Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/218280ea-2ff2-3ec5-b26d-d3224195eff1.roa
File: 218280ea-2ff2-3ec5-b26d-d3224195eff1.roa (raw, json)
Hash identifier: oIYBZtRL1d+GdaTn2s7Gqh1wVEkXGpcnX0VlhjTD6lU=
Subject key identifier: 42:84:B1:12:1E:23:B4:1E:27:4F:BD:7D:34:81:6E:98:82:7A:44:DF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D33797CB33F08FF899173F7C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/218280ea-2ff2-3ec5-b26d-d3224195eff1.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 162.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:79:7c:b3:3f:08:ff:89:91:73:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=cb5e7556-491c-441d-a5d1-4f580788aa1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:02:18:90:87:10:19:41:ad:a8:1d:ce:8b:
65:25:ad:7e:ed:bd:0f:61:ec:ce:5c:6f:7f:c6:5e:
6f:af:21:8c:02:9a:f1:dd:d2:42:19:f3:88:4f:91:
6d:1a:a9:1d:af:d1:64:f4:40:be:54:01:4b:62:f8:
a0:d9:76:26:8f:86:f3:6c:6a:f9:0b:5c:64:0c:91:
8c:97:44:fd:83:b4:bc:c5:0c:1b:83:12:2e:8f:3a:
3c:3b:ac:80:14:b8:2d:16:2d:48:e1:c5:c8:d3:3b:
3d:ef:30:7b:b6:c0:70:86:19:d1:36:25:00:ce:3d:
6d:ec:52:78:bd:83:80:0a:f8:c1:5b:10:c3:de:19:
19:ed:98:3f:95:3c:bd:e7:f8:c1:1e:63:37:ec:24:
04:cb:d6:19:02:02:71:cc:eb:db:30:c5:d0:93:5d:
08:2e:2b:a7:01:f9:52:a1:75:ab:14:25:1e:d1:ce:
f0:9c:71:0e:98:02:af:ef:75:07:22:12:f0:ce:70:
49:56:73:34:b4:df:c7:1b:22:2d:8f:0e:42:eb:25:
0b:59:f9:31:f9:f6:3a:07:c2:65:16:e5:60:66:01:
15:2b:29:65:df:69:75:d9:1a:f3:a9:92:0b:23:5f:
27:c4:b6:f8:2e:87:a3:7c:68:59:8e:95:c7:9c:dc:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:B1:12:1E:23:B4:1E:27:4F:BD:7D:34:81:6E:98:82:7A:44:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/218280ea-2ff2-3ec5-b26d-d3224195eff1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
162.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:1e:0f:2c:90:d4:bd:af:c3:25:6e:58:73:a5:b2:11:a3:1b:
2a:e8:f4:49:03:83:cc:65:e2:14:5e:80:4c:ec:b4:49:8d:fd:
e7:a7:81:2f:d5:e3:40:e1:d1:31:ed:60:1a:69:8c:25:d0:06:
67:23:ec:88:67:65:1d:9a:5b:7c:03:7d:cc:89:d3:22:0c:db:
28:da:48:cb:11:7c:d8:77:f3:cb:7a:cc:9a:a9:c4:fa:b1:30:
62:a2:df:78:13:f0:4b:b2:a5:a3:b5:4f:62:e1:28:c3:30:c1:
2c:c5:10:15:b4:39:71:6a:a6:7d:dd:57:ef:99:42:5a:32:be:
01:77:45:37:7b:41:24:c7:a8:36:19:65:2c:7d:17:6b:89:19:
30:9e:32:e0:f6:47:36:48:c6:56:cb:95:a0:52:f9:12:c5:e4:
b9:92:d5:5c:ba:3e:8f:d8:53:ed:cd:8e:c3:69:ec:20:ef:b4:
e0:db:29:26:d4:b2:c3:0f:b1:19:ee:95:4b:4c:58:77:4e:e7:
86:24:55:79:de:0e:49:36:23:50:52:fb:0a:bd:da:f2:ea:95:
ad:40:dd:06:e1:ce:aa:8f:23:ac:f1:71:52:5d:da:54:1f:90:
c1:b6:00:7a:15:5b:3e:8b:d7:ff:d0:00:ad:87:ba:f8:9a:ca:
da:c0:59:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:17:38 2025 by rpki-client