Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cefc10c5-5a60-34a4-9c84-f5b323cad87d.roa
File: cefc10c5-5a60-34a4-9c84-f5b323cad87d.roa (raw, json)
Hash identifier: 03dXOKF4b77z4IXHJsd3vbq7dXmcFmeNKiKvTmHAIuM=
Subject key identifier: E4:33:3F:80:71:C2:37:94:29:0B:AE:FA:E2:14:49:DA:13:9F:D7:D6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B8634DF2A924ACD5A1B5DEC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cefc10c5-5a60-34a4-9c84-f5b323cad87d.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 168.163.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b8:63:4d:f2:a9:24:ac:d5:a1:b5:de:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=433e88b5-9b50-44c0-af17-f53060c9a767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:1a:3e:f4:01:9f:3e:df:c7:1d:06:fe:2b:
90:c6:3d:00:84:0a:10:f6:18:8a:9b:53:77:38:87:
9b:67:6c:2b:79:e9:f8:29:73:e1:04:09:62:ca:96:
ce:b4:91:55:d2:76:97:5d:5f:05:91:9c:a4:60:f5:
5b:28:63:c0:f3:62:41:8f:7d:ba:2f:21:53:be:67:
13:a8:57:74:9c:9f:05:58:58:5d:c4:72:ee:21:e7:
f9:56:e3:a6:44:62:88:7d:e2:1d:ad:0e:b2:71:cf:
b1:f7:f3:35:07:9c:05:b6:00:7d:b8:91:9c:91:2f:
51:d4:3d:a6:51:75:32:db:eb:ea:47:f6:cc:a2:e6:
70:a1:07:be:c4:c8:af:0c:98:bf:aa:f9:a7:37:0b:
85:d1:ed:63:84:d8:1e:71:c4:48:33:71:a0:e8:8a:
d5:d8:af:e3:2b:96:ee:d3:c1:09:3f:c4:d4:7c:5b:
00:c5:6c:94:a3:bb:58:c1:a1:3c:74:8f:99:51:51:
60:a3:ea:2e:aa:24:a5:fe:9a:cc:2b:d9:bb:cd:b8:
73:d6:48:c4:56:36:e8:6f:a9:8d:ff:ea:f7:d8:b8:
de:27:f5:7f:d7:63:56:8d:bc:71:85:68:79:4b:ce:
37:74:da:be:9d:0b:6b:7a:b7:c0:3e:93:f9:ca:a1:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:33:3F:80:71:C2:37:94:29:0B:AE:FA:E2:14:49:DA:13:9F:D7:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cefc10c5-5a60-34a4-9c84-f5b323cad87d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
168.163.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:06:37:9a:d9:b4:bc:20:3a:06:0b:dc:5e:07:f1:4d:30:27:
85:66:b1:ba:27:56:51:da:fd:3a:1c:93:48:12:61:42:46:54:
1c:7e:81:f2:8d:16:df:0a:92:ca:ce:d4:84:38:f5:82:0f:41:
1f:58:41:75:a2:c4:5a:2a:93:74:ec:a4:d5:ab:8c:0b:bc:58:
0a:fe:31:2c:ed:50:0f:1d:dd:db:4a:cf:3b:14:5a:37:40:32:
65:f7:c4:4e:5f:92:a1:1d:9a:ee:b7:a9:a7:01:38:b9:d3:3a:
19:57:2f:4d:1a:7f:72:9d:3f:11:9d:90:57:df:8a:df:29:0d:
36:21:fb:68:39:6e:8f:18:69:f1:3d:6b:fd:d9:2f:c3:0b:a6:
0e:6a:0d:97:30:3b:d7:5b:4f:e7:38:f5:00:c7:1d:d2:11:9a:
e1:bb:1c:34:ba:47:96:7a:88:cb:67:09:f4:e9:7c:26:33:41:
b3:7a:8c:bd:8b:cf:a0:39:5b:15:0a:b7:30:a9:f2:2a:26:f1:
8f:e6:01:31:dd:36:7f:e3:45:00:ba:32:f2:7d:48:cc:cb:86:
d1:a5:c1:c9:f3:3f:58:75:ec:17:94:17:91:8b:ae:fa:cd:27:
55:3b:ef:2c:b1:ac:1c:b3:58:41:5e:fa:73:8d:07:27:f0:69:
75:6e:29:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:39:02 2025 by rpki-client