Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6d689a29-d7b1-3773-9d51-b207157838ef.roa
File: 6d689a29-d7b1-3773-9d51-b207157838ef.roa (raw, json)
Hash identifier: ZfSaGJtdCTjCBz2gPhLAzNCoLe5ITHh02YcMXYn0Isk=
Subject key identifier: 35:68:1E:7C:90:A0:02:65:7A:7C:90:1A:AB:1F:8F:F4:8E:6E:ED:66
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584046F1BBFFD55E10B90C923C20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6d689a29-d7b1-3773-9d51-b207157838ef.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 162.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:f1:bb:ff:d5:5e:10:b9:0c:92:3c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=ce09882f-8110-4f96-b4b4-5aa4ca20d897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:19:7e:04:f2:c1:78:62:47:b7:95:50:de:
e6:d4:c7:44:5b:3b:ba:ba:70:37:76:dc:14:17:3b:
07:27:d2:f2:ef:e4:ec:34:4b:7b:7b:fa:72:be:56:
c9:63:74:96:a6:54:a5:3b:0e:7d:cb:04:df:37:b6:
41:21:0d:fb:44:04:8a:4b:e4:6c:83:49:1d:9a:39:
99:82:a1:df:5d:6f:ec:df:c6:e6:ed:30:85:97:47:
04:fb:ba:7b:7f:70:5e:7e:3a:84:84:47:a3:93:5d:
0f:d3:98:d6:dd:7a:36:00:f3:2a:8a:43:f4:e0:f1:
91:4d:23:d1:b9:ca:37:84:e3:39:99:b8:cc:0a:89:
09:25:b2:15:e5:fe:78:de:ec:60:aa:93:11:9f:0b:
b4:8d:cf:50:f3:41:8f:a2:1f:16:7b:07:98:b9:f2:
bf:96:40:e7:bc:ab:ee:41:46:d8:06:2f:ff:c4:ce:
a7:a3:bb:56:0e:b7:6a:37:00:d5:7b:51:e5:2c:06:
0b:e2:20:66:7d:0d:dd:b7:c0:d7:31:3b:59:12:d2:
f2:22:0c:57:28:a0:b5:96:12:7d:04:8c:76:76:ac:
e3:bd:60:13:c4:a0:e1:5f:f9:5c:ce:87:30:02:4a:
aa:07:8f:9d:25:4f:d3:ae:19:5b:e7:04:2b:d3:bc:
d9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:68:1E:7C:90:A0:02:65:7A:7C:90:1A:AB:1F:8F:F4:8E:6E:ED:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6d689a29-d7b1-3773-9d51-b207157838ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
162.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:90:2a:4b:a2:4f:75:62:31:30:21:47:7b:f0:cd:03:c4:32:
50:db:da:86:eb:dd:c4:30:0a:7b:7a:9c:72:98:eb:4f:18:b0:
52:d3:e6:9c:15:5e:41:16:70:ef:77:8b:e5:63:fb:b8:80:03:
0c:05:d7:2c:39:48:a8:9c:0e:8d:57:3f:8c:d1:1f:f6:bb:d7:
7e:f4:62:fe:c5:37:3c:7e:59:32:32:33:9c:2b:10:44:43:f1:
aa:d8:bb:8d:b9:7e:36:84:ed:57:37:11:1b:74:1d:5d:c2:5c:
45:d0:93:10:8e:8e:e6:7b:6a:be:40:af:e3:36:43:bf:78:a1:
f0:83:aa:c2:15:bb:38:82:0d:a6:bb:33:f8:17:b5:f1:40:4a:
eb:1e:d0:27:40:7a:2c:ca:ea:0f:cf:d5:46:7f:03:05:7a:52:
0d:83:5c:5c:4f:0a:ce:99:cf:0a:c7:10:61:44:41:12:92:e6:
f9:dd:17:42:ed:20:d3:5f:35:d8:60:01:ac:93:97:ab:00:69:
41:26:4c:32:2b:f8:af:b7:25:cc:dd:0e:49:e1:41:5e:a6:92:
f0:01:a0:b0:c9:34:16:52:58:ba:53:dd:05:45:45:a9:7f:e1:
b3:2b:4b:53:dc:4d:45:f2:bb:08:22:ed:fe:4f:fd:fd:37:a6:
f4:93:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:35:33 2025 by rpki-client