Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d87a2622-1174-3ce5-a0e8-fa57f42b8a0b.roa
File: d87a2622-1174-3ce5-a0e8-fa57f42b8a0b.roa (raw, json)
Hash identifier: U90SIK/oqYroTZd4bKQrpx2pLwm7tWqNCtoQlohbMlg=
Subject key identifier: 76:57:24:4C:09:C8:EE:A1:84:6C:3F:70:2A:E9:F9:8A:3F:B8:A3:BD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF8A89FBB620325B6C32E0DC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d87a2622-1174-3ce5-a0e8-fa57f42b8a0b.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 160.1.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:a8:9f:bb:62:03:25:b6:c3:2e:0d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=80b4fc60-8fa0-4ffc-8b9a-e78fea7d2d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:df:71:69:3f:a5:81:a2:7e:02:e5:ea:d3:b0:
d2:d6:aa:c3:1c:53:47:1e:33:4d:9d:88:4b:c0:ea:
54:bb:18:d9:c2:ea:d9:3c:ea:66:b3:c0:80:00:5f:
0b:04:2b:58:90:12:a3:71:67:17:f7:a7:c8:50:0d:
b0:c5:ce:52:31:a3:28:b0:52:33:aa:7c:7e:03:df:
97:3e:02:40:1e:5f:0b:5f:43:9b:57:cd:61:db:c0:
57:f1:d2:52:8e:65:82:6f:8c:41:ff:a6:43:d9:b6:
9c:24:57:29:4a:21:d7:00:22:0c:dc:99:cf:5e:d6:
3b:48:d9:97:ba:48:28:78:d5:0c:81:8c:da:63:b0:
00:81:62:ae:1e:90:7a:4a:5d:cd:24:85:71:4a:90:
82:c0:40:59:1a:30:a3:e4:89:96:ff:f9:58:bf:91:
df:81:78:6d:e6:6f:d7:cc:7d:bd:91:80:06:a4:08:
66:7d:b2:96:6e:dc:02:6c:37:c0:b2:e3:07:fb:88:
33:bd:bc:0a:ae:39:fe:4a:b1:b6:0c:08:1c:16:1c:
b1:c2:2f:55:70:a9:13:10:96:1f:fc:37:50:2d:18:
04:39:5b:57:e3:a1:3d:dd:a0:6b:75:02:02:4a:59:
88:b6:0a:a0:de:43:c1:9d:06:50:be:b9:82:81:4f:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:57:24:4C:09:C8:EE:A1:84:6C:3F:70:2A:E9:F9:8A:3F:B8:A3:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d87a2622-1174-3ce5-a0e8-fa57f42b8a0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
160.1.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:30:96:ac:b2:19:33:21:dc:ba:f8:fc:b8:c7:15:f8:ef:58:
44:bf:92:8c:7d:fd:70:9f:c5:41:71:c9:cc:22:0c:49:8b:bc:
5d:a1:74:dd:71:1e:df:a9:2e:b0:9e:ca:91:42:47:c6:e9:86:
53:22:aa:3d:75:24:3f:fd:ab:a2:41:3b:01:91:aa:81:9b:9e:
4d:d3:4d:23:20:45:ea:1a:41:d0:10:5f:e7:1a:18:6a:6b:bd:
24:44:fb:d0:ff:c8:bf:3c:82:10:72:26:8e:74:b6:eb:9f:ef:
fb:3d:c8:b3:0d:66:b1:88:1a:76:be:50:23:9a:40:78:33:62:
04:ea:9d:5d:14:c9:4f:b1:4c:7e:ea:f1:05:c9:bd:49:6f:3a:
7c:d3:de:da:3f:af:f2:7f:dd:9a:c0:9f:78:55:6c:0a:7c:5a:
91:a5:00:77:38:35:06:5c:2a:9a:d6:d3:ab:89:4f:73:cf:b6:
59:75:52:85:66:e8:08:81:95:0a:f4:7b:fd:d5:0d:fc:63:b4:
59:b6:16:5d:dc:f8:aa:d1:3f:f9:da:9a:c7:9a:ed:65:08:74:
0e:cf:89:7d:5d:ad:f4:ef:9b:cc:29:f8:f0:d2:3c:ec:85:b9:
d5:9f:9a:46:83:a6:82:df:59:cd:70:f2:80:d4:64:3b:11:b1:
e2:bc:37:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:42 2025 by rpki-client