Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b58d4b7-eb86-39c1-9698-ab0fa9c7d985.roa
File: 3b58d4b7-eb86-39c1-9698-ab0fa9c7d985.roa (raw, json)
Hash identifier: U85RbRXwc+QnoUI7Fa2Fc9FJBLdsz7rFrBZgf7z+nAA=
Subject key identifier: A5:60:45:FD:68:E2:DC:73:E7:99:BA:A6:C5:2B:08:69:E7:0F:54:3B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F30F6AFC54B6F0166501DDC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b58d4b7-eb86-39c1-9698-ab0fa9c7d985.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 160.1.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:30:f6:af:c5:4b:6f:01:66:50:1d:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=d6481631-6a86-4bbc-9c8c-3ac1083efad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:f4:a2:23:bd:1d:7a:ef:c1:09:ff:61:4e:
59:06:7b:f5:cc:70:98:81:8a:1e:7f:ea:46:67:16:
82:23:c2:16:f0:40:1c:99:38:23:7f:2a:c2:d1:a9:
27:d5:c6:ef:1f:8a:9b:8d:1d:42:7b:d0:a0:01:90:
2d:17:d6:6d:a9:1c:b9:26:0f:2a:5c:89:f1:3e:2d:
a2:c2:66:97:02:62:e6:1b:66:50:3b:bf:cf:19:18:
e6:17:85:03:1d:f1:63:7a:0f:c0:5f:19:75:88:64:
d2:e2:82:04:91:d2:3b:13:2b:22:f2:3b:9a:67:1e:
92:97:f3:2f:e6:41:2f:e6:53:7e:c3:9a:f0:85:ef:
09:30:ec:af:07:47:01:1d:fa:d3:e3:33:25:29:86:
60:7c:d0:3c:f2:9a:d1:e1:62:7c:1a:b5:1a:d9:b6:
1f:96:03:d1:02:1e:17:9e:b8:10:f7:6f:e9:17:de:
51:6d:64:14:5c:78:ef:ee:08:41:e9:ce:ab:84:66:
e7:41:33:18:73:b7:d0:9d:6a:c5:d5:9e:e1:35:02:
a6:d1:a5:27:53:f4:54:29:a9:7d:68:ff:b5:5b:83:
10:54:58:eb:57:21:67:9e:18:5c:23:89:48:b0:ed:
a8:1a:57:9d:8c:5e:ab:88:80:e8:ec:59:02:f4:cc:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:60:45:FD:68:E2:DC:73:E7:99:BA:A6:C5:2B:08:69:E7:0F:54:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b58d4b7-eb86-39c1-9698-ab0fa9c7d985.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
160.1.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:98:c3:55:9c:ab:05:40:1c:e7:1d:f2:b6:02:ab:22:5b:eb:
ce:66:13:1b:85:fe:19:85:ce:b2:6f:7f:7d:e4:14:af:be:04:
3a:0d:14:72:b5:10:91:95:6b:34:fd:ae:79:1f:ec:aa:e8:59:
69:05:65:7d:1a:12:c0:7c:d2:ff:b4:6d:08:ef:96:54:46:67:
f7:33:cd:a9:dc:f0:84:cd:96:39:1f:8f:b2:3c:35:3c:62:07:
54:11:65:29:70:d3:8d:12:e0:b9:b6:ae:9f:6f:42:a2:c6:0d:
54:10:c2:48:f8:6c:3c:b5:0f:5b:4c:65:4f:71:77:5f:f4:e7:
74:ae:d9:12:29:a6:87:6a:91:8f:e5:e2:70:e4:7e:20:e6:42:
1b:e2:cd:df:1c:83:90:fb:f0:4e:28:dc:d1:ed:be:ea:2e:85:
24:5c:6c:a2:47:54:51:19:ad:8c:62:1e:ef:b4:cc:28:75:2b:
e7:23:13:d1:11:21:3b:a2:82:40:63:ae:b5:ee:13:5d:9e:ee:
55:3c:29:ab:4e:ac:f2:bc:27:39:c7:c1:8b:4d:67:0a:cd:9a:
d3:a2:b5:f2:70:db:db:fe:f8:45:8a:79:f5:f5:42:a4:26:55:
ad:61:64:cf:6c:63:45:ee:8a:35:c5:2b:2c:53:e0:ef:02:ae:
b5:a5:76:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:03:03 2025 by rpki-client