Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1569fe86-3dd3-30d4-ad0d-93915860faa4.roa
File: 1569fe86-3dd3-30d4-ad0d-93915860faa4.roa (raw, json)
Hash identifier: LvRUwCGt521w2b8kW4t7sSZ5lodoGkwAkSmiiIA+4yw=
Subject key identifier: 45:FD:E8:5C:D7:D6:D4:85:81:62:76:54:F9:F9:B3:10:EA:71:28:04
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840A4BAA19EBB6735F55E96B680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1569fe86-3dd3-30d4-ad0d-93915860faa4.roa
Signing time: Fri 20 Jan 2023 12:00:00 +0000
ROA not before: Fri 20 Jan 2023 12:00:00 +0000
ROA not after: Sat 25 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 170.120.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:a4:ba:a1:9e:bb:67:35:f5:5e:96:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 20 12:00:00 2023 GMT
Not After : Feb 25 05:00:00 2023 GMT
Subject: CN=182b0829-7b1b-4cf9-92e9-0a8afd48ee7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:9c:f0:05:eb:e4:fd:ed:93:10:c3:e2:63:
db:b6:06:78:8f:0b:86:1e:78:1f:17:19:ea:8d:b3:
ce:2d:0c:24:c4:67:bc:e1:01:3c:70:34:cf:68:10:
cc:46:35:88:89:86:4a:76:b1:a4:af:df:f2:7a:12:
68:0b:1a:3a:47:20:63:cb:1e:8e:0c:42:34:93:9f:
aa:1f:d2:44:8a:28:77:ee:ca:3e:fa:1b:e0:09:e7:
ba:ba:1a:04:b7:40:19:b5:fd:c0:b8:0f:b9:03:48:
df:fe:d8:ef:1b:66:ad:59:35:23:ce:38:34:1f:f3:
a1:c2:38:49:7b:31:ce:7e:d1:ed:b1:97:39:b8:f1:
00:6f:fc:5f:ef:18:61:98:b1:3d:ad:80:52:2d:6e:
61:31:52:96:11:60:82:58:1e:08:68:83:1c:db:1f:
9c:c8:fc:6c:b2:16:a3:0e:cf:16:4c:e7:6b:da:7c:
e2:86:7d:52:e6:8d:c9:bf:44:38:d3:70:f7:42:cb:
4a:3a:66:1a:e8:5b:01:3b:ab:0c:fc:a7:64:5e:34:
ab:c7:32:f4:94:c7:a6:b5:94:1e:9c:21:78:7e:af:
71:37:49:2a:bb:80:33:8c:d2:7c:c3:41:a5:04:ae:
f5:70:06:8a:7b:7f:83:f1:11:a3:b7:d7:72:f5:ca:
41:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FD:E8:5C:D7:D6:D4:85:81:62:76:54:F9:F9:B3:10:EA:71:28:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1569fe86-3dd3-30d4-ad0d-93915860faa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
170.120.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:50:3e:4b:ef:64:a8:13:96:7c:fa:27:bc:fc:71:ae:08:69:
b6:f7:4c:4c:7e:d0:75:2b:c8:1c:39:47:cc:49:d2:d2:eb:ab:
cd:bb:c3:3f:04:d5:8b:82:f1:54:35:4f:71:5e:80:cd:53:d6:
8c:db:6d:6a:26:08:e5:6f:57:10:f3:02:42:5a:2e:71:4a:79:
8c:7e:4f:84:33:22:ef:80:9f:31:9b:75:e6:f9:5f:00:f5:73:
6e:59:3b:8b:07:ff:87:5d:46:e8:41:dd:a7:13:6d:1b:3e:5d:
10:8b:44:66:6e:5b:a5:5b:15:ac:dd:c6:33:00:e0:2f:4b:74:
c1:42:3b:45:a3:96:44:09:07:76:a4:ff:bd:a7:15:e0:91:f4:
85:fb:fd:b2:65:79:ce:fb:7c:79:eb:e7:04:af:55:78:a6:2d:
48:eb:27:60:6d:72:84:d0:de:6d:23:77:58:91:61:44:d1:28:
8f:ba:d2:39:8b:1b:89:62:bc:fb:79:89:b3:22:a5:da:65:ab:
a6:a1:f0:83:95:41:61:68:a5:7b:57:20:5d:a7:d6:54:f2:e7:
d5:46:58:a6:b9:8f:3f:c4:a6:20:a0:25:da:16:6f:cf:fe:7a:
1b:26:d9:6c:48:dc:31:ea:10:33:ac:3c:16:a1:f9:b4:93:36:
20:f4:34:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:38:24 2025 by rpki-client