Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e33e7087-aa77-31c0-b39d-c4d6e6cc308c.roa
File: e33e7087-aa77-31c0-b39d-c4d6e6cc308c.roa (raw, json)
Hash identifier: RdqgsrYm64L7cbC5aFJdXViyL0ZYmZvSJA7tG/T83VI=
Subject key identifier: 23:31:0C:59:8A:B4:D0:02:C1:A4:F8:76:F2:AD:9B:DC:E7:08:E4:0E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C96BB079495CC8CC758252C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e33e7087-aa77-31c0-b39d-c4d6e6cc308c.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 130.71.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:bb:07:94:95:cc:8c:c7:58:25:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=73b9d1f1-88fe-47f0-bd9a-64e57242c005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:8b:4f:26:75:68:c6:3e:49:58:94:d1:3c:
0e:5d:d8:c6:fd:63:1e:de:15:2a:1a:c1:a7:9f:56:
bc:de:df:ac:00:38:cf:83:8b:5a:2b:5d:48:0c:e5:
3f:6d:c6:83:df:15:ec:c6:e2:bb:4a:de:dc:ec:4c:
ff:39:6f:be:95:b3:8f:59:45:3b:cc:c8:c2:bd:cd:
38:dd:22:7d:5d:18:44:47:94:04:35:61:2e:0a:35:
e4:0b:ed:0e:5d:d9:35:c8:81:68:a6:db:15:7a:18:
e2:f2:04:d0:38:c7:0e:91:dc:fe:65:31:72:5a:76:
85:d1:da:94:fe:9a:1c:c0:c4:11:58:b0:9e:2f:b4:
db:e3:0c:45:8d:aa:ab:89:7c:7b:36:1c:f0:02:f2:
28:c8:b9:c9:07:1d:a1:a0:8f:ca:53:b1:4a:28:5e:
4c:77:4e:5a:56:f8:f2:1f:1f:88:6e:84:1e:69:bd:
34:85:bc:46:3e:c6:1c:1c:d0:19:8f:e3:b0:41:88:
e8:0d:a0:b4:ab:34:df:7b:8f:63:f1:07:57:54:f3:
a7:f0:83:5d:42:2b:75:26:1c:1e:1e:32:aa:1c:52:
5a:2e:02:63:32:8e:51:01:ec:41:bf:84:a0:20:80:
b9:16:53:88:0f:2f:39:f0:72:67:ab:cb:b6:bd:46:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:31:0C:59:8A:B4:D0:02:C1:A4:F8:76:F2:AD:9B:DC:E7:08:E4:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e33e7087-aa77-31c0-b39d-c4d6e6cc308c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.71.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:34:54:b7:9a:fa:ff:31:1d:aa:22:a5:46:cd:88:45:a7:44:
23:37:5b:64:84:e0:f5:f2:06:f0:35:4a:ab:81:58:9f:cb:22:
a1:e8:e9:f0:3e:5f:16:59:af:de:ee:81:20:8e:a5:68:8c:b5:
20:dc:c2:eb:a5:91:25:37:c9:c5:2c:52:24:0e:78:a0:15:58:
97:78:85:ab:e8:5b:a8:54:17:6d:19:a5:7e:ae:dc:8a:fb:e7:
21:f1:ef:5b:18:e4:b0:2d:e8:59:98:4e:aa:cd:82:fb:bb:be:
84:f2:53:65:02:e6:8d:a5:56:ee:0e:93:5c:c1:b4:b9:f6:73:
b7:68:21:1a:1f:41:fd:2f:98:48:37:5d:59:24:7c:51:fe:ab:
8a:2d:28:9e:9a:6c:2c:95:6f:1d:be:3d:ad:9d:55:22:20:d6:
5e:e4:49:79:92:b1:5e:06:90:6c:9b:d6:f1:5c:11:9a:62:6c:
57:99:b1:ad:3b:08:52:02:53:08:51:b8:bd:4f:d6:86:64:ed:
c0:d2:31:20:75:4e:a2:b5:72:92:12:3c:2c:1c:1d:95:57:4e:
b1:2d:4d:b9:b2:bf:18:20:58:22:88:b7:a8:6e:23:60:01:84:
ec:8a:31:af:09:45:45:48:26:f8:68:b2:c3:24:a4:4d:b9:2a:
53:23:36:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:45:25 2025 by rpki-client