Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c56c912c-4f5a-31b6-bbec-b968ffd3fb0a.roa
File: c56c912c-4f5a-31b6-bbec-b968ffd3fb0a.roa (raw, json)
Hash identifier: xKqNkJBvOvMk8Qpt2Mlr+vN46/BBm796idAAPauHJ3g=
Subject key identifier: 59:B1:FD:4F:E3:CD:5F:89:17:98:78:65:BB:17:A4:74:77:A9:51:36
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403AC9D255FAC137375DC5D580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c56c912c-4f5a-31b6-bbec-b968ffd3fb0a.roa
Signing time: Tue 13 Dec 2022 12:00:00 +0000
ROA not before: Tue 13 Dec 2022 12:00:00 +0000
ROA not after: Wed 18 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 3.192.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3a:c9:d2:55:fa:c1:37:37:5d:c5:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 13 12:00:00 2022 GMT
Not After : Jan 18 05:00:00 2023 GMT
Subject: CN=518ebfd4-b320-4e96-968b-289d0562d5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1d:e4:b6:b8:b4:65:30:9e:04:c6:7b:f9:aa:
75:6e:a3:9d:3e:1c:c1:fc:8f:9f:cd:60:6d:3f:ed:
2b:3a:f6:d8:c8:f2:58:a5:1d:c9:ad:9a:3a:a5:ca:
b5:39:ce:47:c4:f3:de:83:be:e9:82:64:5b:4b:58:
bc:c3:0a:ca:92:c9:ad:47:8c:d2:fc:4a:9b:27:4d:
a5:d6:77:6a:0d:14:57:49:d9:12:77:f7:fa:a3:44:
33:80:c3:a4:6e:f1:70:b4:41:85:e5:d3:bc:41:04:
e2:d3:e4:68:37:c6:87:6c:46:5b:cc:db:73:4d:9a:
33:59:e2:3c:0a:f9:83:b5:d2:5b:9b:1c:86:41:55:
3f:ee:a7:0f:8a:b6:47:d3:97:8a:86:19:0c:b2:c9:
54:29:ea:01:e7:ad:3e:6a:5d:bc:0e:b1:54:56:00:
c3:01:ce:aa:be:1d:46:0a:48:61:52:68:be:f1:16:
f0:64:57:57:94:4a:57:64:62:6a:d5:c1:44:d3:9b:
ce:1b:f5:fb:12:bd:35:67:ad:b6:f1:e8:a6:29:48:
80:c3:0f:02:28:6e:b5:9c:47:60:0a:60:42:a0:97:
4d:85:4c:d1:e0:85:43:53:51:87:94:18:79:b8:d4:
42:a4:a5:23:df:06:77:bc:7e:de:4d:b9:c2:2d:17:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B1:FD:4F:E3:CD:5F:89:17:98:78:65:BB:17:A4:74:77:A9:51:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c56c912c-4f5a-31b6-bbec-b968ffd3fb0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.192.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:41:fe:78:82:b2:3c:88:3f:ce:27:b2:82:58:4f:9a:58:bd:
d6:c8:64:8c:7f:27:fc:ee:f3:1e:67:06:58:19:d5:b5:b4:fb:
73:9c:68:d1:58:d1:60:89:ec:7a:d6:74:4e:f9:e5:55:11:ea:
cc:02:ed:f8:73:8b:5e:ee:6c:ff:70:44:97:ce:be:c0:78:d5:
9c:b5:41:4e:1d:31:53:ba:5b:02:26:5d:fa:b2:b5:65:d2:ae:
33:0d:df:be:69:7a:de:2a:4e:ff:c0:a4:d5:4a:c3:b6:28:99:
c7:f2:e5:88:70:ca:b2:96:65:84:63:7b:13:41:8b:de:f3:e9:
03:7e:7e:1e:41:94:97:d3:5d:77:af:e4:2f:c2:83:24:92:d9:
f5:ed:10:34:29:9a:c6:ef:92:78:e0:79:5e:3a:b4:23:ed:b0:
3a:f1:0b:f7:b3:7b:25:9c:57:92:fc:5a:8f:20:65:03:9a:31:
44:00:c2:88:fb:e4:d4:8d:fa:c2:a4:05:7f:5c:74:76:46:3a:
19:0c:78:82:3e:6d:c0:af:5c:49:27:de:35:69:e1:1c:b6:1f:
e0:57:2c:76:8e:b0:ee:ae:1b:b4:ec:5b:9f:05:a9:36:5e:36:
32:af:c5:7d:7d:dc:16:4c:4f:bc:02:76:8a:c7:cf:7c:db:8e:
48:39:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:17:02 2025 by rpki-client