Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/03b0a51b-96b9-3bd4-a640-026885d8fbf7.roa
File: 03b0a51b-96b9-3bd4-a640-026885d8fbf7.roa (raw, json)
Hash identifier: C+5MyeSZjAEj9VVaxTrJJXRydKtxcAnOzIupiL6V+DY=
Subject key identifier: 1D:45:0C:B7:99:7B:AF:B6:A4:04:CE:1C:AB:16:05:EB:EB:C0:DA:0B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401AC56931FFCF51A3F0368E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/03b0a51b-96b9-3bd4-a640-026885d8fbf7.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 146.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:c5:69:31:ff:cf:51:a3:f0:36:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=6d8b30c6-eceb-4c55-aded-9732a1d0765a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:80:5d:db:01:4c:71:2b:80:81:0f:59:58:
65:e0:52:9f:c6:85:d3:46:37:79:d1:05:81:9e:f2:
93:ac:ff:4d:59:0e:1e:13:15:fb:cb:7f:31:4f:3f:
64:3b:88:36:1a:0b:45:0b:a9:10:1f:9a:2d:ae:0e:
b7:56:68:42:23:79:60:9b:de:2d:04:54:f0:af:ae:
bf:a6:4f:00:63:11:37:26:ea:57:e7:79:b7:9a:75:
c5:2e:a0:5d:8d:d1:ec:15:c3:1a:df:46:9f:ee:42:
ed:53:8c:af:57:86:63:86:c5:94:f9:3d:e4:d9:b5:
cd:02:2f:0f:b0:4e:4d:f5:1c:0c:1c:35:63:e6:a2:
c7:bf:9f:32:97:b2:65:11:4b:1e:e5:4c:a9:0a:28:
f6:6c:b6:73:33:52:1d:86:57:25:31:fc:cb:38:6d:
dc:61:85:7e:85:2a:f1:3e:bb:68:fb:43:39:71:d7:
da:d7:15:62:77:78:cc:62:63:ee:86:48:59:f3:36:
26:e7:f1:df:12:16:00:17:80:78:8b:6b:3b:84:c3:
aa:ac:c8:0f:85:bf:65:6a:14:7e:f2:1e:30:e7:35:
73:dc:90:cc:b7:c6:89:20:55:ed:40:56:a9:87:55:
a6:ec:cd:0d:93:45:01:81:2e:50:79:95:f7:51:cb:
84:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:45:0C:B7:99:7B:AF:B6:A4:04:CE:1C:AB:16:05:EB:EB:C0:DA:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/03b0a51b-96b9-3bd4-a640-026885d8fbf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:65:12:04:c1:0a:17:03:d8:f8:97:a9:3a:52:db:0c:97:17:
76:66:1b:1f:1d:a9:c3:14:b9:12:42:05:f5:06:57:09:c4:22:
f4:c0:91:74:de:d1:47:9f:bd:ca:df:f3:7a:a3:de:64:97:f7:
e8:f8:bb:1f:74:93:18:42:c4:a7:71:75:ea:3c:97:db:71:f2:
e4:70:c1:ed:61:a0:bf:d3:c3:94:b3:c6:43:70:c7:77:06:ec:
c7:d0:0e:30:2a:72:5f:d0:7d:66:88:d9:75:73:5d:84:ab:dc:
72:45:84:c0:23:cc:24:09:a5:ad:f2:b1:47:b0:be:20:b9:db:
f6:a9:e9:35:4e:9b:24:b4:d7:75:f7:b6:b9:5e:19:7e:4d:e1:
42:36:78:87:21:97:c8:ac:cd:37:d5:01:fe:8e:73:c4:f0:df:
0a:f0:15:90:14:52:53:bc:e0:17:ed:07:bd:1d:cb:e8:e4:c0:
79:59:0f:43:ed:d6:ce:bd:a2:9a:12:a2:5a:40:f7:f8:d0:6f:
2b:99:ed:fd:fd:0e:45:34:20:45:df:e6:58:e6:7b:40:fe:3e:
c3:08:e3:b7:3b:30:e9:97:50:c1:71:d0:e5:70:1a:b3:cd:06:
3f:ed:76:69:1f:07:6a:32:60:6a:10:1b:a3:1f:7b:a6:1b:7d:
3e:85:f8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:14 2025 by rpki-client