Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4b776cc2-fdc8-3240-936c-c530060fe62a.roa
File: 4b776cc2-fdc8-3240-936c-c530060fe62a.roa (raw, json)
Hash identifier: 6+QZTH67UQrS7GkwF1OKFNiy/pHf0q7pbQVDv/n3+7A=
Subject key identifier: 8D:EE:68:C4:EA:00:D1:6A:24:99:6D:99:7B:82:6F:C4:12:47:5C:D5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D1EB5928A4F40CCCC0F45FF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4b776cc2-fdc8-3240-936c-c530060fe62a.roa
Signing time: Fri 04 Mar 2022 05:00:00 +0000
ROA not before: Fri 04 Mar 2022 05:00:00 +0000
ROA not after: Fri 08 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 141.185.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:1e:b5:92:8a:4f:40:cc:cc:0f:45:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 4 05:00:00 2022 GMT
Not After : Apr 8 04:00:00 2022 GMT
Subject: CN=32927aa0-6940-4014-b823-5ddb85d3eb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:0e:d1:ce:2a:57:a4:c7:b6:d2:ab:09:16:
e0:73:60:5c:86:d1:50:6b:4e:45:7d:09:20:90:8d:
6a:ed:bd:50:6e:9b:49:02:49:2d:0d:3c:96:a3:07:
93:58:65:5e:fc:bc:0a:2c:c0:53:15:08:c2:34:ea:
8a:d7:6c:3d:65:be:14:fd:79:e5:47:0e:f6:26:ad:
31:d4:61:b6:54:be:89:9d:88:0b:fb:5c:d6:29:79:
ee:a0:e8:bb:34:a3:c9:8a:d3:a2:2c:22:d8:86:46:
c4:96:33:40:1d:74:c4:93:9b:07:4c:4d:ce:ab:2e:
b8:58:5c:6d:ef:cc:60:47:a9:ec:57:d6:01:b3:fa:
dc:37:3b:fb:de:33:19:46:e4:1e:e9:08:2a:49:d5:
ee:f7:05:cc:99:5e:43:cc:77:ed:c9:f4:95:e7:19:
e6:0c:05:32:01:68:df:77:51:0a:71:d9:38:90:08:
65:9c:4e:91:f3:93:b3:70:2f:57:45:8d:d1:b1:88:
30:e6:11:1e:37:80:2c:6d:8b:d3:73:59:86:82:a8:
da:c4:4b:42:65:88:22:7f:7f:d6:42:f7:3e:f0:00:
38:af:7f:a2:02:fb:8e:b2:0a:0c:d7:4b:79:37:ff:
ac:aa:ef:b7:d5:c0:96:88:34:98:05:c5:75:cd:6a:
c2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EE:68:C4:EA:00:D1:6A:24:99:6D:99:7B:82:6F:C4:12:47:5C:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4b776cc2-fdc8-3240-936c-c530060fe62a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.185.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:fd:0e:c5:00:d5:47:79:f8:16:b6:e6:94:0e:74:8f:f2:70:
b9:62:e9:f7:23:9c:45:9e:09:51:8e:9d:15:26:5b:50:a5:d1:
d2:04:73:f7:34:5e:11:c3:7d:ae:5d:3c:af:d6:71:4a:11:14:
6c:f5:c4:83:d8:ca:6d:92:aa:bb:ab:63:0e:49:6f:f4:6f:dc:
56:05:9f:14:bc:2a:a2:13:e7:a5:80:84:6f:b0:ae:bd:11:97:
e9:0f:f9:f9:07:7a:1a:68:df:13:3b:6a:84:fd:e8:3c:49:47:
38:a5:0f:57:b3:ef:68:4d:27:fd:69:1e:ac:3f:06:5c:e2:8b:
b8:c7:dc:e7:02:da:2f:f7:9e:01:cf:29:7c:c3:41:b3:bb:76:
af:8b:db:47:8c:77:0e:42:a7:fb:9b:17:d4:99:12:a4:7f:cf:
48:4b:1b:08:72:5e:99:82:b0:5d:35:56:0c:5a:f1:e1:1a:e9:
a5:78:54:65:3a:aa:60:e0:2f:dc:10:a6:1a:4e:8b:7b:ee:2f:
71:3a:85:99:f8:2d:34:82:d4:63:f6:2a:6d:48:4c:07:6f:0d:
04:f2:a7:ed:70:fa:05:f2:d7:2b:88:54:65:cc:20:dd:89:22:
5a:0c:33:60:1e:ee:93:c3:17:a9:9f:35:05:13:40:c1:30:b7:
b4:54:7a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:25:52 2025 by rpki-client