Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3be1b84c-f90a-3f68-8f4d-4c2d65c4b775.roa
File: 3be1b84c-f90a-3f68-8f4d-4c2d65c4b775.roa (raw, json)
Hash identifier: VJI2BNM1SQ7s5Cd9NHabQWlvszIOnRYa5/Sabeb3WXc=
Subject key identifier: 39:05:67:59:67:55:86:99:89:73:06:E0:80:FC:EA:FA:A9:00:5A:86
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B8810D94B46BD65940726948
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3be1b84c-f90a-3f68-8f4d-4c2d65c4b775.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 167.166.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b8:81:0d:94:b4:6b:d6:59:40:72:69:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=f80e7fb1-66cd-4772-bd7a-a50f3a4b13f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c4:8a:d6:70:7e:34:74:4b:8d:35:ef:ca:07:
3f:a0:3e:f7:1f:86:1b:9f:69:64:48:7d:10:4f:a0:
56:76:fd:67:72:65:a8:c1:29:64:4c:3e:65:1b:60:
8f:3d:fb:f8:7e:47:1e:38:3d:dd:93:0f:a6:c2:6c:
81:42:7c:97:cd:a5:25:b9:24:5b:f0:52:30:c5:41:
84:c5:bf:e6:8c:46:d5:b4:f4:ab:b9:75:77:89:9c:
89:a1:60:49:81:2b:83:fc:6b:23:68:87:6b:8a:f9:
6e:6f:67:9d:97:78:69:d1:a6:2c:71:eb:03:12:f4:
49:6a:06:59:55:d6:7e:7d:08:83:d1:1c:57:fc:44:
47:cb:86:3e:55:09:a2:67:61:d5:6c:72:c3:fa:da:
96:01:24:2c:e9:c2:3c:4b:bc:72:d7:06:e3:d2:70:
26:e4:cd:fc:6f:88:d5:e5:8a:b7:42:24:3a:ea:14:
d0:5b:26:9a:2f:8b:c0:9e:d6:c1:e6:2a:52:06:3b:
5a:c3:d3:6a:d4:96:e2:69:a0:12:02:81:bf:20:3d:
55:55:94:13:3d:f5:a0:bd:ef:44:51:e7:6d:db:db:
0b:36:3b:3b:ee:c0:af:81:41:f2:55:52:b0:dc:1b:
d3:c5:17:c7:8a:a2:32:55:73:ac:a4:2b:65:60:57:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:05:67:59:67:55:86:99:89:73:06:E0:80:FC:EA:FA:A9:00:5A:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3be1b84c-f90a-3f68-8f4d-4c2d65c4b775.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
167.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:19:ee:a6:50:91:80:f6:ec:48:45:64:ad:9b:6a:18:b8:59:
0c:08:b3:6b:6e:c3:15:df:23:8f:fd:4f:96:c8:16:c0:db:1f:
4a:54:14:c8:24:a5:df:80:4d:bf:48:51:b3:a4:25:73:8c:f3:
b7:53:c9:f5:86:eb:bc:e0:8c:3f:7a:8e:57:8c:08:f2:54:bf:
67:d7:30:ca:d5:ed:ff:56:eb:1c:5f:e1:d7:05:35:e4:1f:22:
58:4d:21:d7:d8:c4:d6:b0:12:ae:08:5c:25:38:d8:47:e0:ca:
bd:1a:f2:bb:fe:f5:ef:f6:be:6a:20:13:ab:c2:6b:87:1f:fa:
97:78:aa:60:9a:3f:17:68:cb:32:4a:e2:9e:38:f5:09:0a:a7:
88:79:5b:48:2f:66:24:3c:3e:cc:ea:83:fd:f5:e9:00:fe:23:
1e:9f:9f:fc:6c:83:b8:38:cb:47:67:5d:5f:d8:c0:e3:cf:12:
d0:6c:e4:ff:17:24:03:ac:0f:ac:a6:45:bc:64:bc:89:c8:3f:
7a:f5:44:82:d1:3c:f8:73:45:4d:17:26:91:d9:a7:33:97:10:
0c:dc:89:64:79:ec:e5:4f:a3:71:68:74:22:87:c8:36:a5:3e:
20:da:c1:fe:49:b3:64:3a:18:e0:9e:32:a2:a1:be:0a:ae:be:
3e:48:36:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:47:57 2025 by rpki-client