Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/528347f3-5e8c-32be-863a-1b59a825213d.roa
File: 528347f3-5e8c-32be-863a-1b59a825213d.roa (raw, json)
Hash identifier: fouLAPjWOXc0/JP2qeELcmC3MiiQRpLCFfgrEm/8MPs=
Subject key identifier: DE:18:72:A3:06:59:19:50:3A:BE:DD:F4:CB:75:6F:A4:2E:E2:27:59
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B9E63534A1DBF2CAF25E7000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/528347f3-5e8c-32be-863a-1b59a825213d.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 169.205.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b9:e6:35:34:a1:db:f2:ca:f2:5e:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=141489bf-1895-4900-860f-7435dbe3712c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:62:f1:39:61:2f:51:85:5c:23:00:c8:6f:
c8:3e:93:12:94:1f:4b:76:d0:75:c6:a8:e7:75:61:
f5:cf:5d:9f:81:ba:0d:1a:51:69:0c:a4:3b:b7:4f:
52:1f:94:3e:d9:60:2c:fe:ed:d3:79:90:25:e4:fe:
ce:f9:a7:df:0c:45:2e:9d:73:03:7a:8d:f9:fd:75:
a4:52:13:47:a0:06:11:4f:86:91:2a:f7:0c:2f:83:
23:b7:e6:10:69:99:7b:2a:05:81:7b:bd:f5:85:be:
06:e5:98:03:bb:b4:01:ad:99:8b:bc:69:9b:8b:ec:
1f:7d:71:19:1d:e3:61:ce:c8:c7:a3:16:42:19:56:
30:03:47:6a:3b:47:cf:65:3c:5f:8e:68:c0:20:b4:
54:58:a4:36:22:b9:a1:21:a0:95:51:d2:4d:9f:ee:
8b:bc:bd:54:00:fb:6e:fd:a2:7d:b2:42:b1:95:c2:
87:25:35:98:a6:e7:94:5d:38:12:79:a8:42:32:7f:
f6:23:90:2a:4b:0d:2f:0b:3e:9d:65:a0:c6:5e:20:
41:05:91:5f:72:3c:b6:f7:5f:e4:17:03:a2:3e:3e:
0f:a8:1a:b7:fc:00:9f:bb:f9:05:07:13:b0:2c:d9:
ae:e1:d9:76:96:fe:1b:55:af:01:34:c8:4a:28:e9:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:18:72:A3:06:59:19:50:3A:BE:DD:F4:CB:75:6F:A4:2E:E2:27:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/528347f3-5e8c-32be-863a-1b59a825213d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
169.205.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:5c:e4:e3:6a:12:43:85:a3:2c:df:40:ef:81:0e:01:06:1e:
ba:08:84:99:de:a3:d8:e1:46:c9:fc:d9:1e:7e:66:6b:93:c2:
ed:95:11:6a:12:ac:38:15:f7:58:de:5b:42:e9:d2:8b:56:11:
8d:f4:e4:43:36:d4:90:b8:39:ad:78:3f:52:87:1f:01:22:05:
5a:d9:ed:7d:14:9b:78:e5:6f:8a:53:8d:eb:4c:b9:9f:83:8f:
ad:28:59:0d:63:e4:27:7c:6b:c9:96:1c:61:69:1c:5b:bf:c3:
a4:0d:6b:4a:dd:cb:27:30:a2:d9:da:fc:e4:1b:6d:d1:7f:a6:
b2:eb:8b:cf:e5:72:7e:e0:1e:62:92:bf:d1:39:7e:52:a6:ff:
2c:1b:3a:fe:0d:f7:d8:38:cf:d9:98:3a:cb:bb:6b:7f:02:cc:
82:fa:ef:2e:0a:fa:97:f2:15:cc:a9:90:32:b5:52:89:62:d7:
fc:cf:3f:37:bd:ae:c2:d6:4d:be:7d:4e:f1:31:d6:d8:96:24:
15:49:88:54:26:fd:d9:93:1f:9d:78:94:4a:dc:31:ec:f8:fd:
1e:45:a6:2f:2d:45:a2:6a:b0:02:4b:55:8b:bb:de:fd:b3:f5:
3d:ce:35:34:83:92:05:0f:79:41:30:e8:cc:9a:05:ea:c1:c2:
f2:1c:02:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:49 2025 by rpki-client