Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e6096cb-d269-3967-9f04-db79e3e9525e.roa
File: 0e6096cb-d269-3967-9f04-db79e3e9525e.roa (raw, json)
Hash identifier: Oc4ClcD3fXJHHHIbsq+IS7Xbf/WecehKxceYmd9jbH4=
Subject key identifier: 78:60:7E:98:15:62:CD:90:16:3D:B5:D1:A1:D3:CE:67:1B:E7:25:8B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6D741FFB16E4E973101F8440
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e6096cb-d269-3967-9f04-db79e3e9525e.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 206.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6d:74:1f:fb:16:e4:e9:73:10:1f:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=1aa1fd12-4672-4c4d-ab37-dc8bfd8742b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:2f:1a:2a:0a:ec:7a:fa:f5:56:63:42:76:
a0:aa:22:4c:4e:71:a1:20:b1:d9:94:cd:06:7f:2b:
8f:5d:40:e8:2b:a4:9c:78:37:54:fc:92:e0:a2:41:
18:73:4d:d0:e0:1e:ff:51:44:00:0f:b7:61:38:71:
ee:c5:1f:77:cc:74:42:aa:8d:3b:83:50:21:5b:8d:
c2:67:3d:99:fe:4d:16:f4:f3:28:d0:f6:0d:da:87:
f8:5f:0d:dc:b5:71:c2:15:9e:d9:19:36:c4:43:78:
a9:d6:b7:da:a4:d7:24:7b:22:ac:86:98:61:7f:7b:
2f:66:ef:d1:61:aa:7a:50:e6:7a:ef:1e:72:40:9a:
74:6e:66:02:0c:64:af:f1:2d:73:52:11:ae:c5:50:
8b:fc:ad:e8:df:7d:ab:07:fa:24:20:87:0d:98:99:
ab:a6:2f:50:9a:75:fe:7d:e6:f5:89:c0:08:d3:56:
5f:83:1e:9b:94:08:bd:ac:27:f0:b8:4a:9a:71:6f:
7e:44:cf:17:28:3f:96:0a:ea:56:f2:21:68:3d:ba:
33:f2:c4:3a:a0:32:1d:57:e7:f7:8c:ec:6a:e5:14:
12:bd:b8:1f:27:51:c4:9c:d5:e4:e9:10:f5:58:2b:
14:31:01:9b:78:9d:3e:3e:5c:c4:7e:48:83:3a:d5:
08:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:60:7E:98:15:62:CD:90:16:3D:B5:D1:A1:D3:CE:67:1B:E7:25:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e6096cb-d269-3967-9f04-db79e3e9525e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
206.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:93:3f:39:9f:d9:c5:41:f0:c0:80:bf:c2:b3:94:75:23:a9:
f9:14:1c:ce:1b:34:0f:75:92:c8:a1:dd:f8:a2:39:b6:ca:70:
08:f2:52:1a:05:ed:d8:aa:f1:e8:29:cd:ec:30:23:7f:fd:c3:
a7:2d:22:7e:a8:97:13:a7:d8:4c:26:e5:3f:8a:a8:fc:c9:96:
35:c7:8a:b5:2e:7e:f4:e4:e5:e9:41:ec:1f:99:85:e1:ea:71:
a8:31:ad:2a:a8:6e:96:f4:7b:d0:f6:99:6b:df:9c:6c:90:e7:
6f:e5:af:03:c0:d4:3d:e8:4c:88:e5:c4:e9:01:ce:1d:a0:18:
e9:13:9d:af:88:db:1c:8a:7d:09:34:37:2c:a8:e9:2d:d3:b8:
91:f6:97:94:f8:70:2b:f5:e3:85:6d:4e:7e:c0:85:1c:e7:73:
80:39:b2:ae:92:f1:99:94:6d:8c:76:3b:80:75:50:f2:a2:61:
27:a0:a4:a8:aa:b2:78:f5:bb:26:6c:99:a9:34:30:4d:1b:c2:
ee:11:a9:3c:b7:64:3d:0f:7c:38:37:db:7c:4c:26:ed:13:f2:
65:fa:7a:9f:03:80:3f:56:71:3c:94:b3:db:a5:74:0f:92:b8:
4d:51:f4:41:fa:ea:f8:43:de:3b:e6:fb:62:8f:ae:24:a9:5d:
f2:d3:ff:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:04:11 2025 by rpki-client