Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34628ceb-2932-3eba-b3f4-f1ca69145b76.roa
File: 34628ceb-2932-3eba-b3f4-f1ca69145b76.roa (raw, json)
Hash identifier: Vm8HwcE0AqdtbkhTNVxE1+VPqguMS0Ndwo2iohTucgw=
Subject key identifier: 02:01:86:9A:C1:C9:74:4A:EE:45:BF:1C:17:0D:D3:A7:37:AE:1F:2B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406BBB4CD6DC6A32AE828C7080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34628ceb-2932-3eba-b3f4-f1ca69145b76.roa
Signing time: Fri 30 Dec 2022 12:00:00 +0000
ROA not before: Fri 30 Dec 2022 12:00:00 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 169.205.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6b:bb:4c:d6:dc:6a:32:ae:82:8c:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 12:00:00 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=fe0aa5f6-1448-4bb7-8b00-1e5a4f9bcb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8c:d3:10:4e:9c:a8:45:54:13:55:68:25:6f:
38:cd:d7:8f:a3:72:d4:63:3d:25:36:cc:b5:e9:f6:
fd:12:06:7e:79:87:b2:bb:37:08:07:bd:c4:05:89:
91:29:1c:8a:7e:c0:26:b8:13:fb:a1:5e:84:f2:b5:
3c:42:82:d3:34:88:c0:e4:3d:06:c1:9c:ad:0c:a9:
ac:9d:b5:d9:ba:47:86:02:39:e0:42:bc:bc:ba:fb:
62:a6:6c:f9:6d:5d:74:d6:90:bc:e7:33:ed:c0:2f:
81:2a:e9:77:75:7f:c3:10:19:0d:40:24:61:92:17:
5f:42:d6:87:c0:42:85:47:08:28:09:8b:35:68:8c:
67:13:88:aa:cc:27:b9:7a:79:3e:0d:38:26:b9:9c:
c6:b6:33:83:b5:d6:b7:ca:1a:71:19:ee:8f:a7:8d:
b9:f8:af:b2:4f:c3:c1:d1:ed:b4:73:ca:17:04:b9:
70:d6:9e:81:25:d5:7f:6a:fd:48:e1:cd:a5:59:46:
83:98:3e:ca:7d:cb:3f:70:61:7e:2d:a6:03:51:9d:
d0:c6:55:ba:19:cc:f5:8d:f6:da:53:92:16:18:3f:
b0:33:f2:d4:bc:27:ca:50:9a:d1:67:61:e4:e7:e8:
09:b3:2b:ac:53:9f:6b:c6:12:7f:ee:50:4e:3c:75:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:01:86:9A:C1:C9:74:4A:EE:45:BF:1C:17:0D:D3:A7:37:AE:1F:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34628ceb-2932-3eba-b3f4-f1ca69145b76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
169.205.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:0f:3f:6b:26:73:50:3b:b0:c2:96:22:70:d8:fd:8f:f4:3e:
82:d9:b3:69:c4:9d:94:1a:c0:48:3b:b3:e3:da:ac:65:72:01:
de:fa:11:af:9a:39:63:d7:c4:d4:e5:cb:75:bb:91:5c:5c:45:
d6:79:a9:64:8d:0c:51:f8:11:f1:77:20:5a:28:8d:f5:60:a1:
7b:e9:0f:bf:02:61:4c:0e:01:4a:c2:73:ef:24:39:45:85:1b:
2e:5e:05:1c:40:ae:67:20:6d:77:0d:2e:05:f2:d9:78:44:88:
9d:9b:12:f4:d0:d9:b1:4b:f4:e4:1b:fb:99:69:df:3e:7c:30:
98:7e:45:f7:13:70:d7:37:7a:0d:7d:45:76:41:7c:e4:bf:7c:
2c:a7:ad:64:87:b9:b2:de:a1:bb:aa:a7:4c:11:df:73:00:3b:
1b:8f:5e:9f:2f:12:31:d2:5a:7e:ac:9e:c5:71:3a:a1:4f:a5:
5c:d5:1d:86:cc:fb:36:ec:e8:2a:a2:28:dc:37:b3:6e:86:49:
17:21:c7:9b:b5:e6:b1:3d:d3:a9:0f:e3:5c:3f:2e:7e:c7:2d:
7b:44:ab:f7:d7:2c:bd:9d:68:55:e4:e3:5d:4f:62:56:8d:eb:
4a:0f:f4:dc:65:5e:0a:7a:4a:7c:ee:1e:af:01:be:9a:e0:7b:
89:4c:fa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:51:33 2025 by rpki-client