Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fcd8f7ca-f837-3b5b-bf8f-ee3aa62e9030.roa
File: fcd8f7ca-f837-3b5b-bf8f-ee3aa62e9030.roa (raw, json)
Hash identifier: L7I1Ym2URKu8A8gos7NAr+17Kxk6p5PnPzgP6FAMkko=
Subject key identifier: 2C:90:2C:B3:29:B1:31:8A:B7:3A:64:A2:5E:DD:8B:C9:74:18:DC:E3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401D9EBCDBB6E60D001F35A080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fcd8f7ca-f837-3b5b-bf8f-ee3aa62e9030.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 169.205.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1d:9e:bc:db:b6:e6:0d:00:1f:35:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=ad203f6e-2f2b-4b00-b242-35112003bc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e7:96:7f:71:53:05:f7:00:91:ec:6d:f4:2a:
e9:5d:c0:85:3f:bf:b6:9b:67:ac:51:06:82:d8:fe:
43:e6:f2:8e:52:a1:64:c8:10:92:fa:0d:52:24:f6:
59:df:84:bb:8a:c6:67:2d:0e:b9:c9:63:8a:5c:75:
82:02:61:93:4a:fa:65:01:a2:54:30:02:36:b1:26:
7f:0a:da:5c:5f:c4:de:50:3b:af:d2:2e:e2:d7:f0:
0f:78:00:91:92:d6:74:92:cd:af:74:ac:4f:f0:7a:
0d:7f:c9:c4:a1:96:77:32:bf:26:d8:d9:db:5d:e6:
7b:d0:3f:93:d7:51:f2:24:5f:1d:2a:ca:72:04:6d:
cc:14:c7:0e:de:57:68:99:73:e5:46:4d:67:ae:45:
a3:0c:4b:1c:c7:ae:13:85:54:4e:f7:60:c0:ad:cd:
6f:93:77:fa:ad:68:81:33:62:a8:e0:d9:6f:48:bd:
54:6c:2c:a5:61:7f:37:74:57:9d:65:26:20:81:71:
ea:04:b0:43:bb:b5:c1:05:10:7b:60:ac:36:58:b0:
50:12:61:eb:31:e8:2f:07:e5:cd:05:ea:37:a2:fc:
24:0d:9e:f6:e9:93:6f:38:af:91:18:5b:c5:fe:46:
7c:9a:1c:96:60:8c:bd:be:3a:fc:41:7d:1d:0e:be:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:90:2C:B3:29:B1:31:8A:B7:3A:64:A2:5E:DD:8B:C9:74:18:DC:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fcd8f7ca-f837-3b5b-bf8f-ee3aa62e9030.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
169.205.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:d6:20:ed:98:23:e7:c4:9a:3a:a1:f6:ef:bb:81:c6:10:5c:
e0:60:b5:95:a8:0b:c8:00:a4:41:60:bc:f8:21:c9:61:34:f0:
c1:02:4c:17:a6:00:75:6c:1d:ae:83:e7:ab:1b:dd:b8:12:0b:
c1:32:ed:02:dd:40:4b:87:60:a7:ae:f6:d4:1d:87:a2:c1:00:
94:66:e7:60:17:97:2f:ee:9c:bc:37:df:dc:dd:6e:ae:22:bb:
87:97:b1:51:30:9d:01:1e:a6:93:08:ee:04:cf:ad:91:34:0b:
47:8f:5f:d1:9f:9c:af:92:84:33:25:6c:35:60:fc:27:f0:4f:
aa:f3:93:b1:59:c5:8e:f6:1f:a7:0e:7d:04:5f:f7:42:06:52:
42:2f:13:e8:c2:f1:22:93:75:65:65:c7:7a:1a:84:bf:91:1c:
f5:c8:82:74:b4:a3:84:82:9d:15:cd:33:ac:ce:d9:3f:b4:de:
c9:8e:15:83:63:c6:3f:e2:ca:64:8a:11:47:9a:7a:4b:23:8d:
ea:f3:6c:9e:20:19:76:3d:da:8f:8a:ab:c0:1b:23:71:78:98:
c9:e4:40:3d:04:f3:a1:e9:be:36:5c:f7:7e:2e:a2:f7:8f:49:
9d:1c:11:e6:51:6f:d5:27:f3:14:59:2e:e4:26:31:33:47:7d:
a0:92:29:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:21:55 2025 by rpki-client