Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ffc9005-acc2-335d-825b-bef4bf0bd6f9.roa
File: 1ffc9005-acc2-335d-825b-bef4bf0bd6f9.roa (raw, json)
Hash identifier: COSQBccV7cmF+hOXRcPdnXjVY/d24yHqeoeGhGhC6H0=
Subject key identifier: EC:65:66:C9:F9:5D:B6:43:26:8D:A7:E8:CC:03:BE:35:C7:0A:F1:19
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCC8B62B4110A6B0423AAA430
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ffc9005-acc2-335d-825b-bef4bf0bd6f9.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 144.40.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cc:8b:62:b4:11:0a:6b:04:23:aa:a4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=ad3fd606-d0b5-40d2-a923-e0fe1fe37363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c9:8f:93:d2:35:f2:b6:35:f0:3e:a5:ef:52:
4f:b7:6a:13:a0:39:05:31:ae:88:d5:fe:1f:ea:17:
0c:10:f7:8b:3f:df:2e:9a:5f:46:01:c7:7f:d8:51:
53:c1:f5:d8:f8:1f:32:5b:16:81:09:61:48:8f:1d:
aa:0b:2f:94:1a:d1:eb:b3:e2:3e:47:75:4c:39:de:
a7:a8:55:68:07:f7:40:6d:04:85:9b:06:2e:c9:37:
9f:d8:c0:10:e2:a1:2c:63:28:71:c2:a0:3b:7b:ed:
3b:93:0e:93:54:b8:d9:71:a0:db:02:5e:8f:0e:0a:
33:6b:c0:42:8b:d5:6e:af:3c:59:09:f7:03:c2:21:
41:f5:80:54:28:3a:a8:51:97:ba:f3:59:75:b8:c0:
de:2e:f6:d6:be:cb:b0:20:de:8c:e4:04:07:f2:dd:
c2:f5:66:2d:e1:a9:7c:bb:81:a4:8a:95:fa:a5:5a:
40:73:a5:65:68:c4:dd:c0:11:9b:e9:fb:92:07:d3:
ef:a9:67:43:d4:0e:b3:12:52:06:8e:3f:dd:e4:d5:
8a:20:97:f9:3d:90:e4:aa:0a:0d:7f:b1:e6:9d:cd:
25:30:34:f3:d6:51:28:ca:d9:63:f4:65:dd:62:d0:
73:35:35:28:67:21:d5:5b:a0:99:06:d4:ce:0c:28:
86:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:65:66:C9:F9:5D:B6:43:26:8D:A7:E8:CC:03:BE:35:C7:0A:F1:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ffc9005-acc2-335d-825b-bef4bf0bd6f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.40.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:70:56:68:c6:77:78:02:bf:93:15:2f:26:fe:df:15:4f:f6:
28:3d:70:58:24:2a:b8:49:f6:56:7a:68:c7:7b:a2:cb:04:9b:
ba:c2:6e:49:ed:11:34:b6:4e:a6:5d:e3:12:a2:06:ae:18:e9:
28:38:ff:88:1e:b4:a0:cf:2c:7c:bb:77:e4:a3:54:a6:4b:b7:
bc:aa:c5:f2:64:5f:04:a8:06:87:38:a8:01:dd:c8:5f:58:ce:
0b:01:50:a4:f8:7f:89:b1:1c:d4:a6:50:38:59:d6:af:86:b2:
47:9c:89:8e:ab:d5:52:16:a4:a4:22:f3:aa:59:70:f5:4c:7c:
ea:8e:4d:cf:50:6c:a9:db:75:b2:98:ae:d7:39:c5:a5:44:5e:
64:7e:3d:9a:7b:1c:f6:1d:0b:76:ec:52:c7:a7:ec:c8:ff:c0:
2c:28:d9:a2:31:8a:0c:3d:49:a3:12:33:2f:d9:fd:10:b8:ec:
c4:4f:05:a2:83:d0:53:a0:66:8b:02:5d:19:22:0b:33:4b:26:
f8:0d:2c:da:df:9b:49:de:45:0b:bc:61:e8:e6:7a:e5:90:ac:
67:55:c3:a7:85:cb:29:df:29:7c:01:8e:6e:f1:30:da:c6:32:
25:8f:0c:df:c6:0b:fc:b4:b2:69:64:20:46:fb:69:ac:a5:22:
ad:a7:57:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:31:06 2025 by rpki-client