Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/70e9be7b-3bcf-380e-9706-770ea349177e.roa
File: 70e9be7b-3bcf-380e-9706-770ea349177e.roa (raw, json)
Hash identifier: VEkR82+59L82oPzubxbaJn2MZ9ojvJuXGbWUc8tLWd0=
Subject key identifier: 57:43:82:63:03:3C:37:7F:87:95:1F:7C:8B:75:44:9A:AC:38:52:31
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E44898E0564582B1408F309C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/70e9be7b-3bcf-380e-9706-770ea349177e.roa
Signing time: Thu 16 Jun 2022 12:00:00 +0000
ROA not before: Thu 16 Jun 2022 12:00:00 +0000
ROA not after: Fri 22 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 47.128.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:44:89:8e:05:64:58:2b:14:08:f3:09:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 16 12:00:00 2022 GMT
Not After : Jul 22 04:00:00 2022 GMT
Subject: CN=f2b8a862-7437-4d59-ae67-cc210d37f419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:ed:6f:97:00:de:74:10:3c:ea:14:d7:9b:
5c:27:be:6e:df:38:3d:c1:09:a8:52:5a:1c:cf:2e:
ef:38:7a:1e:d4:97:d7:cb:bc:db:75:cb:31:b6:b8:
65:49:fe:b4:78:5e:db:07:ae:93:78:f1:ce:88:f9:
7c:24:74:53:78:97:0d:ed:d9:d8:d1:0a:bf:3a:aa:
04:c5:74:8d:fd:b1:25:24:f4:31:1e:93:ea:d5:37:
b3:0a:9b:bf:b1:6c:e7:43:f8:99:e7:ee:5e:57:89:
b0:c5:89:98:a4:9f:59:99:6c:16:1c:04:22:3d:b8:
fc:3f:31:99:66:a2:8b:02:6f:24:c1:bc:6e:9a:b8:
c1:cd:8a:04:5d:47:da:92:93:b2:88:b9:85:8a:e5:
80:16:db:b3:63:62:70:23:6f:6c:0c:5b:f2:33:ea:
de:64:fb:41:7a:9e:5c:d4:e7:44:39:c4:9c:ad:5f:
e7:0e:d1:22:71:53:e1:d5:0e:34:b8:2a:df:2c:90:
95:83:f1:03:c8:77:c4:36:cc:1e:89:35:9f:91:c3:
69:53:2f:02:e5:dd:45:5e:5b:f4:ba:29:05:70:54:
6e:e5:0c:91:87:d3:9c:4e:57:c7:45:b5:f5:a5:19:
da:be:f3:9f:18:e5:b4:80:27:e6:a9:9f:58:21:f2:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:43:82:63:03:3C:37:7F:87:95:1F:7C:8B:75:44:9A:AC:38:52:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/70e9be7b-3bcf-380e-9706-770ea349177e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
47.128.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:0e:de:fe:b4:e7:a4:73:64:05:83:31:aa:62:60:c8:4e:d2:
60:98:b8:2e:87:a3:df:a2:fb:bf:89:cb:bc:82:65:5f:1a:22:
20:78:a6:a3:bb:2c:a5:cc:fe:c4:97:14:ca:8f:47:5d:52:c1:
1b:ab:93:59:9c:f9:43:2c:ce:60:62:2d:5f:87:74:18:d5:fe:
21:61:1d:16:69:08:16:67:d5:b6:d0:43:0d:33:04:e5:28:14:
a3:18:c3:90:ed:a5:44:65:e1:97:76:be:6c:66:be:3c:3e:19:
45:55:70:46:ec:1a:ac:0c:79:70:e1:a3:c4:9b:b4:9f:53:6c:
f6:1e:0d:81:d3:21:2b:01:07:3e:58:67:46:fa:a1:c1:7b:93:
f9:60:9f:94:29:ce:79:5b:ff:bc:82:dd:07:20:e4:11:b2:51:
e3:71:a6:dd:f0:e6:40:8c:5e:52:72:9c:61:a8:7b:7e:2b:8a:
d5:da:03:53:4f:ef:04:48:c2:d0:20:00:18:a9:98:ef:35:5d:
e1:04:0c:cb:17:a1:86:72:cc:bf:1f:23:79:5f:0f:81:15:09:
8d:05:3f:39:20:aa:1b:ba:ff:30:eb:57:4a:ce:86:69:88:a6:
59:61:e0:09:5b:1c:b0:8c:e1:15:5d:c8:e3:fa:52:bc:35:7c:
ff:ef:f0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:40:50 2025 by rpki-client