Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df48f8c2-1853-3ed9-b304-6108164382f2.roa
File: df48f8c2-1853-3ed9-b304-6108164382f2.roa (raw, json)
Hash identifier: w0jkuTh/xphYxeXbO1XjqdYVgTDBen3uGRW7kbwhNVU=
Subject key identifier: 73:EF:76:FF:D6:69:FD:60:43:1D:68:78:E9:56:89:E1:CD:B4:BD:28
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858408F7107602BAF70CD9B856A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df48f8c2-1853-3ed9-b304-6108164382f2.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 137.114.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8f:71:07:60:2b:af:70:cd:9b:85:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=1614139b-3471-46fe-bd6c-ccbde17e04e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:90:99:7f:9a:fc:83:6e:6c:ff:7d:06:18:
3d:8b:a2:8c:cc:a6:94:00:9f:7e:e7:31:27:32:96:
5f:fa:60:0a:a9:b2:55:77:45:f8:eb:da:43:b4:b6:
bf:4d:17:a8:e3:fb:f6:59:95:69:e0:64:6c:95:50:
31:d9:22:3c:e3:67:f5:eb:07:48:57:10:1b:ac:06:
9d:12:0d:0c:91:d1:01:01:f2:0e:46:b9:b2:40:04:
d3:1f:29:a9:a1:ab:04:cc:c6:b6:06:13:bb:41:0a:
6b:81:c8:64:58:01:36:5e:5b:30:5e:94:6c:61:5a:
34:e9:5b:7a:c8:20:a6:43:dd:22:b5:dc:17:e7:4b:
a2:0c:9a:6b:39:11:38:7a:fb:c7:99:d2:3d:4a:8e:
c8:d4:45:15:a1:a7:b3:c9:1b:e1:98:b5:3b:50:64:
24:60:14:c3:70:80:bb:55:1e:75:4f:e1:94:ee:cc:
22:52:13:cd:c5:ff:c6:cb:be:d5:b7:8a:c2:e1:cd:
03:17:9f:d6:99:b9:bb:7d:ac:7b:15:d1:ac:a2:58:
a8:ba:85:bc:e4:86:bf:e4:f9:43:e3:c8:51:a9:74:
11:51:52:d7:e0:9d:2e:e6:b9:65:4f:5e:93:9d:4a:
10:9b:bc:a1:0b:b3:74:fc:33:70:f3:51:01:bb:0f:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EF:76:FF:D6:69:FD:60:43:1D:68:78:E9:56:89:E1:CD:B4:BD:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df48f8c2-1853-3ed9-b304-6108164382f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
137.114.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:18:71:79:b5:63:87:c1:84:72:51:14:03:0d:24:ad:07:40:
8c:e7:ca:12:f9:a6:c0:ee:47:ab:5a:32:ab:92:1d:84:39:cd:
58:64:da:25:2a:2b:db:c4:a6:43:e9:9f:18:3b:30:57:c2:62:
fb:b1:18:5d:6d:0f:b0:ec:0f:d5:06:b2:e3:85:e0:d8:e0:b7:
c6:4c:21:c9:3c:b7:c0:d4:7e:e2:68:11:90:1f:64:3d:af:5c:
65:84:05:da:b5:9e:3d:1c:12:0a:42:c0:ca:5f:4b:8b:01:e1:
fc:06:b1:f2:2a:9c:b9:93:cd:d2:00:03:44:00:5e:aa:df:99:
42:16:3d:69:53:50:99:a9:cb:ac:2a:8a:e2:9d:3c:85:0a:02:
e4:38:0d:1b:f1:4d:a4:94:6f:0d:84:e1:a5:ed:36:2c:08:08:
7c:a8:ef:73:e0:2a:a5:6b:ec:3f:93:12:6e:33:7a:c7:f9:dc:
3f:91:6f:e0:67:c7:59:da:6e:ed:49:55:2f:3c:96:41:20:30:
85:7a:3a:3e:1d:bb:2a:16:b4:6a:1d:40:50:48:2c:61:ee:fe:
36:cf:03:a4:8e:44:fb:46:5f:6e:4d:ef:13:4d:a0:e8:00:c3:
f1:e2:41:6b:4f:30:d1:8c:af:3d:a6:69:35:7f:87:4d:ba:a5:
3e:a4:62:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:20:10 2025 by rpki-client