Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/467702d8-cb82-3154-8aa3-4a80b5fa93ec.roa
File: 467702d8-cb82-3154-8aa3-4a80b5fa93ec.roa (raw, json)
Hash identifier: vsw8JiUEfBy2Q/WAoZ25EQ20FOAFlQis8+O1zMOw4/c=
Subject key identifier: 72:95:5D:49:EE:4A:CA:99:48:93:57:05:A3:16:03:D2:3D:97:0F:57
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5A42011D9BEA4F50E65B9900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/467702d8-cb82-3154-8aa3-4a80b5fa93ec.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 170.58.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5a:42:01:1d:9b:ea:4f:50:e6:5b:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=fc8bd70f-ca78-476e-b083-e3929ebe1159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:bd:6c:5f:06:27:93:e0:c4:e0:4d:ff:2f:
47:7c:0b:24:21:18:8e:49:b0:14:bb:98:6b:a2:32:
ad:e4:3f:11:f7:6f:ae:2c:6d:1f:28:3b:a0:2c:08:
0e:8f:5d:e2:66:5e:aa:79:3f:9d:6c:27:83:5a:b8:
26:02:16:9d:b1:79:c9:08:c9:3b:75:f1:1f:b4:d4:
8f:9c:9d:d0:ab:0f:7a:44:28:c3:eb:e9:1f:f0:2a:
5f:f7:1e:89:54:0a:55:e3:a7:9c:1b:b8:03:11:ce:
9b:26:ef:15:92:6f:3a:24:e4:90:5e:c4:e3:60:00:
e1:31:e6:99:2b:e9:24:41:ca:34:a9:43:0b:e2:db:
e5:1d:20:49:41:63:f8:ba:4c:30:71:09:08:e2:75:
9b:34:6f:36:fc:88:c2:08:fd:1c:e2:0a:ce:2a:70:
37:1f:37:f1:66:9d:c0:bd:e0:7f:b5:90:36:f0:a1:
11:15:bf:b4:d9:18:f5:13:a6:42:d0:8d:10:e7:5b:
d7:44:19:3a:3d:e0:ff:57:e2:19:f5:59:a2:3d:da:
29:61:6d:af:d8:3d:98:57:75:f1:51:aa:68:23:3e:
48:09:35:25:f0:9f:19:24:0d:01:44:e3:93:05:50:
08:38:4d:49:74:61:a5:54:04:a3:b4:89:91:f2:71:
2d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:95:5D:49:EE:4A:CA:99:48:93:57:05:A3:16:03:D2:3D:97:0F:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/467702d8-cb82-3154-8aa3-4a80b5fa93ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
170.58.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:e4:63:10:05:7d:36:da:49:d1:da:45:a0:6c:4e:aa:52:62:
ed:cc:16:15:95:ae:1f:1e:6e:44:59:af:f6:4a:85:d5:55:f1:
bf:4c:bc:af:c7:38:f5:7e:1e:5c:e7:f8:cf:2a:2c:8f:b5:cf:
e1:ce:4b:62:e9:c4:94:a4:f0:45:21:e8:ba:1d:69:d0:5d:0c:
f1:4e:43:93:32:1b:8e:8b:0e:a0:3d:97:38:37:bf:62:26:cc:
04:96:96:02:ef:3e:16:02:4f:47:25:fa:31:03:26:6d:fc:13:
55:22:86:81:0d:5d:c6:4e:45:26:c0:db:95:31:e6:e1:60:ed:
dc:6e:05:ca:86:c7:ac:4d:0b:70:7a:30:e8:f7:9e:8b:ed:ef:
d8:61:a0:0c:a3:e1:69:e6:58:a3:98:96:22:c4:b6:b0:92:9b:
87:ba:ef:ae:f6:7f:42:d6:69:7a:17:20:44:57:69:e3:28:6c:
4d:c2:6d:e4:0f:f5:a4:04:eb:95:5b:02:52:8c:f3:e7:ac:f5:
86:80:0d:7c:9f:a6:3d:ec:26:e8:ef:49:a7:8b:9e:52:79:d7:
0e:d2:42:55:d4:dc:7b:5f:d3:54:f6:f9:73:c9:65:68:c9:f7:
7a:21:2e:8a:8e:1e:31:9a:be:18:74:44:c8:56:99:d2:0a:e7:
f1:90:d6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:16:58 2025 by rpki-client