Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3a55e227-7e2a-3b1e-aaf7-1632292042e8.roa
File: 3a55e227-7e2a-3b1e-aaf7-1632292042e8.roa (raw, json)
Hash identifier: 29aqQpK7G7zsVjI9NaBfbKhL4zG9MpgzH3QTwKcjfOU=
Subject key identifier: F5:62:7A:E2:78:C7:34:9C:F0:E8:CB:DD:7A:05:CF:57:E7:C6:A6:5D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584005A0EE148E7148E1816C9580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3a55e227-7e2a-3b1e-aaf7-1632292042e8.roa
Signing time: Thu 24 Nov 2022 12:00:00 +0000
ROA not before: Thu 24 Nov 2022 12:00:00 +0000
ROA not after: Fri 30 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 141.185.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:05:a0:ee:14:8e:71:48:e1:81:6c:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 24 12:00:00 2022 GMT
Not After : Dec 30 05:00:00 2022 GMT
Subject: CN=c4e7554c-9f5f-423b-8823-7556b6e86e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f2:7b:40:a4:b3:cb:90:ec:e9:0b:62:05:a8:
14:f2:cf:b6:8b:0d:dd:de:30:62:89:f5:48:f1:4a:
f0:4e:2f:06:4f:3a:d6:4f:1e:9a:f5:80:fa:9c:65:
38:bb:ba:33:23:36:21:9c:c8:22:6f:a1:e4:2b:fd:
96:b4:db:fc:b6:9c:3b:e6:b5:b6:6b:71:e1:ae:c6:
32:f9:aa:21:f8:66:33:0d:47:c9:f2:49:8e:e2:a0:
cb:b2:d0:f7:f1:31:dd:b8:76:6b:10:ff:fe:e8:21:
e0:28:5a:69:58:63:eb:69:19:a2:11:2e:d4:12:da:
65:d7:ee:10:ab:ac:b6:a2:32:ce:fc:ed:53:bd:bb:
8b:dc:8b:3e:fa:ce:0a:9f:49:a8:10:50:d1:60:43:
a4:8b:37:8a:1b:47:6a:33:bf:86:4d:02:88:ee:84:
67:da:a3:32:ac:0c:f5:17:26:ca:1a:7d:9d:e0:c8:
b9:3f:86:8f:6e:db:d3:66:2a:c7:1f:fb:8b:54:ac:
00:b5:84:87:1f:82:83:cd:6b:a8:05:de:92:0c:dd:
d5:43:cf:5a:1a:56:c4:da:66:eb:85:e1:4f:d7:30:
da:70:0f:4f:92:69:10:eb:60:fd:63:7d:8e:78:41:
00:ca:60:ec:59:af:5e:bb:20:01:c7:db:1d:e0:01:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:62:7A:E2:78:C7:34:9C:F0:E8:CB:DD:7A:05:CF:57:E7:C6:A6:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3a55e227-7e2a-3b1e-aaf7-1632292042e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.185.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:4e:ea:3f:7d:d2:f7:3e:c5:1d:d5:b0:67:54:6b:45:2b:e8:
e7:df:e5:0b:b7:7a:55:92:7f:ed:9e:90:4e:bd:41:98:95:cf:
9e:52:3f:a4:ca:0e:1a:91:fa:f1:11:50:22:b1:01:df:0e:b0:
b5:a2:28:03:d2:e9:91:66:d5:b0:77:27:31:25:de:f4:e6:61:
d0:58:ef:c9:37:fe:6b:e1:6a:b3:08:4e:90:7f:32:58:45:e7:
67:3c:84:aa:de:d3:2b:ff:b5:07:e7:5f:65:d9:96:14:d0:15:
8d:ab:88:74:a3:48:cd:82:be:69:1e:55:29:4b:e9:f6:25:8f:
56:3f:7a:46:34:88:b8:4c:74:58:6a:8b:31:e2:f0:9a:45:53:
f6:f0:b4:90:e8:73:f5:3d:68:4a:d6:49:0c:97:07:f1:38:b3:
d9:db:41:63:27:34:48:71:d8:87:2e:b4:1c:38:9f:af:8e:87:
b9:31:d5:d4:a2:e1:e9:81:74:e6:b4:15:93:8f:d8:26:47:42:
af:af:60:06:dd:1b:c6:74:5d:5a:8e:08:c6:7e:37:fc:d8:19:
0f:ab:ce:85:e2:b9:4d:97:38:0b:31:d6:08:45:34:31:77:58:
be:53:63:31:05:a8:c8:92:ca:38:dd:36:08:46:b4:93:f4:c7:
82:9f:7a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:01 2025 by rpki-client