Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf89d533-a966-338c-a485-29860ddc530c.roa
File: cf89d533-a966-338c-a485-29860ddc530c.roa (raw, json)
Hash identifier: RP/V4NN5OXN94PdicjypVevu3cEuXc+wNu9EA9b+YO8=
Subject key identifier: C0:86:EF:B7:B2:4F:D3:3D:DF:CC:DD:F6:58:4B:C8:DD:A0:E9:07:EF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF1E9C202F766D89B993AD780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf89d533-a966-338c-a485-29860ddc530c.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 134.63.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f1:e9:c2:02:f7:66:d8:9b:99:3a:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=4c799dcd-d836-4b33-b6c2-47894d140a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:64:bd:8d:a3:1d:e3:fc:b4:0b:6e:6f:16:0e:
71:e4:44:b4:78:93:8e:9f:3f:ba:cb:a9:4e:de:75:
6c:70:f2:02:fd:0b:55:63:ac:07:ec:2b:e6:cf:ff:
0a:e2:19:2e:1c:7a:e9:6f:9d:df:4e:e9:6c:58:c5:
64:27:70:9e:57:44:a4:33:0f:a4:15:20:45:75:9b:
5d:9e:3d:e8:18:ba:82:67:b8:f2:2f:07:f4:f6:bb:
f8:9a:8f:fe:b9:30:b6:18:14:a9:18:6d:2a:0b:f2:
26:71:65:54:b3:10:08:7c:82:2f:0f:3e:e3:cf:b2:
7c:f8:da:7f:13:d2:bc:a4:ad:ce:74:8d:f6:3b:dd:
b6:de:e2:b3:9d:04:5a:e5:ff:03:8d:9a:07:c0:9f:
fe:e6:9d:1d:2b:2d:3f:04:b8:62:13:a2:82:09:52:
07:72:d1:c5:51:31:7d:da:4a:4b:1d:4d:bb:79:bb:
a5:f0:2c:c6:16:82:6b:79:e2:26:1d:fa:b4:46:32:
bf:4a:99:4a:16:b8:80:ca:5d:d5:2f:b7:a9:b7:2d:
9f:0a:ac:44:4b:85:8e:05:40:3c:1b:11:b8:1d:e1:
da:32:e5:eb:e1:eb:3e:30:ec:05:90:4c:64:6c:0a:
6b:24:2d:ee:da:9e:d7:ea:e6:19:62:39:fc:65:20:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:86:EF:B7:B2:4F:D3:3D:DF:CC:DD:F6:58:4B:C8:DD:A0:E9:07:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf89d533-a966-338c-a485-29860ddc530c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
134.63.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:eb:b5:f0:c2:bd:ec:2a:48:12:d5:a6:3c:95:b0:8e:67:ee:
60:54:26:a6:cf:38:a6:5e:72:ba:9c:4f:06:20:7f:c7:57:c9:
28:34:85:fb:ac:6c:c2:f3:c0:69:a6:57:50:24:66:3a:4c:44:
cc:b1:b8:f4:16:e3:c1:06:2c:d8:79:33:97:71:c4:0b:c9:a2:
19:9d:c9:77:68:f3:d6:07:69:c1:a5:b8:53:d7:09:b8:a4:1b:
5f:10:1a:82:4f:cb:64:a3:28:cd:00:d2:bd:69:b4:d3:c6:24:
17:34:03:83:02:73:11:25:aa:43:90:30:d5:93:cc:e4:11:a3:
a9:c1:28:ae:f7:4a:ff:84:db:fc:61:fa:cc:2e:47:42:d9:fa:
df:8a:ae:b4:1c:2c:fd:8d:3a:49:0a:fc:34:27:f5:48:a6:f5:
de:fb:86:1b:5b:6c:44:fc:9e:a0:b1:4c:70:78:08:8c:66:dd:
03:e9:59:b2:fc:96:d3:1a:09:8c:e6:4e:e9:74:ab:36:79:31:
9e:f5:05:21:03:c1:7b:18:73:73:8a:3e:40:92:d0:84:85:3a:
d6:95:6b:20:c3:1f:b0:3b:24:38:ae:1c:36:9d:22:db:ba:73:
1f:ed:4f:43:ba:2b:e6:7d:6e:e0:6e:e5:59:3d:06:75:85:57:
7c:49:98:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:16:56 2025 by rpki-client