Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bfc16916-06f9-3852-9484-97097c1db9a1.roa
File: bfc16916-06f9-3852-9484-97097c1db9a1.roa (raw, json)
Hash identifier: wXkXfqlTCTtd8/cBc+pq7LuG36WycMfEN122SXxm7mM=
Subject key identifier: 22:CE:AC:96:9F:5A:D6:C8:7D:A0:DC:29:08:48:49:F6:1B:46:60:3F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E93B93F1B328CAB7B30227180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bfc16916-06f9-3852-9484-97097c1db9a1.roa
Signing time: Thu 14 Jul 2022 12:00:00 +0000
ROA not before: Thu 14 Jul 2022 12:00:00 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 144.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:93:b9:3f:1b:32:8c:ab:7b:30:22:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 14 12:00:00 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=15bdeaa4-1f36-4b6a-b9ed-04682d672668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ee:f1:ca:5f:56:b1:56:03:f9:c8:68:93:34:
28:a6:a4:92:7f:4a:f7:9f:87:44:8e:06:a1:27:88:
89:86:f3:63:3e:a2:56:85:66:31:fd:da:59:c8:d9:
00:37:ff:49:a9:b3:77:8f:c1:df:03:7f:6a:48:f4:
88:2a:d4:17:64:93:0e:e8:06:e8:cb:33:13:33:7c:
36:c8:ef:a9:24:6e:07:77:a6:39:21:76:b6:d6:b5:
1b:30:5f:74:0a:c2:16:72:0d:4f:fc:e7:bf:1b:4c:
fb:4c:89:be:57:45:f3:c2:8a:9c:01:80:28:4d:1b:
62:4c:49:5b:c0:71:71:10:e2:0f:45:84:92:33:36:
05:59:55:cb:37:a9:8a:2c:89:c8:a0:e8:f9:ec:b8:
ab:97:8a:36:21:ad:a9:a7:98:f2:4b:51:1d:f0:72:
f3:42:b6:61:7c:ae:48:1c:88:9e:57:e4:8c:05:49:
02:bb:76:ed:32:58:7e:d3:9b:4d:50:be:ed:6e:28:
5e:a2:a7:e3:c9:a2:d3:ba:d0:87:11:46:99:8e:2f:
c6:da:61:49:bb:1a:c1:1c:d1:9b:29:8b:23:3b:5e:
ce:fd:95:af:d8:2d:97:24:88:ac:95:bc:76:ee:84:
c2:79:18:66:c2:f3:5b:1a:fb:cd:e3:81:b7:60:ec:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CE:AC:96:9F:5A:D6:C8:7D:A0:DC:29:08:48:49:F6:1B:46:60:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bfc16916-06f9-3852-9484-97097c1db9a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:a9:7c:93:0a:a7:39:02:02:ae:9b:c2:17:63:06:30:ab:3d:
a9:6f:ba:90:83:4a:20:75:ac:96:8b:dd:fa:19:e0:c2:b3:e7:
e3:b1:eb:1c:36:09:80:9d:91:9f:d5:1b:6d:3f:61:07:16:01:
d3:7b:1f:5b:50:05:70:c8:98:b6:52:8b:3a:17:66:c9:e1:00:
41:b6:15:80:f1:cf:42:c5:0c:c8:63:4b:54:63:7f:b2:e2:7a:
dc:5a:de:88:ea:8a:e5:e7:e1:a8:b0:c8:80:89:41:5f:e3:03:
2d:d9:8c:6c:c3:86:22:95:2d:95:3f:7d:17:29:cc:95:a8:28:
08:6b:25:eb:80:e8:5b:c8:55:75:5d:bb:d5:79:62:5b:fd:ac:
53:1d:7f:67:03:f3:68:2e:c0:1d:20:b5:e1:5c:ae:52:8f:81:
92:74:07:b7:45:6c:15:4b:4a:30:12:b4:0a:c1:fe:5d:5e:7d:
a0:de:30:6b:cc:7e:c2:db:86:9a:80:0c:32:20:e1:f5:35:59:
39:9e:e3:ad:3f:48:11:4e:47:5c:78:eb:a9:3d:91:de:23:22:
4d:64:47:2d:9e:9c:c8:a9:7b:d7:13:64:3f:58:35:eb:8a:e6:
cb:e4:3b:aa:cb:42:bf:13:f2:84:76:3a:ac:d0:6d:9d:f1:b1:
f2:20:f9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:24:02 2025 by rpki-client