Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c64fde0-f65a-3587-bd70-4d3a1dc07733.roa
File: 2c64fde0-f65a-3587-bd70-4d3a1dc07733.roa (raw, json)
Hash identifier: mgRJjCDc+035p5dn64Ir9iXqHOx+b7RBfkBDpqCF7Kc=
Subject key identifier: 73:2D:F3:38:DC:5A:DB:05:72:44:D4:1C:93:D6:4A:F1:A5:E7:8A:C6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B686BF8727F1785144B4B300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c64fde0-f65a-3587-bd70-4d3a1dc07733.roa
Signing time: Thu 26 Jan 2023 12:00:00 +0000
ROA not before: Thu 26 Jan 2023 12:00:00 +0000
ROA not after: Fri 03 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 137.114.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b6:86:bf:87:27:f1:78:51:44:b4:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 26 12:00:00 2023 GMT
Not After : Mar 3 05:00:00 2023 GMT
Subject: CN=e8457bb1-fb48-4174-b7c1-80ae1fdf719a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:01:56:59:35:1f:32:45:a2:b4:d8:72:49:
8e:a0:e5:2c:63:cd:5d:71:db:57:73:da:45:6c:2f:
ef:2f:71:67:1b:08:96:57:4f:13:74:89:65:43:b4:
ee:0e:9c:d4:4d:b8:e2:ee:65:28:0c:0c:61:f4:26:
c2:1c:53:88:a4:b8:ed:78:2f:89:e3:26:de:e9:d4:
37:08:1d:3c:66:e6:0d:1a:f0:31:f0:47:02:48:37:
02:fb:ff:d6:76:e9:6a:5d:5a:49:c6:ff:c3:ba:b6:
63:35:08:a1:74:ab:4c:9b:67:07:32:81:89:e8:67:
8f:36:98:63:24:0a:43:43:6f:4a:d4:bf:bf:c3:ab:
5e:d8:3a:0c:74:4d:bb:6d:8d:25:b1:b6:cd:7d:96:
09:98:49:0c:55:f4:56:d1:e1:d3:2b:6e:9b:dc:2c:
bd:ae:34:51:5d:a0:c7:b0:d9:04:51:ca:35:66:67:
6d:a6:a2:b9:a7:03:39:58:6e:dc:31:be:88:b7:38:
a0:f0:b5:80:be:20:37:28:c1:ba:ba:7d:5c:e5:e3:
3e:9e:53:31:f4:c0:a0:b3:8f:ae:f2:b2:82:7a:ea:
07:2b:e5:28:ee:a0:cd:bb:58:47:ea:82:43:ee:99:
c2:ee:25:3d:55:22:92:10:11:09:a4:18:10:81:d0:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2D:F3:38:DC:5A:DB:05:72:44:D4:1C:93:D6:4A:F1:A5:E7:8A:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c64fde0-f65a-3587-bd70-4d3a1dc07733.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
137.114.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:65:da:25:70:1e:ab:41:8d:d7:09:aa:0a:cb:02:a5:ac:40:
c2:5f:f5:fe:06:f4:fe:6d:ed:af:26:23:77:55:88:15:79:82:
b3:bd:01:57:e1:96:3f:40:12:2e:e9:05:c2:38:61:0d:05:91:
0f:41:d1:6e:41:87:3c:73:5d:f0:99:12:8f:04:cf:34:ce:10:
6e:30:94:cf:3c:d3:07:c9:c2:6d:30:f2:5c:e4:8b:e5:5e:59:
88:bb:82:c7:a3:fe:0b:db:e6:22:14:5f:6b:46:08:19:c5:a3:
ea:bb:40:26:c0:e9:9e:1f:04:db:27:32:ea:5c:51:06:34:44:
45:8d:02:a5:06:39:3f:13:8c:22:45:ff:bd:ee:0a:5d:b2:fc:
5c:e5:56:b9:41:5e:4c:88:fd:35:27:7e:f2:0e:91:26:29:a2:
62:41:73:ec:19:07:4a:2f:39:34:70:19:0d:46:20:b0:2d:74:
2e:60:2e:af:f7:f3:00:fe:b4:05:96:45:9d:91:11:bc:bd:54:
31:57:16:54:e5:7a:54:01:16:8a:ee:aa:3d:93:36:d3:83:a3:
75:3f:fc:d2:a8:e3:7a:af:19:e0:b7:cc:2e:ff:cb:7f:ab:dd:
de:ab:6b:2f:1c:de:45:a9:c6:32:f9:9f:54:84:29:ef:a2:ab:
8d:f4:8f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:17 2025 by rpki-client