Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/292a182f-e5e9-3cf5-9555-d0533f9c5609.roa
File: 292a182f-e5e9-3cf5-9555-d0533f9c5609.roa (raw, json)
Hash identifier: iJJtCJzxnbinPHCAcm2SxCL5H/GKlIwxIqY7OIIGFHo=
Subject key identifier: A4:FA:E5:12:3A:B9:45:0D:69:F8:20:16:D2:B9:27:F6:8B:FB:FC:AB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584043920324B372A60E0CB1FEE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/292a182f-e5e9-3cf5-9555-d0533f9c5609.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 206.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:92:03:24:b3:72:a6:0e:0c:b1:fe:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=dbb2ebfc-8631-40d8-83ab-40f1fe6a6359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:19:03:bc:56:11:3d:2f:62:77:be:de:75:
c9:57:05:f1:69:9e:7f:30:8d:31:78:30:e6:40:d5:
8b:48:de:b3:a8:c1:7e:5a:ec:0f:e7:26:97:d6:9c:
62:94:66:85:1b:02:45:9e:4b:46:33:53:4a:f8:1b:
b6:53:81:ab:d6:96:d7:5f:46:25:0e:c4:50:b6:a3:
61:e3:04:57:ab:43:aa:69:6a:e3:0a:10:94:47:34:
6e:fa:89:cd:70:78:68:c9:b5:cf:f2:6d:49:94:de:
9e:87:ec:81:0a:f7:0c:31:85:0b:11:f5:e3:74:18:
08:62:75:96:f8:b2:b5:13:0f:a6:9f:a5:aa:9b:cf:
7c:e3:f4:bd:de:53:3f:36:d6:95:dd:36:97:0f:2d:
ce:e8:b0:18:bf:32:ce:92:ef:3a:8a:e3:c6:c1:84:
3d:93:69:14:2e:df:49:3f:77:34:1e:e1:1b:d8:58:
03:f4:80:91:44:29:5b:0b:9e:e2:30:91:08:73:63:
58:57:6d:73:47:57:85:cc:ce:7e:28:11:44:95:6e:
b7:ee:10:6c:e0:c0:9f:37:b3:b1:36:e6:86:55:55:
58:99:9b:d2:a5:2a:e6:79:83:e3:43:03:54:00:bb:
5b:b3:77:a3:80:b1:af:22:68:3c:be:1a:fb:eb:94:
71:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FA:E5:12:3A:B9:45:0D:69:F8:20:16:D2:B9:27:F6:8B:FB:FC:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/292a182f-e5e9-3cf5-9555-d0533f9c5609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
206.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:c6:b4:e6:1e:a2:f0:8d:95:1e:46:30:e7:42:29:8c:f1:d5:
30:e7:a6:f9:70:d2:94:dc:cb:d6:d4:ab:0d:7c:50:ca:ee:f4:
c2:b1:fd:1d:cc:db:97:0e:a1:d1:bb:24:af:ba:7e:cd:1b:c9:
08:f9:e8:b8:16:b9:ae:56:cc:cc:65:54:30:bd:5a:62:bb:c8:
f1:86:33:da:c7:cc:5f:79:20:dd:80:55:67:57:25:25:c3:75:
1e:6a:91:2f:6c:dd:aa:c5:1e:2e:d5:d8:46:50:8a:3d:17:a1:
45:81:0d:64:21:e8:52:6e:52:0d:9e:e5:24:c0:cd:42:57:cc:
ab:33:27:81:16:f2:57:ad:20:dc:77:e2:6f:c4:8d:b8:ef:ff:
37:ea:bf:23:00:ba:ca:75:bc:99:a3:ed:3d:aa:76:43:7d:ef:
2a:8b:41:ed:84:d6:fa:43:c5:83:d1:f3:78:2e:e8:de:ff:22:
37:30:8d:31:e2:0c:4b:a4:ee:5b:25:93:9a:e6:1f:c6:6d:6d:
1e:0f:c0:f8:5e:c9:89:6a:d7:e0:02:c1:43:f2:f2:e8:53:52:
64:12:e8:90:c3:a1:15:b4:7e:81:08:c3:a5:11:78:a3:87:36:
a6:d8:f6:50:c7:27:f4:3e:23:18:b2:2f:e5:73:ae:62:03:da:
ec:e0:cc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:25:21 2025 by rpki-client