Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c29a379-49ca-300a-8175-a12d0d3435a2.roa
File: 0c29a379-49ca-300a-8175-a12d0d3435a2.roa (raw, json)
Hash identifier: HFS6E9bxwkOOJKakvs+oR9ubIhUWLiLtdNqRgIXdgM0=
Subject key identifier: A3:0D:8E:9C:EE:1C:58:49:93:BB:65:D3:AD:67:5C:9B:DC:DB:ED:2F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0A66D43DFC22081E02FE5100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c29a379-49ca-300a-8175-a12d0d3435a2.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 170.58.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0a:66:d4:3d:fc:22:08:1e:02:fe:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=6fa2e8b6-819f-44de-be36-fe4dcb460ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d4:47:6e:30:1c:c1:e5:bf:6a:ad:33:78:2f:
85:71:30:69:23:d0:ce:18:9a:46:b5:23:6f:a3:da:
b1:a4:9d:af:47:b4:3e:61:99:eb:b6:b0:e3:a3:8a:
87:d0:5c:a4:e4:c6:88:94:51:a9:68:ca:e6:f1:f3:
a4:a3:6b:eb:6c:59:25:d8:8c:c8:d8:82:4f:b2:96:
54:78:05:11:78:55:83:66:da:68:f2:07:68:d0:53:
ad:de:fc:9b:a9:36:3c:04:5a:eb:f0:c2:3f:8a:ee:
c1:23:01:f0:2c:6e:ec:d6:17:e9:8e:86:6c:7f:a7:
af:8c:4c:79:47:2f:8d:05:c6:26:b0:88:c0:a4:e3:
5f:f5:a2:73:a8:59:34:07:36:e3:4d:35:3b:e8:1e:
1d:91:1e:f5:d3:55:26:4a:b4:05:60:6c:d7:31:8c:
d3:2a:0d:06:60:79:2a:af:35:c9:3f:68:a2:53:25:
67:af:1d:f5:ca:3f:ee:43:a8:30:35:23:f0:3b:90:
26:ad:ff:18:c9:7d:96:be:eb:f5:9c:ac:f2:98:fb:
cf:f7:c3:6f:21:57:2f:44:53:f8:e3:9f:54:70:5b:
c9:55:91:99:00:e3:51:e1:b4:a3:7a:26:8a:eb:51:
fe:06:7b:3e:32:e6:42:46:3e:b4:67:69:59:44:4e:
93:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0D:8E:9C:EE:1C:58:49:93:BB:65:D3:AD:67:5C:9B:DC:DB:ED:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c29a379-49ca-300a-8175-a12d0d3435a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
170.58.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:34:1f:ed:d3:3c:aa:2e:c2:4b:4b:4f:84:fb:65:77:27:52:
67:42:fb:80:30:83:90:d0:19:f3:86:5c:46:44:18:32:0f:2a:
b3:f3:58:82:66:cf:c1:67:9d:2c:0b:c6:46:2b:04:3f:37:e1:
ca:ee:4f:71:e4:ed:05:70:cb:7f:72:96:77:b8:d9:74:c4:1d:
01:be:07:8a:07:07:c7:bd:99:cf:0e:56:b3:e7:ed:b3:e5:ca:
ea:b0:9d:85:f4:f5:66:cf:74:ff:98:f5:da:ec:18:f5:e8:8c:
96:e2:43:06:b5:26:20:9d:31:6d:d9:72:01:b0:09:e0:9f:5e:
65:de:fe:74:bf:36:a3:3e:cc:a5:a5:77:10:15:60:ff:9d:c1:
87:98:1f:8f:14:9b:cd:73:87:c4:31:99:df:2a:76:ab:56:19:
27:22:b3:ac:29:ca:59:7d:de:a9:65:6d:9a:a7:43:1b:e4:aa:
af:f2:5e:65:7f:cd:39:d9:d8:9c:25:ae:b3:0e:ca:17:f6:37:
1b:20:46:87:7b:46:35:10:1f:78:af:0d:64:80:7e:7a:69:f1:
a3:36:05:8b:f9:e1:70:ae:58:38:09:45:67:33:82:4f:0f:9c:
b4:1c:f4:b1:f1:97:c9:6c:08:ba:c3:7f:11:fe:dc:f4:c0:c8:
a7:a5:69:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:44:02 2025 by rpki-client