Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/491193bf-5c70-3362-9e8e-72b686fbed1e.roa
File: 491193bf-5c70-3362-9e8e-72b686fbed1e.roa (raw, json)
Hash identifier: etO9NzYwUaJGS4g6DH/OqlDIEliupHWaOmi1rx/Dv0k=
Subject key identifier: 06:42:2C:95:C2:6F:BD:CF:E1:A7:EB:D2:15:8B:4E:9E:D8:91:2F:04
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF7E928C6DF314C9B5722A880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/491193bf-5c70-3362-9e8e-72b686fbed1e.roa
Signing time: Thu 19 May 2022 12:00:00 +0000
ROA not before: Thu 19 May 2022 12:00:00 +0000
ROA not after: Fri 24 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 153.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f7:e9:28:c6:df:31:4c:9b:57:22:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 19 12:00:00 2022 GMT
Not After : Jun 24 04:00:00 2022 GMT
Subject: CN=b7b33c73-de5d-466a-abb3-e55e7eab3f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:83:ca:a8:9e:27:a9:97:8c:a4:0f:05:a8:
42:2b:6e:24:fb:60:1d:8f:67:c9:df:52:7e:eb:76:
03:c2:e0:82:ab:e4:76:4f:8f:fe:c4:32:36:15:10:
a9:40:d2:1f:6c:6e:22:5d:a4:91:cf:b0:b8:be:fa:
87:30:4f:bd:46:a5:9e:01:f4:c7:c5:b7:48:fb:8c:
34:7c:11:26:fc:48:ac:a5:6a:a7:0e:b5:49:7e:0f:
40:70:bc:61:30:bf:ce:91:70:be:47:cb:44:63:17:
53:50:7e:54:43:50:90:46:a4:38:fc:79:57:73:53:
b8:a6:2c:cc:a9:92:43:f7:5b:c7:15:25:48:1e:cc:
a2:0e:20:a8:39:75:6d:6d:49:b5:0c:e4:b7:2c:d1:
62:a6:43:82:98:9b:1c:3b:e6:81:45:67:12:32:b0:
52:08:d9:2e:b9:4c:56:af:38:a9:da:c6:3e:b4:73:
61:a1:45:f6:93:cb:d9:2e:b5:84:52:fd:dc:04:84:
7f:29:34:34:89:dd:42:a1:3e:af:d3:bd:ae:f2:c6:
51:b6:49:ca:89:31:33:42:b3:fb:2c:b4:37:f8:e7:
19:c2:97:4b:2b:7d:85:26:66:7b:47:cf:0f:04:94:
ca:dd:85:b1:b3:48:8b:1e:58:6f:48:71:08:95:2c:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:42:2C:95:C2:6F:BD:CF:E1:A7:EB:D2:15:8B:4E:9E:D8:91:2F:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/491193bf-5c70-3362-9e8e-72b686fbed1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
153.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:0c:41:f1:10:5e:3d:48:95:94:4d:b3:40:78:e4:d1:36:36:
f0:39:47:30:16:8d:53:39:61:b2:db:43:86:25:6f:a4:20:cc:
4b:e9:ad:dd:2e:33:54:1a:b4:26:13:95:71:80:92:85:45:94:
3d:24:8c:e7:93:bc:95:f9:8b:6d:20:b6:a1:e0:bb:3a:dd:14:
23:a6:5c:51:31:8b:81:b4:75:ad:74:bf:5c:05:96:e7:b4:9b:
74:ee:6e:16:6b:14:d3:e7:dc:c3:31:cb:0a:af:6e:3a:66:ff:
5d:a1:90:17:77:73:59:f4:06:05:ba:96:6c:48:d7:bb:93:b2:
a1:8e:45:08:de:17:fd:d9:32:80:8e:cb:4b:25:83:7d:18:36:
f6:54:0d:b8:7d:56:cc:4b:51:6b:86:5e:36:78:1f:4c:b1:dc:
71:0e:80:d3:f2:49:79:69:41:06:3c:3b:52:a5:c5:aa:35:ba:
36:d5:ab:d0:27:f7:58:b4:ae:0e:96:20:48:fb:22:91:3f:96:
88:34:62:d3:e9:6c:d4:5d:c2:b0:ae:cf:aa:67:ea:17:f7:85:
77:11:01:d1:2a:a2:d1:b1:86:47:b3:46:21:60:0b:c9:5c:a7:
21:7a:76:1d:a6:d5:9f:32:c7:2b:0c:47:52:b0:f6:ab:fc:da:
a9:42:94:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:14:15 2025 by rpki-client