Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d37f7b73-38eb-3bc6-b090-919dabd02467.roa
File: d37f7b73-38eb-3bc6-b090-919dabd02467.roa (raw, json)
Hash identifier: QVYO8NztMbhSdK5wc14r4RnsqAOh/PIx3YeoymLuQWg=
Subject key identifier: 5B:3F:D9:04:CA:EB:9D:7A:A5:E4:E0:D0:0A:07:AC:AF:1B:A8:B5:EA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858408903FF55F58EE58355F88DC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d37f7b73-38eb-3bc6-b090-919dabd02467.roa
Signing time: Tue 10 Jan 2023 12:00:00 +0000
ROA not before: Tue 10 Jan 2023 12:00:00 +0000
ROA not after: Wed 15 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 128.125.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:89:03:ff:55:f5:8e:e5:83:55:f8:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 10 12:00:00 2023 GMT
Not After : Feb 15 05:00:00 2023 GMT
Subject: CN=2d4e257e-ff4b-4de4-8884-bf469a6bf44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:39:94:0b:b6:f4:99:fe:fb:13:e6:de:35:c1:
e6:33:50:98:33:81:41:42:6a:a8:46:9b:a0:9e:ce:
72:e8:7d:1d:ea:81:55:e5:db:4c:71:90:fe:ce:4c:
be:32:65:50:aa:02:ed:e6:53:88:47:ed:a4:3a:2e:
b5:90:dc:29:dd:f2:d0:0e:01:de:eb:bc:9b:23:39:
24:7c:df:6c:30:c9:08:c1:e9:62:91:13:ce:47:09:
31:d7:d2:ce:78:28:19:a1:f5:9c:78:48:ed:17:24:
24:c8:5e:fd:1f:06:be:58:f8:6c:bc:fc:0d:c1:ff:
66:62:9e:a2:1b:c5:e3:f6:8a:69:95:9b:1a:3b:19:
db:cd:d6:b0:6e:56:56:75:4c:49:29:c8:58:e0:7a:
e1:aa:81:05:6a:41:d1:0d:89:9b:40:46:21:8a:b3:
b1:e7:52:9f:06:fc:69:79:fa:c4:88:ba:e5:10:91:
1d:1c:1d:16:51:0a:53:df:c2:f1:48:16:7e:8d:58:
23:4c:d5:0d:9d:ee:81:7e:c0:40:24:2e:82:22:22:
28:5f:32:8b:60:66:60:da:db:b1:a0:71:b4:a6:4c:
56:bc:35:df:a4:c6:f5:23:5a:4a:4e:e7:85:c1:d1:
85:ff:8e:5f:57:21:d6:65:2a:95:b7:56:21:37:76:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3F:D9:04:CA:EB:9D:7A:A5:E4:E0:D0:0A:07:AC:AF:1B:A8:B5:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d37f7b73-38eb-3bc6-b090-919dabd02467.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
128.125.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:c7:81:cd:0c:c8:51:41:4d:6c:3b:c0:c1:40:63:d8:f8:5c:
fe:96:57:ff:c5:c8:1d:9a:7f:79:fe:00:d1:a9:a4:b9:00:ae:
98:f5:39:5d:9f:b9:29:49:1b:92:c4:7b:64:e0:73:c4:41:99:
5d:c8:d6:3c:a3:20:b8:98:85:de:49:33:bf:da:b8:74:d9:6e:
26:4c:67:f6:1a:91:5d:8c:6b:6e:4d:10:80:ab:4f:01:73:9c:
81:ef:f5:b7:58:88:d8:44:7f:9f:60:52:e8:7a:6c:3a:5d:86:
54:c7:98:a8:5a:04:5a:31:3b:2e:01:52:bc:b6:14:97:ec:a9:
25:c4:03:b4:66:01:99:a3:1c:2f:0d:5c:1a:eb:ca:a9:b3:5f:
28:59:77:9d:dc:6e:36:d5:b9:e9:51:ff:11:49:6e:63:a7:2e:
da:ac:c4:e1:b1:8a:3c:7e:5b:1b:4c:f1:e4:e9:0b:67:76:e5:
8e:96:47:c6:7c:89:2a:45:93:9a:df:3d:f5:fd:e9:1a:86:8f:
f9:2f:83:45:3e:56:c3:d9:cf:0c:4d:b3:dd:8a:1f:3d:41:6b:
2d:85:80:05:93:d3:c8:85:be:50:c7:1b:b1:8f:84:56:ae:d5:
43:c8:d0:a6:75:5a:2e:5c:5f:e8:e7:f2:f7:a6:84:8f:b9:7c:
59:1d:85:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:48:17 2025 by rpki-client