Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e60d6e7-35ff-3958-aac7-2df05adefcc1.roa
File: 2e60d6e7-35ff-3958-aac7-2df05adefcc1.roa (raw, json)
Hash identifier: RZ5iYfNv6k2YH6zr9x/ula7LIjewQnbDaqXeSaB4DfE=
Subject key identifier: 2D:E7:29:86:46:D2:6F:33:EE:82:B9:45:A9:5A:91:BF:8D:B1:30:A3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0C11792E2EA03BDBEFC12040
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e60d6e7-35ff-3958-aac7-2df05adefcc1.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 134.64.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0c:11:79:2e:2e:a0:3b:db:ef:c1:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=a4ccb549-1a35-41c4-986a-4f435f2390c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b3:b9:57:f4:e7:68:57:dc:2d:08:09:4a:c3:
13:99:cd:7e:a9:4d:73:42:3a:bc:fa:79:ce:ae:db:
e5:e1:94:f4:1f:be:20:31:0c:29:09:10:94:d3:4a:
b0:9b:bf:fa:d0:3b:49:75:68:f0:f4:d6:64:55:14:
e6:a4:64:ee:f5:5b:94:ee:d6:0f:11:e9:15:28:ba:
df:fa:3b:44:d6:c8:f2:3f:7d:ad:4f:c6:bd:0d:7a:
9f:41:b3:d7:06:53:9f:6a:88:76:79:84:34:95:6b:
be:c5:bc:fd:56:93:ad:19:42:1b:f2:f0:41:60:72:
70:e3:46:db:34:08:79:b0:b2:4e:95:70:97:9f:0e:
03:91:e1:17:49:f1:ad:34:7d:8a:30:b7:56:cd:b7:
dd:ec:ec:ae:be:4d:0f:6a:b0:a0:81:0b:a6:cb:fe:
54:95:49:4c:af:cc:71:fa:d4:e1:66:63:55:30:85:
89:99:48:ee:c1:e7:b8:22:21:64:3f:73:1d:4b:de:
9f:2c:64:dd:75:61:b2:01:eb:cc:09:85:76:58:45:
bd:ac:67:a2:6f:3a:1c:a4:4a:5f:a2:8d:81:72:3e:
54:b4:b3:30:c5:db:93:3a:ce:94:5c:1c:bf:28:2c:
8b:6a:ea:62:a8:19:38:cc:ff:96:52:27:a0:56:78:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E7:29:86:46:D2:6F:33:EE:82:B9:45:A9:5A:91:BF:8D:B1:30:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e60d6e7-35ff-3958-aac7-2df05adefcc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
134.64.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:97:22:9f:9e:87:a6:08:77:cb:58:29:4e:b0:23:2e:9e:6b:
12:27:4d:30:5d:20:e2:a4:f3:15:67:39:ac:e2:f3:a0:ac:7a:
89:10:45:fa:d7:d3:ff:77:5c:6f:2b:b4:a0:66:4e:fe:6e:df:
bc:36:2c:1c:4e:10:75:4c:5e:50:a4:9c:5b:ea:71:f6:6d:1b:
13:c4:79:0e:df:0d:68:18:03:f7:72:09:a1:a1:52:0e:82:14:
37:c0:c7:02:9d:cc:a9:a2:41:3c:7c:6b:f5:69:39:dc:51:76:
5d:20:2c:45:92:40:e0:7a:c1:7e:57:5b:b0:20:f6:85:7e:a7:
10:46:22:a9:17:e3:c6:c0:18:43:06:f9:4a:4d:ad:74:88:b0:
e4:42:0d:a5:81:fa:cf:0a:52:8f:a0:e1:95:e0:39:0e:b4:3c:
9e:80:0e:25:e2:b1:9e:93:6d:51:38:05:7b:35:1c:20:3d:56:
72:6f:f9:fb:91:37:3e:c2:33:ff:7e:55:cd:88:bf:9e:97:9d:
70:e2:67:51:82:e6:8f:f8:a3:b9:46:2e:7f:30:09:a6:96:61:
57:06:9a:d8:99:c0:e4:f4:cd:d7:b5:e6:3d:8b:db:7d:cc:59:
b3:09:62:32:33:4b:9c:0e:04:a9:78:2a:40:c7:d5:c5:aa:79:
20:a5:72:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:41 2025 by rpki-client