Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f387b0e-3155-3917-9568-d204cd85a743.roa
File: 1f387b0e-3155-3917-9568-d204cd85a743.roa (raw, json)
Hash identifier: l9wo/dEjvLk1F2g4WBQVVnSbZZXyPwY8Hyod5O6KmbA=
Subject key identifier: EC:D3:98:FF:85:52:DB:80:48:AA:9E:24:55:38:F3:48:7E:6A:05:57
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E94D45C94DB8E7D8584E43680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f387b0e-3155-3917-9568-d204cd85a743.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 167.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:94:d4:5c:94:db:8e:7d:85:84:e4:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=9a518e52-c09d-48b0-870d-03e1e84e8763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:12:66:21:85:70:ad:6f:ad:7e:c9:20:f2:
11:e7:1a:23:ad:45:c2:3e:c9:21:55:18:79:e9:05:
06:9a:22:f9:55:a8:75:72:af:7d:d1:40:00:82:00:
ec:ab:f6:4f:49:1c:7a:e8:2b:4b:4b:3a:7a:60:a0:
d0:27:b7:60:3e:c1:24:ca:1e:b4:32:26:20:82:c2:
f3:d1:77:30:1a:50:9e:0d:5a:b5:11:e0:bd:b5:43:
a0:b8:e2:3c:ef:37:29:c4:f6:ff:1a:ad:6b:fb:44:
2e:2d:9e:12:76:13:78:b6:ca:63:c0:e3:5a:3e:07:
19:f1:5a:14:e9:ef:02:bb:0b:f5:ff:ac:60:18:0e:
a9:db:aa:cb:79:ae:95:c6:3e:89:7a:32:f6:78:8c:
46:fc:85:81:5d:3c:6e:c9:5c:02:7e:db:4d:89:0b:
d3:56:62:fc:06:4a:44:38:e1:bb:68:b6:cc:b3:8f:
b8:cf:54:1c:57:43:11:6c:97:d9:32:20:b3:ec:a8:
9e:89:0c:d8:39:a3:65:06:0a:d0:59:d4:84:28:47:
99:9a:dc:de:c7:af:e4:93:c7:db:19:cf:3e:78:43:
74:11:2e:65:da:00:48:fd:b1:4c:cd:f9:ef:6d:1b:
73:d5:a1:39:36:be:1f:33:a7:45:8f:a7:a3:ec:65:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D3:98:FF:85:52:DB:80:48:AA:9E:24:55:38:F3:48:7E:6A:05:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f387b0e-3155-3917-9568-d204cd85a743.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
167.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:d0:95:e3:81:fd:09:42:ed:30:3b:8f:a1:d0:80:40:c6:b0:
b0:5f:33:b7:3a:02:f7:80:de:7c:6a:95:e7:58:1f:ab:cf:b6:
2c:5a:37:f4:7b:9a:bf:b6:80:a4:30:23:8f:2b:61:7d:b6:97:
0f:28:46:e9:fd:b2:36:4b:f4:a4:b1:62:51:5c:d8:60:19:00:
bc:d9:50:f1:2c:07:d5:b6:a4:f0:e2:90:ad:47:a0:29:ac:19:
e5:ee:8d:a9:2b:83:f8:c0:07:b6:17:b0:14:ba:98:03:0f:09:
46:bb:79:dd:9e:66:f2:6a:76:f0:9c:f9:ab:dc:2d:67:db:cf:
c9:4f:14:40:54:09:9c:5b:ef:ca:3d:d4:4d:36:15:9f:25:be:
b0:7b:71:7c:36:86:23:35:60:fd:4d:13:e9:ce:dc:66:52:d0:
53:7e:5f:4f:bc:e5:1e:4e:f9:b9:03:9b:e0:68:e1:e8:67:8c:
56:10:07:b5:af:10:05:5b:fc:a3:73:c7:66:8b:73:d0:e4:f9:
d0:df:50:36:9d:49:53:7d:08:d7:9c:50:b7:49:af:f2:df:6f:
64:df:19:6b:2c:4f:8c:44:3e:24:eb:69:64:aa:fe:a0:5c:11:
73:3b:bb:60:28:20:e5:85:a4:5d:a4:c7:7d:18:2f:10:5c:14:
8c:55:6e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:30:41 2025 by rpki-client