Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2cc67399-b89f-3dcd-83f3-4afa91d5785e.roa
File: 2cc67399-b89f-3dcd-83f3-4afa91d5785e.roa (raw, json)
Hash identifier: fJ+svuStzPjTwHKBejPwBEmgMzUaJDhocVCFzTQmTXg=
Subject key identifier: 1B:19:6D:2E:DA:7C:DE:CE:FE:95:5F:B4:4F:8E:B5:6A:B9:1F:80:F0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FE1221878FDD7DDAD9B3FFBC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2cc67399-b89f-3dcd-83f3-4afa91d5785e.roa
Signing time: Fri 11 Nov 2022 12:00:00 +0000
ROA not before: Fri 11 Nov 2022 12:00:00 +0000
ROA not after: Sat 17 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 157.241.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:e1:22:18:78:fd:d7:dd:ad:9b:3f:fb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 11 12:00:00 2022 GMT
Not After : Dec 17 05:00:00 2022 GMT
Subject: CN=d792b8c6-d363-42ab-884c-060d53275889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2c:94:d0:37:49:20:7a:d2:c5:83:1b:b1:2e:
e1:84:e2:73:ca:6e:b6:c8:a4:05:50:1c:b7:29:a8:
30:92:64:a2:71:ee:b6:30:d0:9a:24:f8:d8:bd:f0:
d7:8c:02:d4:fc:0e:dd:e8:df:f7:bb:3e:e1:e5:85:
de:cc:59:4d:bd:c7:0b:cd:7a:48:c9:c2:ce:ed:1c:
37:fa:f1:6e:76:c9:f8:b4:fc:c5:cb:b7:89:a8:15:
74:7d:6f:40:cc:50:70:58:a4:ea:d2:fd:06:1d:d7:
45:45:c8:b6:46:55:1d:8a:2b:ef:da:b8:f6:01:71:
a4:28:f9:d6:b4:55:ee:22:8e:c3:4e:9a:8a:74:87:
58:4f:38:d8:9f:45:32:1f:4f:17:ce:49:37:a5:c9:
24:7a:10:97:23:27:db:f2:b3:ab:06:0c:44:f4:c3:
46:49:ab:9d:0b:aa:df:5c:df:a1:92:c9:6f:cb:c6:
e0:f3:0c:77:e7:50:a0:17:56:e7:40:c2:0b:21:0f:
0c:77:47:7a:c4:08:58:bb:4f:93:4c:22:3b:f3:d8:
76:eb:1f:f1:ed:9b:bc:a8:18:e9:47:53:f8:82:ab:
90:e0:15:e1:8b:61:cf:9b:29:a8:77:da:67:13:46:
17:0b:be:fa:ca:98:99:f9:34:14:c2:9c:b2:ab:3a:
01:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:19:6D:2E:DA:7C:DE:CE:FE:95:5F:B4:4F:8E:B5:6A:B9:1F:80:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2cc67399-b89f-3dcd-83f3-4afa91d5785e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
157.241.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:3f:11:4d:ed:8a:ff:7a:b3:f4:bd:3f:2b:10:49:69:00:c5:
61:bf:36:a6:89:45:cc:76:61:41:9f:f1:35:e8:90:8f:52:c9:
b2:5d:f7:74:ed:77:d9:d9:10:03:23:cc:21:4e:00:6a:e7:5a:
36:c6:d8:90:cc:1d:23:19:c2:8a:d5:8a:d7:9a:5d:2a:15:84:
f0:eb:5b:b8:5e:04:b0:79:79:1a:f7:0d:3a:66:3e:31:5d:29:
ec:40:47:51:3b:43:6c:91:6a:28:d8:c6:fe:b9:a0:bc:6f:e6:
2b:90:21:7f:17:c9:03:21:08:74:b6:0d:bf:86:f1:77:09:31:
a6:37:53:5d:c0:33:ee:06:82:19:e8:35:f6:5b:f2:30:9b:a9:
07:ed:73:f1:d3:a4:23:59:1b:f9:11:5e:71:2a:a1:3d:fc:73:
58:ca:18:ef:8a:8a:05:93:40:c6:06:d2:1c:5a:da:d1:d4:c5:
75:47:90:28:49:8c:7a:c2:e0:ba:fd:3f:0a:4e:8f:3b:69:80:
34:7c:0d:71:dc:f6:03:27:e4:d6:79:62:84:3d:83:a9:8e:a3:
c2:e3:11:32:b5:3c:2f:65:02:87:db:28:80:ad:88:ff:74:c7:
19:22:f8:74:42:bd:df:93:7e:a9:8e:2b:d4:83:f6:20:ab:12:
84:44:ff:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:02 2025 by rpki-client