Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c8a8375-65cb-36e8-a475-8a66314621b6.roa
File: 0c8a8375-65cb-36e8-a475-8a66314621b6.roa (raw, json)
Hash identifier: xuowvRUUi76/Np62UeuAZiepjGfYA/RveEgo3+UatBA=
Subject key identifier: A8:43:87:7C:A8:57:C1:56:90:B7:F3:FB:1E:58:4D:D9:0D:B1:BB:DF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E176013EFA5AF4902B521AD38
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c8a8375-65cb-36e8-a475-8a66314621b6.roa
Signing time: Tue 31 May 2022 12:00:00 +0000
ROA not before: Tue 31 May 2022 12:00:00 +0000
ROA not after: Wed 06 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 146.65.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:17:60:13:ef:a5:af:49:02:b5:21:ad:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 31 12:00:00 2022 GMT
Not After : Jul 6 04:00:00 2022 GMT
Subject: CN=1752f474-fdb1-4a29-8fcc-37235383e53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6a:04:cc:31:56:cd:17:7e:aa:6a:fd:6d:4b:
11:4d:c8:78:45:e8:3b:33:17:86:c1:66:e3:cb:ce:
fd:8c:4e:95:2d:94:a6:69:b8:21:af:f9:22:c8:ba:
26:ff:55:3e:1a:1c:05:b4:93:35:21:64:f3:fd:ee:
63:65:be:fd:36:df:f4:9f:cb:32:d2:34:68:2c:a6:
a5:b7:36:95:fb:f2:cb:63:a5:d2:c8:94:f2:7c:4c:
f1:1f:91:8c:32:4f:dc:b4:ca:55:1b:8b:4f:31:aa:
8e:9a:ef:a1:13:e8:e4:a9:fb:14:1c:ce:91:ab:ad:
db:d9:4b:85:fc:ae:28:a8:de:4b:29:0b:3c:1b:b8:
84:52:a1:08:a2:32:87:6d:b1:e6:6e:24:9a:cf:99:
68:ae:51:01:b4:f6:07:ed:11:9d:b9:5e:ee:89:66:
86:96:7a:e6:94:f2:35:68:69:75:e6:a5:b5:db:b6:
7a:db:15:2f:f8:a7:34:d4:98:2b:92:31:1d:c0:a8:
97:1b:b3:06:d8:79:4f:fb:3b:dd:06:82:8d:40:68:
ea:c5:52:98:18:dd:57:92:b8:6d:1c:41:5d:98:f9:
fb:47:0d:3a:6a:a2:f4:0a:2d:8d:cf:7e:65:d2:68:
cb:c7:a2:b7:ae:44:08:85:83:bd:d8:64:64:14:37:
66:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:43:87:7C:A8:57:C1:56:90:B7:F3:FB:1E:58:4D:D9:0D:B1:BB:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c8a8375-65cb-36e8-a475-8a66314621b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.65.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:95:7e:c1:06:70:2e:c9:f5:60:b4:da:0d:ba:31:09:2a:5c:
07:b9:3f:e8:e1:f0:d5:76:0a:75:4d:d9:18:4d:4f:38:8e:d2:
7b:0e:0b:ba:44:65:8b:e3:2b:ee:18:81:df:d6:ab:19:10:09:
bc:7f:a7:fb:85:a2:91:e4:3a:0b:c9:cf:4c:dc:33:da:19:1d:
95:5e:4b:bb:2f:35:12:ad:13:71:7b:b8:d2:d1:2b:40:d8:b8:
1b:49:3c:1a:1d:07:1e:04:26:b4:b8:90:de:ad:be:52:c9:10:
f6:73:98:78:20:d7:7d:46:0d:25:87:e3:c0:d3:2f:fa:36:c9:
60:12:34:98:be:b1:15:36:d9:bc:6f:d9:d4:d8:13:77:72:15:
51:6a:1d:79:cf:22:3a:5f:55:c8:b8:08:cc:40:94:6e:7b:80:
9c:3f:1b:e4:11:7b:7f:f4:d9:59:79:6a:cc:39:f1:90:97:f7:
52:de:32:0c:0f:9a:2e:11:68:4f:25:56:ee:63:ed:19:16:44:
27:61:cb:cf:10:8c:3a:3a:c3:f7:47:26:65:64:e0:dd:74:36:
dc:19:e7:2c:02:03:94:a3:23:01:6d:14:21:bf:6d:aa:cc:e2:
b1:74:2f:b5:28:6e:05:59:b1:ae:37:39:42:af:25:3d:50:3e:
58:22:be:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:17:06 2025 by rpki-client