Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/31d934ca-adc2-387c-9e92-698a6c5cb217.roa
File: 31d934ca-adc2-387c-9e92-698a6c5cb217.roa (raw, json)
Hash identifier: dk3+cCPsNCKBAjLfswJaeMOyOZR/ef/u5pU6h7uYLdg=
Subject key identifier: A9:86:1F:5D:18:20:CD:D5:AB:06:2F:4B:D3:43:F4:B4:FA:C1:74:08
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840421DBA0F74DE0521C9BB5540
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/31d934ca-adc2-387c-9e92-698a6c5cb217.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 146.9.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:42:1d:ba:0f:74:de:05:21:c9:bb:55:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=7d6e45ae-ff7b-49bc-858e-a9d0b0b37cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b7:6e:3e:89:b3:e0:9e:a4:85:5a:bf:b9:12:
c9:e0:67:79:08:f0:ac:65:e2:a2:66:a4:b4:d1:01:
2b:b8:f1:1e:34:82:dc:17:2e:8f:2c:c4:48:cc:a3:
05:61:7f:b2:8a:58:6f:39:76:e0:4d:b6:e5:64:b3:
4a:0f:91:9a:5c:d7:56:84:4f:8c:de:01:3f:9f:ee:
21:38:a5:a9:82:40:c5:55:55:81:ff:46:7c:d3:af:
03:17:db:f2:04:79:23:7f:3f:c5:af:f6:c3:e9:6f:
b3:f9:36:87:40:f0:c3:29:06:54:ac:21:44:18:09:
1a:93:71:dc:82:76:2c:c5:5b:5d:cd:01:48:c0:02:
76:b1:d0:7f:7d:5b:d0:ca:81:54:81:3c:94:eb:ba:
df:68:b6:55:da:8b:da:42:59:05:2b:02:51:4d:73:
40:be:ab:dd:9d:40:c3:af:f1:ff:a0:21:c7:81:b6:
8d:9c:44:0d:53:11:4a:d5:41:84:ab:90:b1:53:05:
b6:a7:c7:5c:a7:a3:5a:c0:d4:ab:65:31:0c:29:f3:
28:85:85:12:20:11:a3:ab:71:ff:5f:e5:01:60:f0:
ac:af:0c:20:1b:9d:f2:b0:f7:af:70:31:b5:8f:61:
2d:9b:20:0b:82:c3:4d:36:52:d5:60:dc:16:e2:81:
29:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:86:1F:5D:18:20:CD:D5:AB:06:2F:4B:D3:43:F4:B4:FA:C1:74:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/31d934ca-adc2-387c-9e92-698a6c5cb217.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.9.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:f9:2c:b7:08:61:23:dd:79:cc:57:dd:99:4a:17:60:68:38:
81:28:e4:fa:ca:c6:30:0d:64:d5:79:60:cf:0c:99:56:b2:b7:
22:1f:35:dc:02:2d:ca:3b:72:11:61:fd:f9:5d:3b:2f:6d:cb:
3c:73:6f:84:06:5d:e9:5e:6d:56:c2:74:7a:61:0a:25:bb:77:
7c:3a:15:38:7a:75:c5:4b:eb:9b:da:fc:1d:23:b7:0c:61:92:
1d:a0:de:0b:43:8e:92:95:c6:4f:9c:13:12:fa:d1:d2:5b:6b:
d3:69:26:63:f9:bd:c7:6d:3d:00:47:91:0e:f5:16:34:62:bb:
68:36:1e:2c:db:63:5b:20:a5:4d:b9:43:2d:83:10:b1:ab:9f:
04:a4:bd:c1:1e:30:64:75:d3:9d:b1:7e:ec:22:c4:dd:d2:33:
c8:19:42:51:44:fe:4f:52:c2:fd:2d:52:9d:b8:f6:cb:17:18:
68:13:53:bb:0a:e1:fd:6b:08:a7:66:ec:be:87:73:62:d3:ef:
c7:15:b2:70:10:30:cc:46:5f:05:1b:79:c6:1f:69:cc:17:5f:
01:b8:c1:3c:c3:ed:63:5b:dd:46:a7:88:d5:f1:48:8c:a0:3e:
cd:1a:a0:76:d2:26:d7:a6:1b:56:b1:56:e2:5d:82:4c:31:b0:
c4:78:08:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:08:16 2025 by rpki-client