Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4fe3ed44-19be-3ffd-abbe-7e325d773932.roa
File: 4fe3ed44-19be-3ffd-abbe-7e325d773932.roa (raw, json)
Hash identifier: EsBM8fVSA8uohi+OvDqTqZ4kJv+SavZJg7dhFclAm6A=
Subject key identifier: 88:AB:A6:45:3E:0E:D2:62:72:40:62:F3:77:93:60:01:6E:AC:A5:9D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F2932AC3114DDF186EB6D2750
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4fe3ed44-19be-3ffd-abbe-7e325d773932.roa
Signing time: Tue 06 Sep 2022 12:00:00 +0000
ROA not before: Tue 06 Sep 2022 12:00:00 +0000
ROA not after: Wed 12 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 146.65.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:29:32:ac:31:14:dd:f1:86:eb:6d:27:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 6 12:00:00 2022 GMT
Not After : Oct 12 04:00:00 2022 GMT
Subject: CN=861b0cf5-fed3-4b07-a805-2a2cd1a2ff01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:3a:d8:32:ef:68:35:a1:18:83:11:9c:c1:
69:f7:99:43:cf:95:86:e1:34:66:7f:6f:ae:b3:22:
cd:3d:af:ab:d3:65:16:c9:22:4e:16:b7:4c:04:11:
26:b2:00:6b:ca:82:01:fe:cb:77:0f:64:e9:74:8a:
63:5d:61:03:0e:0e:0a:e6:64:fa:05:a9:29:79:30:
90:4d:26:6b:98:82:d3:66:8a:6c:11:c8:96:c1:8c:
ef:59:92:9b:49:54:65:38:21:8d:01:86:70:a9:3e:
8f:41:f3:fd:e1:88:15:26:ea:1e:86:58:23:02:94:
39:cb:4b:4b:84:7b:6e:11:14:4f:82:df:bf:65:d0:
07:c8:ce:3f:2e:23:06:f8:16:6c:97:36:de:13:37:
3f:31:f8:2f:a7:64:ed:ea:33:26:1e:13:9c:6c:8b:
96:d0:43:a7:d6:34:84:72:17:e2:bc:3b:36:aa:5d:
a9:78:87:97:f1:30:fe:da:6c:95:a3:51:dd:23:0c:
1c:83:2f:37:4b:32:37:53:4a:16:03:96:33:12:d8:
70:e6:45:8c:3c:00:50:c8:56:4c:69:e7:b0:17:3f:
40:fe:c4:46:b9:6e:b2:10:a8:56:41:5e:d8:99:ed:
56:e5:56:51:41:87:5d:15:5c:f1:33:0f:88:6b:27:
63:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AB:A6:45:3E:0E:D2:62:72:40:62:F3:77:93:60:01:6E:AC:A5:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4fe3ed44-19be-3ffd-abbe-7e325d773932.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.65.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:41:1c:da:c3:bb:58:17:f6:6e:c6:7c:26:7a:4c:8d:b7:2e:
cc:00:17:3a:b0:1b:43:21:1c:5e:c3:06:45:90:50:67:22:0f:
7c:b0:21:a5:ac:02:96:eb:70:3a:d4:3d:74:19:0a:09:93:10:
fa:1a:91:41:a3:6f:f1:31:db:db:67:01:28:8e:f1:50:2c:76:
b9:01:1d:c7:6a:df:4e:ec:22:72:91:0b:9d:61:c2:45:cc:ec:
b5:4a:1a:a3:7d:8e:70:b8:d7:fe:60:91:1f:7f:20:3e:1d:b4:
d4:e4:99:0f:16:48:02:ab:be:da:a7:95:87:d8:59:7c:b1:72:
20:24:99:05:8e:f0:2c:3b:4e:a1:5d:b3:28:0b:2c:47:36:d5:
07:12:21:53:25:a7:89:c4:03:77:b1:ca:48:29:17:af:9f:f4:
6e:b0:11:fd:14:fd:5c:0d:73:49:a6:9f:b0:a3:c9:29:eb:70:
dc:2c:db:ba:2e:b2:5e:89:49:ad:ad:15:17:b9:77:9f:62:00:
2c:40:b0:29:d9:ee:43:6c:fd:0d:79:5c:61:6c:db:24:e1:e5:
9e:06:98:42:37:e4:f7:c2:a2:01:ed:aa:a3:0f:ef:7e:fc:a5:
27:8b:d5:05:48:48:7a:fa:56:79:e0:7a:92:e8:b3:60:fe:7e:
73:1e:9a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:05 2025 by rpki-client