Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23d406f7-42c8-33bd-8ee2-02c8db1503df.roa
File: 23d406f7-42c8-33bd-8ee2-02c8db1503df.roa (raw, json)
Hash identifier: VmJvT9mMrOw3SZmWarPZ13MVOG1ihoqVbsqID6cXltY=
Subject key identifier: EA:62:32:4A:22:98:91:BA:1F:3D:97:22:71:4D:DA:F3:43:E9:DF:89
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C96F626310593C1FD8A87FFC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23d406f7-42c8-33bd-8ee2-02c8db1503df.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 167.166.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:f6:26:31:05:93:c1:fd:8a:87:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=bf3b789d-41ec-40b7-84b7-de3e59616b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:47:47:6f:09:a7:02:3b:14:9b:95:68:54:30:
7d:45:90:89:4d:20:97:ef:c8:f6:85:99:22:5d:f1:
3f:87:86:d4:cd:b6:cb:7e:05:b8:9c:c6:8a:d3:41:
9b:47:9c:c1:21:59:ee:dd:61:69:b8:c6:f3:3b:4e:
42:88:27:86:24:e2:cb:20:c7:43:93:4a:e7:e9:e1:
96:6a:ca:b5:7d:3f:25:37:e1:2a:fa:f4:1a:98:41:
3a:7d:b3:32:96:fd:a3:55:00:c6:08:ab:eb:12:50:
5c:76:fa:47:cf:24:e6:fa:f0:02:8a:3f:2b:12:3b:
3e:db:ae:fb:16:2d:5e:b8:96:09:84:ba:ad:29:26:
8d:94:72:61:e3:cb:94:71:e2:66:17:b1:8c:81:bd:
89:ea:b9:16:d3:cb:74:94:be:e1:4f:35:3b:a5:ff:
6f:20:69:94:ba:18:df:0a:e0:f6:c3:55:ec:c6:22:
bc:54:c1:e8:70:3e:33:ae:3c:47:87:ad:65:a6:00:
52:74:f4:f7:ce:4e:ab:2e:98:e9:f8:4d:ba:97:68:
5c:cd:51:32:07:93:67:b3:ec:e1:cb:ca:96:18:62:
28:f9:75:d7:b2:51:6d:23:c4:41:9e:4c:15:50:54:
26:7f:d1:38:59:6b:28:91:dd:e4:63:99:c1:7c:d8:
44:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:62:32:4A:22:98:91:BA:1F:3D:97:22:71:4D:DA:F3:43:E9:DF:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23d406f7-42c8-33bd-8ee2-02c8db1503df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
167.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:c0:1e:63:ba:74:59:14:90:fb:0b:59:64:f5:ec:e2:08:18:
7c:60:c6:0d:89:7f:96:b7:c3:e3:fb:a0:bd:5f:f0:e8:57:bf:
e2:7b:3d:e3:85:00:70:39:7c:f9:d0:a2:18:ab:11:b6:ad:4d:
00:df:c4:c6:fe:e4:30:c5:8f:c2:3e:e0:b1:9f:02:84:40:81:
1c:b2:0f:a1:66:fb:b2:bb:dc:a9:31:e8:98:42:01:16:a1:dc:
54:f1:9a:9d:a1:d5:2e:e9:bf:b3:a3:eb:b0:7f:f9:9c:84:bb:
08:bf:0c:8d:a1:08:29:af:d3:93:46:b1:62:1e:b5:01:81:29:
f7:06:e4:9d:f1:12:72:7b:9d:a0:b1:35:63:4e:8a:e5:61:d9:
7b:4c:34:99:fb:dc:0d:32:a0:d0:93:ae:3b:32:5b:1c:b7:b1:
b2:b8:f7:34:ca:76:84:f9:02:30:eb:91:57:83:86:c9:38:74:
c9:b7:16:0d:16:b2:b7:b2:61:14:18:a3:99:37:4f:60:31:a6:
73:b6:f7:28:41:d9:5d:4d:23:58:4e:11:df:c1:41:10:a3:6e:
5f:8b:db:9f:e7:f3:9d:e4:90:b0:1f:6f:8d:06:0e:2e:66:18:
aa:78:0e:2c:79:6d:18:19:08:f9:4a:84:d3:af:87:8f:29:1c:
44:a7:50:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:30 2025 by rpki-client