3e:53:7c:12:6a:7d:62:19:56:8a:2a:
c3:76:c7:7a:66:d2:6a:cf:4c:77:a9:51:9a:03:1e:
cb:1e:06:ac:ee:62:44:16:30:80:23:ed:a5:9a:28:
27:ed:fe:0c:c0:ca:c4:34:83:c6:b4:a8:fb:12:f1:
eb:03:e2:bd:67:69:e4:6e:06:ca:29:ce:52:d4:09:
e8:1b:be:59:7f:a8:83:bc:a7:41:c7:f3:39:58:10:
40:c5:27:4a:56:76:88:ce:93:b9:7e:af:28:ba:36:
90:65:49:b0:0d:b4:f1:33:6f:95:f7:aa:58:b0:38:
16:fa:30:3d:0c:3e:be:e3:0d:58:7a:06:59:ae:2f:
8c:16:88:e9:09:9d:2e:de:3c:b5:8c:c0:00:c9:da:
1f:6f:e9:fb:bf:e8:6d:a1:87:c8:0d:4a:ff:ef:02:
76:3e:4d:03:97:33:00:07:8c:06:4b:f6:61:b0:42:
8d:a2:57:c0:8b:7e:c5:ff:6e:00:d9:9e:bc:d0:f2:
c9:30:60:c3:0f:5c:4b:2d:81:12:c6:e0:96:ac:f7:
8c:b1:8c:59:78:7b:87:85:0f:e6:d0:1f:4a:61:3d:
1d:58:8c:26:d6:b9:10:40:46:b0:22:93:00:f7:43:
15:35:ed:40:20:65:c7:5e:01:ca:fb:c0:68:51:39:
2c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:42:30:D9:7F:E5:75:1C:3B:83:35:8F:84:B3:2E:35:33:92:16:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b064645c-9a71-3de9-9cbc-a85728a9bd80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
140.145.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:9b:6d:dd:b2:c1:3a:99:23:ae:fd:2a:9b:6d:bf:e9:b3:2f:
70:d5:f9:bb:26:a8:b5:a2:f0:24:5b:1b:16:76:a3:99:df:06:
0b:f9:51:e6:57:67:60:38:ba:f4:f8:8e:9b:0f:9a:b0:bb:3c:
fe:13:7e:96:11:2f:48:b2:db:1c:ad:42:b8:48:c0:e0:54:1e:
65:99:f7:ff:43:68:01:31:d2:47:8e:a5:0d:3a:9f:9c:be:e8:
3d:fd:79:09:c1:23:bc:89:3b:31:d0:56:f6:24:7b:51:9f:82:
18:17:7e:4d:cf:d7:0d:00:5e:36:40:d1:9c:76:c9:f1:86:eb:
57:10:02:f2:e5:b9:93:24:01:57:6c:db:7e:0a:97:2f:95:b4:
3f:f5:ec:8e:8b:01:19:2a:e9:40:a8:28:98:c2:57:f0:8b:2b:
24:38:c9:f7:4a:31:d2:28:f8:1e:be:f5:34:8c:0b:0f:b4:55:
a9:0d:37:60:39:29:ee:13:9a:9d:74:71:e2:6a:da:99:e6:2e:
db:8a:a7:76:28:b4:b7:51:2a:12:18:71:7f:c7:e8:9e:d4:7f:
4f:a0:b1:01:93:51:62:78:21:71:04:81:a5:76:c1:d5:10:bf:
cd:1b:38:9f:54:3d:8f:87:ba:39:fa:29:bd:f6:c7:e2:7b:c9:
7e:91:96:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:26:28 2025 by rpki-client