Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2fced738-0788-3c3d-9c61-aaaa6a0fcece.roa
File: 2fced738-0788-3c3d-9c61-aaaa6a0fcece.roa (raw, json)
Hash identifier: gWlmIVbVu4GrN+YjnUWjqqE56ikc4cRwaKoMuFV5k/E=
Subject key identifier: 0A:AC:65:9B:E9:FE:DA:B1:75:62:D9:DE:E7:C7:11:4D:38:F8:96:C3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F9E1A3B2E4A87D7CC8156B080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2fced738-0788-3c3d-9c61-aaaa6a0fcece.roa
Signing time: Tue 18 Oct 2022 12:00:00 +0000
ROA not before: Tue 18 Oct 2022 12:00:00 +0000
ROA not after: Wed 23 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 130.205.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9e:1a:3b:2e:4a:87:d7:cc:81:56:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 18 12:00:00 2022 GMT
Not After : Nov 23 05:00:00 2022 GMT
Subject: CN=c44e1d6d-0049-4b82-ac7b-0ca52962dbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:42:de:2c:a6:a3:95:28:bd:4b:98:ae:d7:ba:
b3:3f:a0:85:e7:6a:89:25:13:1d:3f:64:cd:a0:e2:
fc:f8:89:7d:48:01:1f:55:37:9a:97:7a:c3:7b:e9:
d5:2d:1c:94:12:21:ca:cb:a4:c6:a8:94:8e:fd:a9:
14:37:9a:05:26:77:b8:9f:3e:8f:e8:c4:3f:e1:1c:
62:9f:93:cc:31:4b:71:61:87:1e:28:ad:b4:f3:91:
39:82:26:34:05:4f:8d:b5:69:13:4b:80:12:f7:c5:
eb:3c:6a:ee:91:bb:ef:0b:09:e4:91:60:77:b1:01:
f4:a7:fa:0e:c2:98:35:4c:86:20:12:8f:e1:45:63:
6a:d5:7d:70:7b:56:a7:3a:6a:7c:20:35:94:09:d1:
8f:27:84:0e:38:04:61:c4:da:16:3f:b0:fc:03:b4:
e5:12:27:c8:d4:e2:ee:3a:fa:21:1f:cc:d1:d5:91:
73:4e:1b:1b:1f:72:c7:e0:85:c5:d2:4a:0e:17:bb:
7c:f9:3a:78:4c:9e:54:c4:d2:47:62:d8:27:a3:f8:
d7:14:eb:ca:07:f1:b2:ce:85:48:58:0e:5d:cd:7b:
6d:a7:dc:75:32:bd:65:47:c8:b7:fc:52:51:b1:82:
1e:bb:b5:52:0f:85:53:9a:ba:69:c9:73:0e:ac:21:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AC:65:9B:E9:FE:DA:B1:75:62:D9:DE:E7:C7:11:4D:38:F8:96:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2fced738-0788-3c3d-9c61-aaaa6a0fcece.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.205.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:65:aa:be:c1:d3:6b:82:be:01:1f:44:8b:e4:f3:a0:c7:07:
41:be:b3:87:aa:9f:9e:5e:2d:d0:f9:77:be:1a:21:64:29:0c:
1a:e3:09:70:92:7e:01:e1:dd:89:53:c6:df:85:4a:df:b3:f7:
6f:ff:80:2f:fa:4d:4e:7c:1b:4c:6a:0b:e1:fd:94:7d:6a:e8:
96:26:14:52:90:aa:98:ac:5c:f0:df:7b:1d:99:a2:39:a0:01:
e3:f1:40:06:c2:b2:aa:c4:77:11:c1:a1:81:82:d1:0f:a7:b4:
90:57:03:e9:95:fd:85:3f:16:b7:06:d8:34:53:dc:bf:e5:8d:
63:c0:8c:f8:47:99:9f:3f:85:15:07:4d:cf:eb:58:7e:58:e1:
8d:e1:e0:28:a2:7f:9b:a8:bd:57:bb:af:b3:d3:e5:5b:e6:38:
fe:7d:24:db:24:a6:73:f4:90:6b:55:39:e9:9c:10:c6:47:bd:
ef:c9:20:52:23:0f:06:76:12:b6:fb:92:c9:dd:2b:52:58:b7:
a8:c0:f8:9c:53:d9:44:9c:42:61:02:fb:72:29:f8:74:88:18:
e7:1d:33:f1:55:b1:80:a6:60:30:a0:d4:15:7c:2d:4a:34:6e:
52:eb:56:ce:b3:ec:e7:d3:fd:48:bf:cd:08:f0:f6:41:de:7e:
65:0b:13:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:10 2025 by rpki-client