Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2648f12c-a590-3832-8928-f5852095d035.roa
File: 2648f12c-a590-3832-8928-f5852095d035.roa (raw, json)
Hash identifier: C0vjUaCyRRI6OrL3QmY1HFpZhTG/XV/l/y3k2E++r3k=
Subject key identifier: CB:24:51:85:AA:B0:4F:9C:4F:AD:FF:CF:47:99:E7:E5:11:87:C8:E6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6D743023D7131371AAF2E8C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2648f12c-a590-3832-8928-f5852095d035.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 206.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6d:74:30:23:d7:13:13:71:aa:f2:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=b2a62979-3e14-4c58-a3d1-4c0489cd0879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:5f:64:a3:58:99:5b:dd:ae:6d:dc:e0:bb:
a1:b9:fc:ae:e2:2c:b7:4f:82:b8:ab:46:79:6f:f5:
d3:c9:86:34:5c:de:58:60:4b:e1:13:2b:74:59:75:
a7:a1:d4:87:d7:e6:bd:b6:d8:bf:83:dc:d8:0a:76:
e6:ea:0a:c1:48:0f:88:8f:25:b6:fc:e4:14:52:53:
a9:9a:b4:07:31:66:eb:b6:38:ee:78:a2:b4:1d:d1:
24:51:7d:d2:42:83:95:18:37:b7:92:28:80:3f:53:
9b:86:e9:ae:89:00:53:9d:51:46:a5:6e:ba:c2:74:
9a:85:c6:6c:c6:57:d2:94:78:aa:93:3e:b0:3c:6b:
6b:60:f2:ca:32:3b:10:ea:83:c6:71:72:43:14:09:
9e:6e:9c:f3:1b:41:25:82:59:f0:57:27:47:a5:5a:
72:a0:a6:b0:ad:f9:4f:ea:d1:13:37:67:38:f9:95:
b6:3b:03:f4:07:be:43:09:e0:b2:9c:30:5f:c2:c1:
71:dc:50:f6:eb:33:6b:39:07:35:37:34:8c:6d:83:
9c:ab:04:93:0b:6f:9a:18:32:c2:99:f6:18:ef:a6:
bb:18:81:5e:2d:0a:d1:a4:6f:be:f1:d4:3a:e5:69:
ac:6f:7a:45:4e:e7:30:9e:77:c5:f7:3a:4e:3f:53:
62:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:24:51:85:AA:B0:4F:9C:4F:AD:FF:CF:47:99:E7:E5:11:87:C8:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2648f12c-a590-3832-8928-f5852095d035.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
206.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:6a:43:d4:c2:83:79:8a:87:cb:42:d1:ff:55:93:e1:b5:34:
81:b5:1c:06:1e:86:16:67:ef:ed:e8:8b:b0:23:70:f5:31:ae:
0b:26:2c:fa:6a:53:83:2a:70:7a:f9:50:ed:66:d6:25:87:03:
97:73:b7:d8:1d:d6:76:df:b2:cc:2d:35:d2:14:04:13:95:f5:
97:30:d1:86:47:64:16:d1:2e:bd:86:2b:20:4f:b7:af:0e:8d:
ff:45:01:38:f0:4d:38:ac:1c:99:a3:8a:74:44:88:c2:a9:a7:
5d:32:da:e1:ae:48:70:05:a1:f3:d5:76:70:b2:68:c4:5c:d9:
5e:e8:c9:3c:37:77:83:59:2c:31:59:84:6b:1a:55:fa:06:b6:
06:d8:ad:6a:14:97:55:53:20:5c:c4:03:cf:76:2b:f0:05:ac:
05:2e:d2:7e:c3:45:5d:1a:1d:01:d8:02:67:a1:be:33:b7:bb:
fb:bf:8f:c0:9b:57:ed:52:44:61:21:a8:f8:d5:20:77:73:cc:
cc:80:0f:27:d1:85:89:fb:4d:81:5d:2b:c1:9e:ba:c7:bf:b2:
6f:52:dd:95:37:89:27:c6:6e:42:eb:f8:0b:a9:f9:68:3c:09:
08:69:8c:18:6c:42:94:8b:35:ec:5b:8c:00:55:a4:20:fa:b9:
00:66:25:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:49 2025 by rpki-client