Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3a61ad7-9407-334a-9fd8-eba7d1b47308.roa
File: e3a61ad7-9407-334a-9fd8-eba7d1b47308.roa (raw, json)
Hash identifier: LN9q/jF5leaQMlhBcgnZC9Lbzq0z9TdpxaUIanzADqI=
Subject key identifier: DC:1C:B2:01:D4:60:BC:1A:45:EB:5F:77:26:0F:3E:50:E4:C1:A0:32
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6DC646C1A4EE75ED1C708040
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3a61ad7-9407-334a-9fd8-eba7d1b47308.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 169.205.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6d:c6:46:c1:a4:ee:75:ed:1c:70:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=0d8d9269-7f3a-4041-8037-9b7dd13a2f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:5c:8e:20:a4:f6:46:d0:34:5b:cf:92:25:
1c:a8:29:0b:9f:80:b9:6f:d1:e8:ab:66:fa:68:4b:
f8:0c:c4:cf:f2:88:98:ec:92:fa:1d:da:37:12:02:
e1:d7:3e:e4:d8:8a:bf:3f:a7:36:d9:e9:71:a8:a4:
ed:64:59:2b:ec:58:38:f7:90:7a:62:14:db:01:39:
61:b5:74:43:09:07:38:3b:95:45:e3:f5:ef:a7:0c:
27:3a:be:38:b7:41:21:41:38:e8:60:f1:77:ed:0a:
52:10:b0:6f:b4:cd:53:55:08:b5:0b:ac:17:f6:e2:
a6:bf:a0:6a:8d:68:0b:bb:0c:45:fd:5a:0a:8a:d2:
c9:66:17:e0:9a:79:55:68:b9:52:ae:de:d6:d4:ee:
8b:f5:5e:a5:ba:39:43:b7:d8:59:f9:0d:68:2d:04:
49:01:8b:32:50:41:7c:08:67:ca:c9:ac:3c:c9:9f:
2f:c9:22:11:a9:69:0a:c2:14:84:a0:01:4c:0b:61:
be:36:b0:bd:14:9c:c9:a9:61:8c:e9:a8:8f:59:3a:
24:b2:30:25:62:83:b3:94:ad:38:8c:1a:70:77:a1:
58:08:10:d0:97:17:3b:2e:a2:32:26:d8:a6:80:06:
c1:14:a6:8e:31:61:70:ca:5d:39:a1:5c:a2:33:b5:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1C:B2:01:D4:60:BC:1A:45:EB:5F:77:26:0F:3E:50:E4:C1:A0:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3a61ad7-9407-334a-9fd8-eba7d1b47308.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
169.205.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:5e:17:b9:24:72:65:26:9a:12:90:5c:aa:90:d7:04:2f:a4:
24:c5:57:0a:94:cd:9c:b1:03:6c:ae:00:a6:4b:eb:aa:25:1c:
3d:0e:a9:65:54:7a:67:74:95:40:e7:f9:10:b4:8a:68:a2:ca:
b6:89:ed:71:23:68:a4:fd:24:2f:8c:06:8c:da:97:e9:0f:19:
a0:08:b1:28:fb:e1:68:63:ec:a1:65:db:64:8a:3d:d2:61:57:
2f:4a:8b:a6:e8:7b:39:ea:6c:88:27:98:93:09:4d:a8:7c:0e:
6a:05:d4:23:76:18:e0:24:ac:2e:44:8a:be:d3:c9:46:dd:fa:
53:66:bd:77:b2:3e:dc:a1:46:d8:62:e7:7e:96:da:3e:5d:1d:
03:cb:06:9c:f8:7f:80:2e:d1:ad:92:07:29:b1:e2:3e:af:a0:
19:3c:36:0a:46:95:ee:7d:44:78:23:cd:69:4f:fd:71:61:19:
56:f4:2f:51:3c:31:40:9c:93:a3:2e:d0:ab:33:37:ba:72:57:
d1:f0:26:b1:ae:05:61:0b:04:44:8c:cd:95:88:fb:38:27:44:
44:85:9e:48:ce:25:a8:d6:be:95:4f:32:14:8f:20:b4:db:03:
68:07:6d:00:73:4c:c7:c3:e2:5a:a5:ed:9a:29:c0:35:d7:c1:
79:65:60:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:10 2025 by rpki-client