Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/adb55445-7f09-3f5a-8af2-f1d25edc21b1.roa
File: adb55445-7f09-3f5a-8af2-f1d25edc21b1.roa (raw, json)
Hash identifier: RtHI5nNyZ1KPXZKtEQmRVFiV7qPntMIyP1UkUD/bbmg=
Subject key identifier: B2:F6:50:9C:3C:12:B6:31:2A:7D:80:CB:8E:FA:24:A6:8B:46:0B:68
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D81BA888EBFB2D54DF354132A
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/adb55445-7f09-3f5a-8af2-f1d25edc21b1.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 206.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:ba:88:8e:bf:b2:d5:4d:f3:54:13:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=489f9a7e-69f4-4bf1-b96f-d59ec467b04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f5:81:e2:46:15:86:6f:3d:dc:7a:c0:28:e7:
ad:3e:e9:89:fc:9d:ad:9f:0d:2a:b4:f4:7c:c2:09:
d5:44:18:86:93:4c:b6:9c:02:ea:5b:22:12:6a:84:
2d:34:4c:04:e9:4e:81:35:7b:1f:15:bf:d8:a6:40:
fe:81:5a:9f:8e:b0:c0:fe:1b:66:95:9a:eb:b5:04:
94:ac:0c:b2:15:92:23:4e:4c:48:64:05:f8:b1:b8:
fc:19:6e:85:c4:5d:d3:cc:5b:b7:d1:f1:ab:9b:28:
d8:51:be:3d:3e:17:eb:3e:01:4e:5c:57:ac:1d:c0:
55:8e:fc:e7:35:e9:10:b3:6e:63:6c:c4:d5:1d:14:
64:c1:6d:63:0d:5a:b5:ae:ae:17:bd:92:58:e0:b9:
30:01:bf:05:61:19:fc:00:ab:55:9c:94:95:21:ab:
b7:e7:31:be:c4:8d:86:30:0c:96:84:6c:ed:c1:64:
51:8e:78:24:bd:80:db:f5:c1:30:8f:4d:d8:9c:1d:
61:e9:8b:0f:d0:af:03:e3:c2:ac:78:3a:4e:27:44:
85:2f:4e:ad:1a:96:34:49:c9:76:4b:b8:b0:20:d4:
e6:94:07:4b:d0:46:99:52:50:d1:67:9c:39:f0:da:
94:99:8b:6b:8f:05:85:2a:eb:82:19:60:1c:6b:e2:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F6:50:9C:3C:12:B6:31:2A:7D:80:CB:8E:FA:24:A6:8B:46:0B:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/adb55445-7f09-3f5a-8af2-f1d25edc21b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
206.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:85:ff:05:18:f8:7b:67:8f:b5:31:17:2f:60:62:dc:d1:58:
7e:7b:b8:8f:38:cd:3e:8c:4f:5c:78:a2:5f:7e:d0:84:ab:ba:
26:aa:a6:2d:36:81:39:03:0e:fb:63:46:1f:cf:a2:fe:e9:a1:
78:04:12:c3:c9:6b:e3:28:a6:f3:50:46:2a:4d:db:3d:35:fd:
63:14:1b:f6:7c:30:d2:ce:ab:43:db:86:c1:e1:3e:b4:e3:40:
57:93:63:38:ba:1e:77:da:3a:8b:45:9a:73:25:dc:dd:4f:fc:
6b:d6:67:68:9a:cb:3e:99:b1:b8:b1:dc:00:19:38:32:51:f0:
ee:37:00:14:2d:59:f2:75:85:fa:60:f1:f2:22:5c:bc:94:61:
06:4c:0b:7e:6d:27:44:dd:dc:cc:13:f7:bb:c7:53:ac:9d:6b:
ce:c0:39:a2:45:56:f3:58:c7:de:b2:9b:b1:ca:9f:d8:97:ac:
2d:e2:55:36:b5:61:8c:76:0a:b8:7d:a0:10:6a:d7:cc:59:16:
0d:c2:ca:57:55:ed:d9:f9:38:8d:8e:e2:98:a6:ef:82:5c:68:
5e:b2:5f:f8:f4:69:68:60:53:67:8b:ac:26:77:2c:1b:2b:d2:
9c:12:13:87:14:f8:f4:4a:9f:9f:1f:99:15:3d:51:88:fc:27:
dd:8f:44:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:54:33 2025 by rpki-client