Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2f2c6e5a-f801-30a6-9488-55638a759faf.roa
File: 2f2c6e5a-f801-30a6-9488-55638a759faf.roa (raw, json)
Hash identifier: XXbP3OPsdePUQh6mF2mgO+Opp4hkoY+3Njk6WcEnGR0=
Subject key identifier: FB:2A:D6:88:AF:07:02:0C:E6:A7:64:60:86:A4:C9:51:27:01:9D:9E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3498F69F4E4364DB6FC876C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2f2c6e5a-f801-30a6-9488-55638a759faf.roa
Signing time: Sat 10 Sep 2022 12:00:00 +0000
ROA not before: Sat 10 Sep 2022 12:00:00 +0000
ROA not after: Sun 16 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 144.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:34:98:f6:9f:4e:43:64:db:6f:c8:76:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 10 12:00:00 2022 GMT
Not After : Oct 16 04:00:00 2022 GMT
Subject: CN=079068c9-a75d-4c10-9a3a-47e79781807d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ef:80:54:41:9a:cd:29:b1:9e:98:07:1e:e6:
af:55:3b:a8:c4:c7:05:5c:85:78:e8:3d:fa:60:15:
46:84:b7:61:8f:9d:c3:0d:b5:ae:f8:e0:e5:dd:46:
5d:41:58:1a:08:08:14:a4:d2:fb:da:2d:f5:44:54:
99:a0:21:f6:75:72:39:9a:1f:a6:fd:6d:5c:f1:1d:
95:44:d6:64:f8:71:01:7d:08:2a:c3:36:da:b1:1d:
61:78:87:26:16:a4:9e:80:54:0f:23:e0:1b:6a:a2:
b5:71:c7:21:da:4d:38:92:f3:08:f7:36:e9:e9:2d:
11:5e:1c:f2:76:f4:b8:f4:d5:9f:60:37:9d:c8:09:
bb:2e:e6:49:16:31:c3:10:76:48:ff:fd:05:c3:cf:
e9:dc:18:48:06:fd:35:f7:40:c8:33:81:01:86:a5:
36:52:8e:ce:03:16:d5:9c:9e:ff:21:f3:33:0c:a4:
3a:09:e5:64:f3:30:65:d5:41:a3:49:01:70:4f:87:
b2:ab:46:35:52:31:4f:33:60:22:40:77:19:aa:b2:
41:5f:13:a5:24:c8:75:14:4c:1e:a4:fc:2f:46:ff:
fb:6d:68:ba:f4:50:5c:ae:83:e1:57:46:17:e6:22:
37:fb:4f:6c:24:38:35:41:7d:82:b2:df:3d:f4:ab:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2A:D6:88:AF:07:02:0C:E6:A7:64:60:86:A4:C9:51:27:01:9D:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2f2c6e5a-f801-30a6-9488-55638a759faf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:a1:73:8b:cd:55:f4:89:61:7b:a1:61:2b:f2:43:53:81:6c:
e1:60:38:0f:5e:fa:4b:0c:18:18:98:32:d4:27:e4:11:2c:74:
23:0a:02:f0:79:47:1f:ef:90:e8:ff:6b:a4:43:bc:82:1e:e5:
f7:ba:34:f3:b2:3b:78:31:fe:d3:bc:71:b6:dc:97:3b:3b:95:
59:4d:6e:53:ea:8e:7d:0c:72:81:04:c3:4e:f9:0e:b9:26:c8:
71:aa:6d:81:00:d9:1c:25:8b:73:27:73:7f:47:c7:71:c8:c3:
0a:35:51:61:fa:90:21:ad:1c:ed:16:c7:80:c8:32:e3:bd:6a:
c5:5c:79:78:a4:b8:a1:2b:67:01:0d:07:ea:ff:12:c6:2e:e6:
df:f2:ae:08:38:8f:6b:8f:0a:4c:a0:c2:45:16:82:12:fc:d5:
99:83:0e:0c:c9:64:12:e8:a0:62:ca:68:56:85:1b:fb:1d:9d:
37:e1:b4:59:f3:ca:c0:c2:0b:70:20:eb:76:13:d3:fb:a9:98:
8f:af:05:f2:41:c5:61:dc:cd:bb:e1:cd:46:28:2c:fe:54:99:
f2:52:ff:b2:4f:ef:f6:d7:ab:65:c2:c7:b0:4e:bc:ed:74:2f:
3f:81:eb:e0:e0:93:29:2f:b8:32:c8:e5:67:3e:11:fe:6a:78:
98:79:84:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:13:10 2025 by rpki-client