Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c9a3399f-c62a-31a7-be71-014d5136dfbc.roa
File: c9a3399f-c62a-31a7-be71-014d5136dfbc.roa (raw, json)
Hash identifier: cGpcykeEUQx3JS6ZLSqThLxCNDO86brjPnaBMBdsuQc=
Subject key identifier: 40:E5:3A:6D:48:B5:95:8B:22:3B:18:F1:61:91:10:BE:2F:56:7D:8F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D20E36EA208E3CD21160CC580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c9a3399f-c62a-31a7-be71-014d5136dfbc.roa
Signing time: Fri 04 Mar 2022 05:00:00 +0000
ROA not before: Fri 04 Mar 2022 05:00:00 +0000
ROA not after: Fri 08 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 157.241.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:20:e3:6e:a2:08:e3:cd:21:16:0c:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 4 05:00:00 2022 GMT
Not After : Apr 8 04:00:00 2022 GMT
Subject: CN=f065dc1f-448b-4086-a898-4aa4edc3abbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:73:5e:31:fe:ef:46:19:e3:32:54:d5:48:a2:
d3:cc:e2:83:f7:84:29:0a:3b:24:14:01:a8:da:26:
ad:4a:e8:d3:d9:ce:d6:fe:00:1f:37:96:18:00:65:
33:ab:52:e1:66:8d:d5:17:4e:32:54:b1:2a:0f:fc:
9e:f8:19:6e:2e:d0:25:1c:85:3d:c5:c6:a6:b2:3f:
21:e7:a5:83:ba:83:51:db:d0:56:fa:b1:52:13:e1:
2c:76:78:d3:2f:d3:36:8a:66:0f:03:41:33:cf:8c:
b8:81:f1:ec:c0:0b:cc:99:51:2a:1a:bd:79:7d:4b:
87:dc:f4:31:4a:34:e9:ae:06:dd:fe:30:87:68:50:
cb:5c:1b:22:91:f1:e0:9d:b1:5a:c0:74:19:92:7d:
ed:5f:cf:6c:ed:2b:7b:94:f9:03:4c:95:29:92:0a:
c6:af:a5:ec:78:13:b4:e0:96:80:39:a8:5f:eb:59:
c6:c6:2d:1e:81:4e:75:d9:94:87:e7:30:98:42:96:
e7:67:d3:b3:c1:2f:ba:eb:ab:54:19:58:68:09:fe:
98:63:73:b8:0b:cc:28:73:d8:31:e7:32:74:71:7e:
dd:b1:cc:da:09:b1:0d:57:85:3f:b0:b7:f7:a6:d2:
3e:fa:e8:c5:bd:1f:52:b4:18:1f:5a:4a:6b:47:b9:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E5:3A:6D:48:B5:95:8B:22:3B:18:F1:61:91:10:BE:2F:56:7D:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c9a3399f-c62a-31a7-be71-014d5136dfbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
157.241.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:2b:f0:94:8c:d2:bb:ce:63:03:6f:6f:1b:9d:e6:48:ed:1d:
fb:07:78:dc:b0:08:a2:c1:ef:00:90:ba:77:5f:db:10:f0:f8:
9b:d1:6b:05:8f:39:99:31:27:5e:a2:1e:7f:59:f5:4c:50:5d:
3c:f4:45:97:6f:43:72:84:92:d0:21:08:65:3b:5b:18:5a:9d:
fc:53:9c:f6:d1:10:05:57:ef:17:fc:86:f0:f7:78:be:28:1e:
3b:c9:78:e7:2f:80:15:06:94:c4:18:f4:6b:63:c5:6a:05:15:
22:64:8a:74:83:6a:a8:09:40:95:83:4f:1a:92:d6:35:8f:0f:
fc:72:99:09:15:39:e8:ea:db:94:1e:9d:c1:a4:79:17:3e:88:
4e:fb:77:de:b3:1b:cf:2d:28:c2:66:f5:51:1c:62:bb:6f:90:
9e:1c:80:9c:dc:a9:86:8f:ab:83:27:c2:18:ba:91:35:9b:92:
06:27:54:e2:7e:d5:dd:f0:11:c2:7a:67:65:7b:dd:ae:cd:bb:
a1:9a:0c:04:89:d4:6d:b8:5a:6c:1b:52:07:59:59:ee:85:6a:
c2:b7:02:9c:29:80:3a:7c:1d:22:da:9a:64:36:d6:c5:90:0f:
8b:80:a7:d1:47:27:8c:b9:4f:2b:c0:b6:d1:90:71:34:45:48:
ec:19:9d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:44:36 2025 by rpki-client