Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3213a400-907d-3530-b4e0-f927aacf3b15.roa
File: 3213a400-907d-3530-b4e0-f927aacf3b15.roa (raw, json)
Hash identifier: 1m4c7gI1VYQLPz8uMBiVILLeVGupXriCvy00MVZGvQ0=
Subject key identifier: 76:1E:04:61:31:EA:E1:BB:7D:ED:D0:1B:97:B7:BC:0F:2B:6B:A0:3E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404391FCCA69B8D2894744E800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3213a400-907d-3530-b4e0-f927aacf3b15.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 206.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:91:fc:ca:69:b8:d2:89:47:44:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=f70a45b5-5aff-43ca-9732-31e74dc77939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:1f:50:b8:bc:e9:fa:40:4d:cb:da:fb:94:
e1:8b:2e:a3:1f:26:e8:8d:b8:a9:f6:eb:04:c5:7d:
e8:78:5d:16:42:b8:9e:a4:c1:80:d1:7b:6b:31:7f:
61:b7:34:dc:5d:98:61:a9:38:3b:6b:d3:1c:26:9b:
31:08:74:26:c8:fe:a6:68:59:f9:fd:3b:1b:25:75:
53:87:66:7f:bd:03:86:fb:7a:4e:ba:92:03:e8:ab:
33:52:7d:b5:69:38:05:3c:92:55:df:bb:e9:a7:31:
ff:26:8b:a8:c9:0c:b9:d5:36:57:14:70:cb:42:27:
e0:6b:e8:4a:b6:8f:bf:51:a1:f8:a6:3e:61:20:c8:
26:fb:61:c1:b3:7e:98:55:1a:ce:1e:f5:46:60:19:
be:77:4b:f0:e3:47:10:31:2a:d6:d5:2f:ee:3b:31:
20:fa:7a:27:99:2a:c1:53:cd:0c:22:82:d5:e3:26:
18:85:c2:ea:69:5e:fb:81:81:a8:9f:1e:3f:3a:d4:
0f:be:6b:64:ad:0a:9d:c4:25:a7:5d:b3:c2:56:75:
94:c9:a6:96:5f:7c:f9:84:25:39:85:53:48:af:82:
84:4a:61:ec:ff:24:09:21:cd:2b:75:c9:92:2c:d2:
87:2b:90:70:5a:32:5d:40:ef:62:e3:d1:b0:c1:0f:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1E:04:61:31:EA:E1:BB:7D:ED:D0:1B:97:B7:BC:0F:2B:6B:A0:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3213a400-907d-3530-b4e0-f927aacf3b15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
206.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:12:a3:23:cf:7a:6c:32:ed:3e:3b:b0:e5:a9:7f:66:aa:47:
2a:9c:ca:ea:f9:a4:79:3a:27:a4:bd:b5:e7:2c:90:91:78:f7:
4c:cb:0f:d4:68:0b:07:00:e9:09:44:d4:ab:0d:60:54:4d:2b:
27:3c:e2:92:f8:78:ba:9a:7a:f6:ae:41:c8:3e:cc:d4:86:0e:
dd:2b:dc:9a:f4:49:54:69:df:53:84:93:f4:e3:45:60:19:3a:
87:17:af:59:04:af:0a:a0:c0:ad:be:fb:d0:24:29:e2:e2:b1:
90:e7:20:67:69:2f:14:bf:4e:9b:f0:00:ae:f7:2a:a9:cd:d2:
92:77:14:5f:51:f2:d0:87:c6:92:53:62:cf:27:2d:42:81:2b:
56:c5:1e:b3:19:05:b2:76:1a:1f:5e:1d:62:72:63:74:86:b0:
3f:19:ef:09:38:52:99:24:2d:72:1a:2f:12:9e:e7:8e:07:8e:
a6:c9:ca:33:75:6c:21:8b:09:ad:25:68:b0:67:b6:1b:cf:69:
d3:0c:8f:c7:27:a3:1a:c2:cb:6d:5a:63:81:53:ed:c2:bd:96:
af:3b:4f:fb:07:6f:c9:50:66:d5:52:cc:0f:59:fb:2e:79:ab:
13:9e:b0:1a:22:71:05:fe:fd:f9:89:34:4d:37:2c:63:0b:15:
d7:2f:82:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:50 2025 by rpki-client