Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/066863ab-76ce-3642-a3f2-b7684872cc2a.roa
File: 066863ab-76ce-3642-a3f2-b7684872cc2a.roa (raw, json)
Hash identifier: lm3JfQ/eeG8MP+pHNecymx5bpYfJMqzLRk9t3dBps2o=
Subject key identifier: AF:1A:7C:F6:83:3B:31:0D:B4:C1:84:6B:1D:FE:A3:6F:E8:61:B8:C0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6C85F88C56C980A0609E9640
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/066863ab-76ce-3642-a3f2-b7684872cc2a.roa
Signing time: Thu 30 Jun 2022 12:00:00 +0000
ROA not before: Thu 30 Jun 2022 12:00:00 +0000
ROA not after: Fri 05 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 143.204.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6c:85:f8:8c:56:c9:80:a0:60:9e:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 30 12:00:00 2022 GMT
Not After : Aug 5 04:00:00 2022 GMT
Subject: CN=8164cfe4-f610-415e-a96e-d3512f1b4abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6d:d1:d3:6d:76:f4:a2:fe:04:90:8c:09:8c:
6d:13:dc:ee:00:63:79:c6:51:6d:10:e9:7f:a9:91:
79:5f:ee:f7:15:b3:6b:12:59:75:7b:6b:4a:55:8c:
64:8b:93:ee:ea:a4:97:07:c3:3c:40:11:ed:28:ce:
01:b8:9d:e2:a1:19:05:97:5f:47:26:80:59:f4:9c:
6b:bc:f3:4b:a3:ca:29:b5:e6:47:34:4e:3b:8f:50:
c5:22:b3:0c:02:e6:c1:13:75:6d:a5:a5:35:b5:65:
0b:7a:05:b4:ae:02:ef:cd:16:38:e8:3b:ca:27:bb:
ff:f4:45:4c:f7:f2:eb:c2:b2:46:30:43:b2:07:19:
a9:65:fe:5a:5b:47:41:dd:3e:20:d5:3d:23:11:a2:
d7:a9:4d:8f:0f:b0:db:a4:cc:61:a2:b9:f3:24:8e:
3a:dc:d9:95:4c:b9:d3:ce:d0:00:59:36:44:64:8f:
0b:74:6b:72:29:ac:46:9d:d1:09:24:eb:5a:ba:3c:
a0:0e:60:50:33:89:a9:17:22:93:80:23:c5:9f:c1:
04:dd:a5:8d:23:2a:1c:72:ce:6a:1a:59:19:f4:05:
62:92:e9:07:48:c5:af:2a:35:80:6a:5a:ee:52:1b:
9c:20:56:43:c1:cd:60:43:9f:d7:c0:c0:32:c8:a9:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1A:7C:F6:83:3B:31:0D:B4:C1:84:6B:1D:FE:A3:6F:E8:61:B8:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/066863ab-76ce-3642-a3f2-b7684872cc2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
143.204.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:77:ad:33:1d:11:f3:a4:37:e1:9b:51:4b:90:32:6f:25:fc:
56:5f:0e:13:59:9c:4a:2a:7f:ea:0f:8e:bb:8d:01:a6:06:ee:
17:69:10:d9:87:a4:fd:57:fa:c6:8b:1e:df:47:46:da:7f:2c:
19:fe:e3:3a:4d:4b:dc:aa:7d:c7:c0:ff:02:f1:8f:db:6b:86:
2f:c7:f1:11:b5:e3:6c:38:1d:7b:f7:8f:4c:77:93:7a:54:2f:
91:d3:3a:88:32:11:67:60:a8:7f:49:5c:8b:bd:02:20:15:d8:
4d:63:27:d5:4a:c1:e5:39:af:db:24:2d:2c:14:37:e7:62:5b:
4f:41:d1:15:05:6b:57:70:4b:17:1b:68:e0:67:a8:20:6f:c8:
05:a8:8f:78:1b:01:c2:f7:83:56:de:8a:fa:fd:4f:62:04:07:
1a:da:a3:3d:55:b3:d6:26:bf:fd:8f:42:bf:6b:74:32:94:a6:
5c:d1:fe:d1:31:56:86:aa:0e:60:c2:4c:e8:a0:1b:b0:7e:07:
6a:0e:81:24:48:f4:fc:1d:06:c5:b6:14:2c:ed:a6:3b:7a:97:
5e:fd:32:59:26:a8:83:3e:3d:48:08:c5:55:0b:ff:16:9d:e7:
c6:59:f4:9b:80:0f:b4:b5:38:76:0d:68:70:1e:8b:0c:0c:ca:
1e:92:55:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:35:28 2025 by rpki-client