Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/14d65be1-2e71-36b2-8981-d2f8cc47c3fb.roa
File: 14d65be1-2e71-36b2-8981-d2f8cc47c3fb.roa (raw, json)
Hash identifier: dOqMiYJXDMsOGNsryTUlLrRAUUOFKjjsGv1YFY/pb20=
Subject key identifier: 31:3A:AB:B7:E2:03:D2:17:68:20:AC:15:6D:22:2E:EC:84:61:27:94
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409533474ED231A719118518C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/14d65be1-2e71-36b2-8981-d2f8cc47c3fb.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 146.78.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:95:33:47:4e:d2:31:a7:19:11:85:18:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=de156927-46d1-43e3-85c8-5e49324aa734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a4:29:3f:2d:4d:6f:be:05:0e:6e:8b:f3:74:
07:ed:c0:98:66:65:00:81:ac:7e:e0:61:e8:d7:aa:
a2:2c:ea:67:ad:79:e3:4a:ab:90:ac:a1:4c:a3:7d:
b6:a1:33:7a:75:1b:64:f7:22:bd:a0:22:9b:5b:f1:
91:48:5b:05:96:9f:3f:0c:65:86:34:2e:cb:a4:4d:
d3:c8:aa:85:38:11:e5:18:27:7c:d6:ec:c9:a3:a5:
d2:0c:de:00:92:3c:a5:f4:94:5b:68:c6:89:bb:cc:
61:05:74:16:08:44:a6:38:f7:b0:17:c0:e6:ce:52:
26:94:fb:c9:26:b1:19:5e:af:32:fc:4c:c6:61:b8:
b5:84:af:35:f7:b9:6a:7c:1e:4b:6d:88:c6:15:05:
cd:ac:6d:c5:06:3a:0b:e0:0b:2f:78:4f:17:98:51:
95:9b:f1:57:f5:2e:c4:ec:1c:24:e6:00:f4:8a:f8:
cb:a5:77:a0:b6:ed:7f:ff:d2:d6:ca:3b:16:19:8c:
81:53:63:26:a6:56:3b:b2:33:eb:29:e0:3f:e5:37:
2a:f1:9a:37:71:52:81:ee:67:8c:05:03:df:f9:b8:
88:ba:1f:da:dd:f6:ba:c3:1d:53:16:8a:c3:0d:e3:
40:18:e2:7b:ca:c0:eb:02:9c:2c:0b:51:73:1d:ce:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3A:AB:B7:E2:03:D2:17:68:20:AC:15:6D:22:2E:EC:84:61:27:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/14d65be1-2e71-36b2-8981-d2f8cc47c3fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.78.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:5e:04:d6:2f:d4:69:b1:05:d1:da:82:0c:a4:84:1b:a6:84:
55:38:47:66:94:78:2c:34:e7:4a:35:88:69:71:29:b7:d8:45:
fe:bb:3a:07:29:72:81:39:39:cf:71:19:d2:ec:b3:ec:ea:88:
a4:67:e6:a6:02:b8:bb:3a:5e:a2:6c:dd:f8:95:87:e8:1b:b7:
5b:70:68:f5:0c:c5:24:e7:22:1e:3c:13:a8:f0:a2:cd:e8:99:
0d:c3:49:b1:01:d0:20:04:9f:ca:c0:3d:cd:08:47:07:7b:35:
44:3c:dc:d4:39:26:32:af:f0:cd:53:57:cf:dd:c1:11:bf:ca:
01:96:fe:3a:ea:ea:be:e4:f1:a7:8f:62:b7:bc:b3:ef:cc:23:
f0:a6:3b:da:9d:08:fd:e5:7a:d0:69:86:b9:e3:b6:a2:95:74:
4e:7d:59:03:f1:a0:32:60:f8:f4:82:37:fb:88:ec:cb:21:04:
ec:2e:95:20:bb:30:73:dc:10:c0:5c:4f:2f:43:81:20:43:ca:
2e:f5:c9:6d:b1:cd:da:02:98:28:c9:41:c9:4c:d3:3f:5c:3d:
4f:f6:ef:02:a7:dc:17:66:e8:50:73:7c:28:a5:22:a3:7a:9f:
84:7c:7e:0f:40:fc:75:c4:36:bc:5e:b5:c5:75:ff:1a:8b:be:
b1:b0:43:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:21:24 2025 by rpki-client