Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/32a25c2b-1d69-37f7-a710-6c123f7e5f75.roa
File: 32a25c2b-1d69-37f7-a710-6c123f7e5f75.roa (raw, json)
Hash identifier: wYolF9BqKG8BA+e4OB9yZOOz7z53XKtJol62F6yC05g=
Subject key identifier: 26:EF:EB:CD:62:F8:E3:03:66:4B:95:6C:F1:62:03:7E:7B:82:DE:D8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBBAE358CC2E4D7D20E3FD500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/32a25c2b-1d69-37f7-a710-6c123f7e5f75.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 206.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bb:ae:35:8c:c2:e4:d7:d2:0e:3f:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=127aebb0-6f4d-4214-924e-f1d6019a9e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:ad:d1:ca:47:8e:5b:d3:ee:93:e1:8d:15:
95:5c:15:10:dc:e9:d0:33:dc:ff:aa:81:01:0b:1a:
2c:e7:55:3c:37:93:0c:1b:24:f5:25:1c:c4:d9:5f:
a2:24:eb:18:d7:99:c4:1a:c6:9e:02:97:b0:6c:02:
b0:62:f6:eb:3b:32:f5:ce:1a:63:46:03:86:29:c9:
89:fc:52:eb:89:d1:07:cf:cb:e2:07:d7:26:65:83:
55:29:50:79:97:4d:34:96:e4:21:76:7d:ea:17:47:
bb:5a:8f:e4:97:ee:a8:ba:35:c3:11:6f:94:68:bc:
a2:5c:32:d5:96:09:e8:10:74:03:09:be:40:43:1a:
43:5e:a5:4f:d7:40:de:98:df:8a:3a:ea:6e:0b:6e:
87:71:0f:2c:ee:38:fd:cf:c2:c9:09:08:be:f6:4a:
83:26:46:38:8a:94:7c:8e:08:b4:4a:8c:84:51:af:
e0:8d:5c:61:dc:9a:9f:ff:ee:7c:19:e8:96:20:98:
c1:ab:b5:32:7f:9f:53:ea:d1:d1:48:54:42:df:22:
f6:bc:f6:b0:d2:e8:12:43:bc:12:af:d5:eb:d9:05:
7e:36:ec:76:15:b5:e0:86:66:7c:94:ab:d6:5a:0b:
f8:02:16:b9:02:4a:29:ab:87:fd:dd:b3:bd:4a:d0:
f5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EF:EB:CD:62:F8:E3:03:66:4B:95:6C:F1:62:03:7E:7B:82:DE:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/32a25c2b-1d69-37f7-a710-6c123f7e5f75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
206.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:a4:60:7e:61:44:bb:4c:d8:b5:74:5c:bb:11:9d:ec:76:60:
b1:48:10:d2:66:94:ce:b6:99:15:7d:4d:e0:34:4a:29:7f:f3:
03:ca:2e:12:25:04:86:d4:1b:1e:55:17:cb:98:a6:e5:5a:1b:
9b:e7:56:53:5a:c8:42:7d:b2:72:92:1e:0c:49:13:08:94:be:
44:ad:64:6e:9f:3d:e1:58:be:0e:1c:00:73:10:02:92:df:c1:
27:b4:24:7f:83:54:f9:2e:08:5f:b5:13:98:33:7e:93:94:b3:
e8:9a:fe:bc:f6:9e:0f:de:2d:d5:40:de:83:d7:bf:0d:60:ca:
cb:87:66:0a:4c:fe:06:75:c6:a6:28:e2:99:a9:3c:3d:8a:0d:
62:c4:1f:0c:13:d9:41:1b:a4:1f:14:f4:e2:aa:1d:d2:9b:9c:
b7:54:25:e1:3a:89:78:32:6b:b7:9a:0c:00:c5:86:29:86:e2:
be:3f:31:7f:c4:21:3a:9f:f1:3b:c3:4a:97:67:b4:01:78:43:
8a:5e:de:55:df:d3:36:9c:7f:bd:10:62:4a:0d:ec:36:b6:71:
65:66:a5:89:6b:30:c8:ff:6c:98:b2:ff:91:92:73:e5:4f:bc:
15:8b:09:7f:e2:9d:9b:3c:03:8e:2e:09:00:5a:c8:7a:0d:03:
c9:b7:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:02:17 2025 by rpki-client