Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/433e01ff-b70c-3f11-87eb-554675473be3.roa
File: 433e01ff-b70c-3f11-87eb-554675473be3.roa (raw, json)
Hash identifier: KsaLnZtjVHmIivdCvbldDc+4o9d4d1MVrXpPTW6LbQA=
Subject key identifier: 57:7F:98:CE:01:B5:47:3E:B0:8F:A2:44:E7:70:15:BA:D7:DF:05:7D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C8241992C90582F63477672C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/433e01ff-b70c-3f11-87eb-554675473be3.roa
Signing time: Fri 07 Jan 2022 05:00:00 +0000
ROA not before: Fri 07 Jan 2022 05:00:00 +0000
ROA not after: Fri 11 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 141.181.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:82:41:99:2c:90:58:2f:63:47:76:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 7 05:00:00 2022 GMT
Not After : Feb 11 05:00:00 2022 GMT
Subject: CN=96a68222-0904-4c3c-b332-d38030e91711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:49:ff:4b:cb:7f:1e:4b:26:2d:4f:f4:57:b1:
db:fd:68:5f:32:ab:34:3b:de:8c:f9:23:c6:90:a2:
04:7a:11:f8:d1:9c:3d:2d:36:b2:e4:d5:69:6c:8d:
31:6b:0d:3d:78:27:65:ad:ab:90:7c:eb:5b:9f:68:
05:72:db:76:86:c9:34:74:fc:ec:13:8c:c1:02:b5:
51:7b:ec:4a:24:5b:d4:a5:f7:db:f8:31:b7:85:a0:
07:98:3b:4f:56:4d:d6:98:cf:5a:0f:43:81:58:fa:
07:1f:e5:d7:6b:f3:f4:9b:b4:8f:ae:81:21:14:8b:
48:60:fd:72:b8:db:bf:88:02:3d:4d:57:d1:6a:1b:
53:3b:64:7c:4e:dd:90:dc:7e:20:c5:f6:2f:23:ab:
36:d1:92:75:2b:26:5f:0b:a5:66:52:98:b1:e6:ff:
88:4c:a2:9a:85:a4:30:0f:49:fa:d5:c3:36:36:91:
6d:b2:72:fd:5c:49:6e:90:2f:5c:00:5d:d1:d1:c1:
41:67:6c:ea:00:a0:4f:00:eb:bd:de:04:79:2a:b4:
3b:18:24:fb:3c:e1:56:19:42:71:80:fb:67:f6:fa:
6a:10:1b:d0:ed:04:62:d6:2b:e8:8f:39:91:46:28:
03:45:92:4c:2e:dd:ba:3b:b3:b4:be:5d:09:62:36:
15:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7F:98:CE:01:B5:47:3E:B0:8F:A2:44:E7:70:15:BA:D7:DF:05:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/433e01ff-b70c-3f11-87eb-554675473be3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.181.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:da:d1:3a:c9:01:90:70:7c:11:dd:9f:29:a2:32:53:e8:b6:
25:2b:af:3c:fa:d2:64:b9:7c:a1:28:8f:69:ad:43:12:3a:35:
bc:ce:06:26:83:c6:15:b2:8a:ac:b4:2d:5e:f6:c4:94:2b:db:
9c:5e:6a:22:9a:29:0e:19:08:9c:b8:1a:4c:b1:95:1c:12:b2:
20:74:da:4e:c2:37:8f:c0:a7:85:57:ae:88:8c:94:e1:72:34:
0b:62:28:87:b4:87:82:28:d6:2d:34:f4:0c:a5:7b:9d:5b:c1:
5c:3c:28:35:7a:0d:ee:d0:bb:35:12:07:72:da:74:1f:88:84:
3b:00:29:50:ac:54:56:65:0f:01:4e:ff:ec:06:93:2a:88:da:
fe:df:c2:1d:01:a6:9b:0a:5d:b7:22:d8:88:d8:1a:d7:68:aa:
75:b4:b6:ad:35:71:66:7a:6c:bb:4e:d3:16:88:fc:57:0d:32:
dd:2a:f6:97:e1:cd:48:88:b9:68:88:09:03:98:14:af:5e:47:
54:c5:cb:25:96:7e:0d:71:14:c0:65:68:84:a7:c2:84:9c:d2:
af:52:67:3d:aa:aa:b3:76:47:a6:c3:49:d4:43:a1:bc:22:05:
d7:80:91:ee:10:79:7b:63:3a:5c:e0:1f:ec:70:eb:8e:b7:d7:
c6:cb:83:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:03:25 2025 by rpki-client