Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/00d95a64-f9ae-3c2a-9fe2-26318926903d.roa
File: 00d95a64-f9ae-3c2a-9fe2-26318926903d.roa (raw, json)
Hash identifier: UOfItiICWUBTArcqWNTE8/N3sZZ+5QCjKcJHmrGSPwU=
Subject key identifier: DA:EB:D9:79:38:9D:3F:B2:0E:3D:64:71:80:CE:55:62:8F:F1:3E:6D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6D7429BA60B3B050403D8800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/00d95a64-f9ae-3c2a-9fe2-26318926903d.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 206.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6d:74:29:ba:60:b3:b0:50:40:3d:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=37167d79-a7b9-447a-874c-9148af1e8b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:01:b4:69:5a:fa:29:21:c0:9c:9b:02:89:
a8:11:9d:89:a8:fb:0b:56:a9:09:f5:0e:be:67:34:
79:a8:20:67:2e:a1:3c:e6:00:46:35:31:32:b5:81:
88:e9:fd:12:8c:2e:b9:d4:88:61:9b:95:cf:bb:de:
a7:b1:6b:cc:60:d2:19:cc:ca:ef:e9:63:e9:6e:5b:
cb:a4:5d:3f:74:29:f0:c4:13:9f:2f:39:71:fd:58:
a7:2f:cb:8f:a7:c2:5c:c1:da:ed:38:d0:84:8f:7f:
31:8f:be:3c:bf:d5:b4:52:dd:1e:45:68:6a:66:ad:
23:46:9b:27:fb:b5:18:5e:c9:3a:c1:25:9a:1a:26:
ad:f7:b9:44:64:8e:bb:e7:fb:b5:4a:95:11:a6:87:
76:f4:34:9e:5d:19:d9:a6:ef:a7:91:98:b7:95:ac:
b2:49:c7:30:1d:fb:e2:b7:94:3d:cd:36:c6:b6:aa:
8f:ab:a7:4f:54:83:a9:a5:9b:6f:b5:b5:67:c8:f8:
e8:21:96:81:7a:5a:e5:80:f1:5b:2c:1b:de:4e:54:
71:1c:70:f9:70:58:c2:0d:d3:b3:17:0a:38:19:87:
4d:cc:89:cf:5a:2d:62:90:04:f3:fd:23:7a:86:1d:
07:4c:9f:4e:4f:7b:d3:c2:28:8e:3f:2a:92:96:9b:
ff:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EB:D9:79:38:9D:3F:B2:0E:3D:64:71:80:CE:55:62:8F:F1:3E:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/00d95a64-f9ae-3c2a-9fe2-26318926903d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
206.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:b5:d8:8e:12:d5:ba:6f:99:dc:4f:27:8e:e2:1f:aa:59:f1:
73:64:d3:d9:89:1b:91:68:10:89:cc:ca:be:cf:6b:78:69:9e:
09:a3:ac:5e:2f:0d:f3:d1:69:3d:c5:ec:d5:f3:8f:a0:27:a3:
cc:f5:2e:55:31:c9:6c:a2:1a:e2:bb:fd:b3:a9:22:e0:a8:8d:
d4:b4:1e:dc:8a:83:1c:63:3a:86:65:8e:b8:8b:93:73:76:77:
55:9b:df:72:da:24:31:8e:5c:32:a7:28:69:6f:96:ae:9c:56:
52:6e:75:12:e5:93:75:93:0d:f3:d1:a2:c2:50:55:02:a4:cf:
60:f5:b5:47:57:79:a0:e1:41:7a:a7:ee:36:79:18:26:66:11:
e7:a2:cf:53:6e:7a:52:26:d7:e0:57:7d:c2:5b:09:86:20:55:
75:f2:a3:48:5f:59:bc:ba:af:dc:18:1c:16:35:ab:d3:b9:39:
97:82:84:4d:2d:f7:d8:aa:e1:7e:2c:3d:3e:cf:b3:24:18:e9:
33:f6:41:c5:a5:49:73:d2:08:8c:45:98:23:69:0b:38:47:b7:
84:76:b2:5f:bd:2e:32:b9:f8:64:a7:73:0d:f3:e0:a9:d9:59:
a0:39:e0:83:1f:4e:56:ae:95:ed:3c:bf:d5:34:3c:6c:1b:5f:
8c:96:ab:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:57 2025 by rpki-client