Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/009a7065-f40b-3a40-a77c-cb2c135f8b34.roa
File: 009a7065-f40b-3a40-a77c-cb2c135f8b34.roa (raw, json)
Hash identifier: IH71w9sMeXp0oyVr6yqaXwKXeip3wC0KeaHmhE0cIHo=
Subject key identifier: 5A:3C:0D:38:35:A7:9C:D5:35:D7:15:2C:36:1C:71:E0:39:37:88:41
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0A3A4DBF44AF8191222BE640
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/009a7065-f40b-3a40-a77c-cb2c135f8b34.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 169.205.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0a:3a:4d:bf:44:af:81:91:22:2b:e6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=1cb718c6-c9f9-417b-8122-0bb0facb8823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8e:37:90:1c:e2:18:63:4a:c6:f7:1b:84:5b:
3f:52:90:20:02:0f:c3:73:37:9d:39:80:a4:f1:fa:
5d:e3:88:bc:72:fb:d9:10:04:da:51:f3:83:09:7e:
da:79:f8:06:7d:6c:7a:c0:24:99:61:4b:11:b2:9f:
27:59:d4:6a:b0:41:58:ce:a4:de:79:9c:7b:43:1f:
42:54:e7:b8:2b:f9:f7:b3:09:51:e1:f1:23:5a:16:
a4:29:1f:63:8b:5b:9f:7c:f9:7d:b3:e1:6b:93:23:
51:95:59:e3:89:9c:15:44:b4:fb:04:bd:ea:53:c1:
e9:a8:ec:cf:78:66:cd:2c:a3:89:90:0b:3d:a2:82:
09:e0:8c:2f:9b:c9:65:6f:f6:ed:dd:24:8d:ba:48:
b9:e1:60:b7:e7:15:7d:4b:bb:6d:45:d1:23:89:e8:
ee:21:86:a2:52:bc:a9:59:4e:91:7d:17:d6:39:db:
96:86:7f:43:bb:7c:8d:c1:ca:3b:29:e4:07:ef:d0:
38:df:0c:11:31:22:6d:5f:ba:e6:d7:2c:0b:98:db:
f3:24:a3:7a:30:a2:b3:6a:4f:98:ac:51:ff:87:3a:
1f:9c:5c:d9:62:6c:3e:fe:ea:92:41:61:6a:6c:69:
b8:5f:31:1e:b3:bb:67:61:59:73:08:e4:83:6a:6b:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3C:0D:38:35:A7:9C:D5:35:D7:15:2C:36:1C:71:E0:39:37:88:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/009a7065-f40b-3a40-a77c-cb2c135f8b34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
169.205.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:9e:3b:06:dc:5f:63:24:7a:c0:10:03:9d:00:82:aa:ea:fd:
5b:e1:d8:f9:53:b0:89:aa:e6:68:80:ca:8c:b1:f0:35:99:b4:
ca:98:d4:1f:22:21:d2:82:ca:98:30:a3:4a:08:c7:98:61:5c:
df:80:81:fc:0b:6b:d0:32:6a:de:b9:5d:bc:3e:bf:98:75:91:
54:5b:33:41:fc:97:02:fd:18:4a:06:6c:6e:45:9c:ec:fe:d5:
d5:e5:37:22:c7:9c:54:1a:ed:69:e6:23:9d:17:57:5c:5d:92:
90:7c:33:a8:cf:d0:19:8c:0a:43:11:f2:40:85:93:84:92:be:
f9:89:2e:e7:fb:f0:6e:f6:96:36:bc:be:38:2c:ec:78:7b:80:
8c:ab:a0:18:82:5f:af:96:bd:4f:39:bf:ee:62:e3:4a:12:f5:
a0:7d:5a:44:96:3f:5c:c5:3a:13:55:46:b1:47:02:6f:9f:87:
55:75:b2:84:0a:96:81:e5:54:99:1b:fe:4b:92:b1:c2:78:48:
b5:ea:eb:33:a4:39:fe:d4:7a:35:b5:e6:2d:22:53:02:7a:27:
24:62:7d:ae:52:72:f1:56:89:48:62:16:09:08:0e:29:19:1f:
57:31:b1:fb:1d:df:4a:0a:1a:2f:28:88:41:ba:43:b4:8b:d4:
7c:01:4d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:20:34 2025 by rpki-client