Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2fa1cb9f-2578-393b-a7e3-5526fcd9520d.roa
File: 2fa1cb9f-2578-393b-a7e3-5526fcd9520d.roa (raw, json)
Hash identifier: j1oPlotdjzVAtnio3Ahpuh99xoZ+pWXy+A4gToz8Pos=
Subject key identifier: 52:84:E9:C2:42:CA:9B:A3:14:5D:22:02:12:46:54:AA:4B:9C:91:1F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EA5D740A64B957B3F56FB9080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2fa1cb9f-2578-393b-a7e3-5526fcd9520d.roa
Signing time: Thu 21 Jul 2022 12:00:00 +0000
ROA not before: Thu 21 Jul 2022 12:00:00 +0000
ROA not after: Fri 26 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 141.185.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:a5:d7:40:a6:4b:95:7b:3f:56:fb:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 21 12:00:00 2022 GMT
Not After : Aug 26 04:00:00 2022 GMT
Subject: CN=030950a1-8c29-435e-864f-9ba4b7faa691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:08:93:fc:85:af:41:28:01:e8:17:f0:fa:72:
69:49:7d:49:1b:c9:d5:f4:49:a6:f5:0d:42:e3:ec:
48:af:0c:19:eb:dd:0d:d8:ee:b3:33:d8:12:ef:9b:
89:bf:01:4c:f1:21:07:9d:28:3e:b0:98:23:9f:a5:
49:46:3b:50:4a:ee:12:5a:43:fa:0b:7f:8a:7c:2a:
cf:31:22:fe:11:8f:c5:e8:bb:6d:09:3d:e1:05:44:
05:f0:2f:b9:d3:51:8a:76:17:74:87:15:22:5e:d2:
b0:c5:8f:d4:9c:a0:a3:97:be:1f:02:48:80:fd:17:
22:8f:81:86:a5:df:a0:7c:67:5f:98:74:d5:93:7d:
66:18:80:de:0a:4c:4c:92:48:3b:9a:d7:fc:95:59:
c4:a0:b8:88:12:f3:79:37:31:9c:01:86:81:c9:6b:
dc:b5:d1:b4:97:9e:fa:a7:df:41:87:0f:38:84:9c:
ae:62:4f:92:58:06:b6:b4:e0:b1:79:33:94:6b:97:
59:eb:e8:2b:44:94:58:5c:d0:c6:9a:1e:84:35:94:
e3:08:a1:96:e9:97:c0:93:a6:ef:59:7f:b7:99:ca:
b1:d9:51:fb:98:76:2d:e0:3f:d1:b1:25:d1:d3:0c:
a9:d1:c8:0b:68:74:5d:6e:8f:ce:3b:e8:31:33:f6:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:84:E9:C2:42:CA:9B:A3:14:5D:22:02:12:46:54:AA:4B:9C:91:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2fa1cb9f-2578-393b-a7e3-5526fcd9520d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.185.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:c8:59:f2:5e:f5:53:15:1f:61:6b:0a:81:3f:ff:7e:30:c7:
c7:09:9e:3f:ca:df:85:b5:d2:ae:23:87:e1:e0:c1:68:a8:4f:
7d:aa:e6:d3:8a:cb:d6:fa:14:47:4f:ee:36:61:88:9c:ec:8f:
8c:3a:57:72:fd:22:4c:2f:81:7e:23:cd:1e:f4:05:eb:ff:bc:
a9:c7:0a:22:a8:1f:21:58:ce:65:2e:17:0c:18:35:77:83:58:
5b:79:92:8a:ef:e2:6e:8b:35:3f:4b:d8:a9:3c:28:fa:17:ee:
64:bb:89:2d:a1:28:47:e1:7d:a5:9f:1c:37:6d:1a:93:c9:13:
a4:05:05:91:d5:93:52:cd:28:e3:40:59:22:12:43:57:9e:a7:
aa:0e:44:b7:bc:97:7a:97:4c:10:1c:c8:54:eb:76:fe:ef:b5:
03:8e:24:33:10:14:1d:43:eb:55:54:ed:3d:fe:3c:ff:ac:31:
5d:47:d2:00:d3:65:ae:38:5a:92:c0:54:9e:eb:be:34:0d:f0:
38:40:32:fe:b6:db:c8:06:d5:1b:a7:2a:3b:e6:07:93:4b:33:
66:c2:2e:af:7f:31:7a:46:18:94:2c:57:6c:28:5e:6a:16:1d:
9f:b6:38:4a:3c:77:e3:e3:0a:90:68:f0:8c:58:94:60:b4:d9:
e4:32:33:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:11 2025 by rpki-client