Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2791e45b-9a3d-388c-9e5f-262dab1545db.roa
File: 2791e45b-9a3d-388c-9e5f-262dab1545db.roa (raw, json)
Hash identifier: c49B2arkpe54jWGaartcAoc6UwrEikoGBMWVs/nnp1c=
Subject key identifier: 25:62:0C:00:41:1B:EE:7B:84:CE:46:89:4F:50:31:37:17:87:50:9D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584061A3EF370C522326EE383E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2791e45b-9a3d-388c-9e5f-262dab1545db.roa
Signing time: Tue 27 Dec 2022 12:00:00 +0000
ROA not before: Tue 27 Dec 2022 12:00:00 +0000
ROA not after: Wed 01 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 130.205.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:61:a3:ef:37:0c:52:23:26:ee:38:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 27 12:00:00 2022 GMT
Not After : Feb 1 05:00:00 2023 GMT
Subject: CN=b7008e5c-5476-48a3-8030-3d67bb90ab68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:86:9e:a1:95:ad:eb:d9:26:9f:0a:db:2d:
1c:5a:50:95:9e:ba:63:32:9e:4d:3b:07:2b:11:d6:
65:5b:48:9a:c4:48:92:39:09:19:dc:e3:27:7f:a2:
f1:89:4e:b2:f5:1d:a6:5c:fe:3b:9b:79:45:73:3e:
1c:02:1c:19:2d:98:be:09:2f:99:ae:33:54:26:ed:
f6:81:22:f4:35:46:1f:17:3b:31:eb:e2:53:6a:9c:
df:b3:67:9f:13:b6:99:2a:d1:c7:e0:34:fb:49:b4:
89:c0:17:94:2e:0d:58:e0:ea:c9:ee:b0:a1:3e:ff:
7a:05:64:5a:e5:7a:ba:5c:01:be:f4:8f:99:4b:59:
f0:92:31:67:43:76:6b:64:d3:12:5e:85:26:bb:aa:
3e:75:83:da:6a:fb:c7:d8:6f:31:d7:8e:57:f1:a5:
4a:c4:a7:66:65:97:1f:b0:fc:3b:51:ee:f8:fd:7c:
bb:4a:ac:ce:25:92:3a:64:95:69:61:db:08:d5:6b:
68:6c:95:e3:0e:a4:b0:de:c6:27:1a:53:e3:4b:b0:
5e:d3:5d:8f:7c:4c:db:b5:05:a4:01:60:ab:d5:65:
ef:43:4a:6f:0e:33:b4:2a:e5:50:1c:c1:95:0e:50:
fd:8f:50:e9:45:54:cc:77:e5:e8:08:6e:68:29:9d:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:62:0C:00:41:1B:EE:7B:84:CE:46:89:4F:50:31:37:17:87:50:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2791e45b-9a3d-388c-9e5f-262dab1545db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.205.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:e4:79:2c:b5:69:aa:50:78:17:63:5c:7a:59:cc:cc:2d:ba:
14:00:dd:bc:fd:80:88:62:e9:ea:f8:d1:87:18:87:34:bd:d3:
10:1d:fb:fa:27:a6:31:40:27:0b:1f:6c:b6:32:2b:7e:c9:96:
0f:24:bc:dd:8f:08:b9:ec:ca:a0:9d:6e:e9:60:7c:6b:35:17:
b4:26:01:be:db:79:1c:5e:a9:f1:66:91:b3:c1:e8:58:e8:21:
90:c5:a5:21:b4:f0:b7:b3:80:b8:15:35:3e:b7:23:cb:19:72:
5d:5e:c3:05:ac:93:ee:df:5c:ed:20:9b:c2:7a:df:07:be:b4:
e8:85:4a:84:f3:ce:83:7e:96:e3:04:20:33:04:0f:16:e9:22:
34:cc:90:e3:1b:1e:95:b0:2f:fb:19:27:7d:94:35:80:9c:6b:
fe:ca:1d:c2:5d:2c:d5:4f:b7:73:9e:7c:91:e4:8f:59:40:35:
27:76:b4:5d:86:dd:a9:73:84:dd:e3:e7:09:1b:56:a6:9d:a9:
27:b3:f7:91:97:da:72:1a:d7:e3:0c:04:4c:27:ac:ac:ac:09:
6c:a8:44:f5:0a:43:b4:b6:52:04:77:fc:ad:61:e7:ae:a2:bc:
c1:ef:f5:ed:20:39:94:ee:23:74:c0:2f:72:2c:03:ef:a2:34:
6b:c8:05:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:47 2025 by rpki-client