Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2f106dc2-735f-3b8a-902e-2941604be2be.roa
File: 2f106dc2-735f-3b8a-902e-2941604be2be.roa (raw, json)
Hash identifier: Msx9xEyF80LURdJwdK9EzaTDbj8nAaCgHDFTHHchoe4=
Subject key identifier: 38:D3:91:0B:E8:61:20:01:0B:CF:3C:65:EB:5E:79:26:5A:2D:0D:69
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCCE47BB5DFB99B50039EF700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2f106dc2-735f-3b8a-902e-2941604be2be.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 140.145.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cc:e4:7b:b5:df:b9:9b:50:03:9e:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=1eb1e719-4817-40d7-a797-4eb80c06b966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8e:6b:83:fe:1f:43:dd:ae:57:8b:ad:e9:0c:
d8:95:5e:79:aa:f1:c5:67:f2:9c:78:2f:91:9b:23:
d4:fc:a3:61:73:a8:2b:88:df:ae:78:09:d0:26:a8:
6c:5f:60:70:58:74:bd:c5:23:1b:87:e5:01:bc:40:
7e:77:3a:24:ee:82:b7:e8:49:0b:b0:ce:14:f9:08:
cc:af:5a:68:3e:98:d9:89:82:44:d7:ff:f0:76:f8:
b2:25:5e:c1:10:c7:45:e7:6e:77:06:82:b5:cb:0d:
2d:9b:36:7a:49:d4:ef:db:42:ff:83:fa:76:7d:57:
7d:36:42:ca:50:b4:b3:8f:f2:a9:b1:c3:c7:32:5a:
e4:e0:65:24:f9:b2:f8:3f:85:ed:2d:3a:4e:80:aa:
10:c2:7d:17:52:ed:35:d4:80:cc:6b:4d:87:18:e0:
54:14:ed:d5:5d:0a:07:1a:4b:ee:65:78:66:bf:bc:
cb:1d:9c:72:2c:8b:b2:08:33:a5:ac:cb:48:ab:2a:
71:f5:87:0d:09:bd:97:fe:e9:f3:12:62:77:88:5e:
b1:72:97:69:fa:75:43:5d:c9:64:20:3a:1a:f8:13:
54:1e:8b:d2:26:6f:c2:16:ba:d6:f1:e5:32:20:43:
c8:14:e6:08:1d:bb:ce:26:ad:d6:12:a4:37:18:e7:
4f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D3:91:0B:E8:61:20:01:0B:CF:3C:65:EB:5E:79:26:5A:2D:0D:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2f106dc2-735f-3b8a-902e-2941604be2be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
140.145.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:11:61:c6:bb:2a:33:3b:c7:3e:88:fc:7e:1e:2b:1c:98:87:
fd:a9:58:c7:4b:9b:98:2b:c1:1d:71:29:7e:3f:ed:b4:eb:46:
d0:e2:96:5e:92:f3:31:4d:d4:ad:fa:ed:0a:aa:08:5b:85:e3:
5b:64:55:8d:d9:a1:98:96:b1:2c:b9:b6:3d:d8:bf:15:48:86:
65:62:75:c9:94:10:9a:b9:5e:02:a2:03:d3:3b:f9:92:7c:9f:
df:d8:88:8c:ad:3b:36:2a:3b:8f:0f:87:0f:c9:66:80:b3:90:
aa:ac:0b:16:ae:94:74:20:0a:92:99:97:bf:de:42:de:b4:e5:
1d:1a:3d:c1:91:de:ba:c0:7a:24:77:bd:15:62:57:45:5f:d3:
72:f1:fe:eb:b9:f6:b2:14:66:3b:e3:f8:5c:e7:de:1e:ea:fb:
8c:0e:76:26:e3:9c:b8:dc:eb:9e:13:46:a2:94:9e:b2:8f:fe:
ef:40:f4:a5:f4:0b:49:fa:0e:fc:c1:87:35:d4:04:60:7f:9b:
8a:e4:66:a3:d4:31:35:aa:ba:07:13:0e:ee:40:6d:e1:75:1c:
6f:66:71:a4:c7:90:90:e6:65:0e:f0:6b:fe:23:91:51:fd:88:
17:5a:d3:dc:1c:50:0f:09:ac:ac:d4:87:c2:94:57:86:2d:49:
2c:17:1d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:48:29 2025 by rpki-client