Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ce4e659-0a8a-38a5-9fe0-51770000dfb7.roa
File: 3ce4e659-0a8a-38a5-9fe0-51770000dfb7.roa (raw, json)
Hash identifier: pR/40yWnWYotU/eQjTRLfzMh0CtO7Lg5FyaH/w7XXR8=
Subject key identifier: AA:D0:74:E5:2A:22:78:01:B8:32:22:C7:21:28:25:01:E6:45:BA:5A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D3397A941E21D6D029C1BE0C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ce4e659-0a8a-38a5-9fe0-51770000dfb7.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 146.9.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:97:a9:41:e2:1d:6d:02:9c:1b:e0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=56261071-328a-4f1f-9db0-a8a5d014795a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:c0:2b:fb:a6:70:ad:2d:c3:d8:6b:fc:94:
a9:08:24:8c:64:74:38:db:e6:fe:38:24:92:78:e7:
1e:39:00:6f:6d:88:21:33:5a:00:94:ed:4e:90:a7:
8a:24:c8:45:b6:b1:36:e7:a2:14:a2:bc:f2:79:47:
af:0e:da:bd:cd:c6:fa:b6:5c:3c:b0:19:bd:e6:a1:
27:64:47:70:bd:7a:bf:94:fd:c1:52:8a:43:3a:59:
5a:63:7c:12:b9:6e:e2:af:fc:f3:0a:1d:c7:fd:fc:
e4:ff:9e:45:c3:7a:4b:3b:fb:39:b4:1c:83:81:88:
94:59:0d:3d:de:08:cf:f9:ce:e1:59:be:c4:94:6a:
96:36:50:2d:e4:47:b0:be:15:0a:4c:2d:69:ba:ae:
ac:af:de:9f:d0:5b:67:9b:e5:76:d0:03:fb:5a:63:
73:ee:3d:bf:58:a6:7e:f4:87:a3:7c:ae:b0:6d:67:
f4:31:a7:f1:ff:79:39:0e:52:f3:8a:57:fc:88:c2:
49:29:71:ab:6a:3b:6c:65:16:b0:e2:ff:ad:eb:1d:
40:41:3c:31:5f:c0:3e:6c:0a:07:68:06:4b:88:35:
cf:4e:bd:a9:a7:a9:35:e6:9f:b9:81:82:48:13:0f:
28:6d:59:cc:c9:81:ad:9e:2e:39:d2:1a:d0:72:d3:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D0:74:E5:2A:22:78:01:B8:32:22:C7:21:28:25:01:E6:45:BA:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ce4e659-0a8a-38a5-9fe0-51770000dfb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.9.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:00:10:ed:24:1a:95:3d:64:b9:ae:79:dc:f9:66:0d:cb:92:
ff:7b:1e:c7:a4:d4:7c:da:31:57:ca:fa:db:23:78:bb:e3:f4:
b0:a2:de:3f:23:f1:a3:30:18:85:bc:91:a2:f7:f1:3d:85:1a:
7c:56:14:35:e0:cd:24:bb:94:ea:70:6c:d3:ef:e1:56:16:1d:
a4:e2:73:d1:c8:27:db:a4:61:aa:32:66:ba:c0:c1:c0:8a:f3:
98:1f:1f:e5:cd:a0:5b:3e:e7:e4:e0:94:3f:1e:31:59:97:b9:
d0:75:7a:10:98:9e:cb:90:27:23:54:84:12:3d:8a:7f:95:42:
fa:50:65:3f:09:74:86:fc:17:82:26:30:06:01:fe:9f:cb:b9:
14:bd:fd:93:01:d9:86:82:63:5e:c3:95:68:2f:8b:f7:ee:d9:
79:ba:63:60:dc:37:36:5d:0d:57:d2:75:da:b0:f5:51:87:7d:
ea:93:16:af:2c:7a:33:b4:24:5f:75:51:8f:f0:20:31:e6:3e:
65:3f:9f:70:88:8b:e3:af:4a:31:2f:94:6f:c2:d9:97:d5:78:
40:26:90:d7:83:a4:7b:cb:48:21:6b:d9:a0:2d:2d:e2:18:7c:
04:69:cd:98:40:6d:1d:15:68:4a:6d:ba:02:4d:9d:23:f7:dd:
ce:fd:ad:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:15:51 2025 by rpki-client