Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b40f83f3-586f-35a8-b50e-e8636337f470.roa
File: b40f83f3-586f-35a8-b50e-e8636337f470.roa (raw, json)
Hash identifier: 2P/u8aE1n2GlULv2nKnRvvFB8x/s52FQq1O1UR7jiVo=
Subject key identifier: 76:1A:C6:73:C4:AE:DF:D4:AF:AC:73:3C:D7:14:38:DE:D3:61:55:91
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F30174DD9DC11162D2A2468C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b40f83f3-586f-35a8-b50e-e8636337f470.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 140.145.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:30:17:4d:d9:dc:11:16:2d:2a:24:68:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=62010018-18e2-4745-b290-e2519efe6f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:42:10:a2:dc:1c:5b:e2:54:76:8e:e4:dd:f9:
ef:dd:f5:c6:e5:71:38:53:5c:76:b3:56:7a:a8:6a:
47:98:ef:d5:b8:74:ad:e2:fb:0c:53:61:b9:26:d2:
75:1b:d8:72:73:8d:ab:af:6f:74:4e:12:4c:8c:4a:
18:42:f3:67:6d:b9:a4:47:f9:22:1c:8c:74:40:aa:
9a:12:b3:d3:68:7f:f5:4f:fc:5d:68:f7:01:2c:66:
ea:69:11:6b:f7:04:ad:b7:e9:bf:c4:64:2b:15:1f:
3c:12:85:f3:51:e5:32:e1:df:31:2b:f7:30:15:17:
ef:aa:c9:a5:a1:82:71:7b:8d:2c:e1:37:b9:f5:27:
4f:a2:af:46:33:77:22:2e:01:dd:cb:6a:a5:f3:8e:
e0:70:18:c1:ec:db:e0:0a:2b:88:2f:f1:16:c1:e4:
82:5b:b7:dd:30:66:0e:cf:79:75:bd:b8:ca:ff:39:
c8:42:2d:66:e0:e8:fc:93:41:6e:e9:0e:cf:e6:ae:
0e:b2:99:a5:38:2f:5a:e7:31:1a:5f:3b:bb:35:31:
9b:ed:fc:f0:6a:3d:00:68:ce:2b:d9:0c:b2:ac:09:
29:72:30:a4:ae:9a:52:77:e6:cc:03:e4:c1:84:0e:
71:4a:c9:db:a0:e3:fd:ff:76:c2:5d:c4:6f:9e:eb:
2f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1A:C6:73:C4:AE:DF:D4:AF:AC:73:3C:D7:14:38:DE:D3:61:55:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b40f83f3-586f-35a8-b50e-e8636337f470.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
140.145.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:d2:b2:86:67:b3:a6:f7:19:d8:a8:9d:41:46:ed:17:45:a0:
70:9d:a5:2c:93:1e:7c:c5:65:a7:fe:51:b6:1e:f3:f4:89:54:
c7:bb:93:ca:df:69:b8:57:93:32:04:c6:95:aa:a2:45:11:96:
f4:90:28:e2:92:02:99:f7:2a:19:5c:15:4a:25:11:58:2d:f9:
98:30:77:99:f7:3d:a1:8a:fd:97:61:d3:85:7d:c5:6e:f6:ca:
7f:38:d1:72:90:1c:b5:93:06:db:fa:67:3b:ef:af:fe:27:70:
63:b6:32:7d:92:0e:b5:0c:43:73:0c:f2:13:e0:03:b1:ed:46:
70:f7:0b:24:49:6d:a0:eb:ef:ca:27:c1:d3:8b:9a:ec:19:e8:
99:88:0e:e3:8a:e6:5e:ad:8b:c9:27:20:1e:cf:e2:9f:e3:a8:
64:fe:d5:35:df:e5:04:bc:87:e6:ed:4b:39:5f:93:89:76:eb:
6b:f7:53:54:ad:17:16:95:83:1a:10:2b:3b:19:7c:55:a5:d6:
48:25:87:52:fd:9e:c7:b3:67:df:5d:2a:53:f7:44:3f:bc:97:
2d:e6:f3:5c:10:d5:30:c4:1c:44:07:a8:ac:2d:f9:9f:12:f8:
d4:eb:3d:c1:7f:a6:74:d8:c6:44:ed:2f:04:40:9f:a9:3f:31:
98:b7:7b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:29 2025 by rpki-client