Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/57bfcfcc-916e-3b6f-9ec6-3df7a105008e.roa
File: 57bfcfcc-916e-3b6f-9ec6-3df7a105008e.roa (raw, json)
Hash identifier: buddfi9dIzQgySGMGpKI+PMaoBeUy4xnfdQmZOZDyx0=
Subject key identifier: D8:B3:2A:DB:49:66:F0:26:C9:3C:63:1A:0B:16:CC:3A:CF:32:DA:4B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CF798359B3FD8EB3CB45C5580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/57bfcfcc-916e-3b6f-9ec6-3df7a105008e.roa
Signing time: Fri 18 Feb 2022 05:00:00 +0000
ROA not before: Fri 18 Feb 2022 05:00:00 +0000
ROA not after: Fri 25 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 141.182.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:f7:98:35:9b:3f:d8:eb:3c:b4:5c:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 18 05:00:00 2022 GMT
Not After : Mar 25 04:00:00 2022 GMT
Subject: CN=d947008c-11ba-4852-a975-783700d48e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:02:87:94:e7:a1:27:ad:1f:db:b5:45:d2:86:
bc:ad:cc:25:30:08:df:45:b5:e2:e8:c5:c3:ac:55:
4a:66:c6:47:0f:ee:9f:c8:48:a9:db:9a:e5:8c:e0:
bc:90:e3:e7:81:83:b4:f6:19:12:67:87:92:79:f9:
1a:e9:1f:56:ef:c3:4c:02:6a:1d:b6:73:c7:fb:04:
eb:0c:b0:f2:0f:6b:ef:f0:a3:fc:80:db:6b:d3:8d:
32:8d:4f:0c:a7:27:b7:e8:00:36:c3:d6:ce:41:e5:
2e:c7:ff:53:8c:26:8f:19:a9:f6:8a:c6:5c:3e:a8:
18:33:54:1d:6f:f0:5c:f3:f1:ea:04:03:f1:8c:4e:
b5:77:e2:97:07:06:76:59:e7:99:ed:85:da:36:f9:
1d:85:2d:1b:2d:38:4d:78:16:b3:ff:dd:6a:fc:20:
03:74:59:3f:d1:e8:e1:da:a3:85:f8:88:58:06:d0:
1b:35:03:99:91:24:7f:29:66:67:45:84:ad:97:a9:
d0:ac:50:83:87:8a:0a:b1:b0:de:76:63:fa:5d:0e:
21:13:99:b9:62:8b:6c:c0:2a:12:fc:11:78:d1:0d:
7d:97:72:ff:e9:17:40:57:f3:31:8e:cc:be:f7:93:
bf:36:ae:a9:82:bf:ad:7f:a1:dd:ae:fe:b7:2a:80:
01:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B3:2A:DB:49:66:F0:26:C9:3C:63:1A:0B:16:CC:3A:CF:32:DA:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/57bfcfcc-916e-3b6f-9ec6-3df7a105008e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.182.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:25:55:64:6a:5a:b0:bf:b8:0f:b1:63:42:b3:bf:71:d3:d6:
f5:db:71:32:e4:f7:f0:11:7f:68:10:a5:3f:01:63:0c:9e:57:
e9:0b:30:65:d4:64:a6:6d:4d:4c:8b:b2:49:76:0a:63:3f:ab:
dc:b1:55:e7:1b:1f:c7:3b:c9:1f:cd:96:98:a7:f3:07:42:7c:
69:f3:f7:1c:26:05:d4:7d:ea:e5:bb:3a:1b:79:6e:fc:0a:81:
3c:73:ce:73:97:a8:68:fa:f5:8d:a4:9c:5b:16:64:0c:4d:b3:
a3:9d:2d:00:d7:ba:8b:bf:a4:6c:ba:49:55:6d:3e:4a:3c:4e:
74:16:ac:fd:f1:2b:b6:eb:e9:5d:1d:34:cc:84:d3:29:7d:a4:
23:56:e8:28:b8:5c:a5:e2:20:03:f8:f0:26:28:17:62:26:8b:
5b:6a:f0:81:4b:a4:d4:1a:02:b9:77:15:df:f1:3a:f4:ae:3b:
0b:4b:73:fb:6c:cd:a6:9c:15:ae:2b:76:6c:3c:79:c2:da:b7:
b0:8a:a1:d5:3f:fe:76:8e:3a:0d:93:8f:8d:0d:8d:d2:ce:3f:
9e:7a:d5:36:4a:6a:46:a1:8d:79:fb:9b:6d:b0:64:d6:09:b0:
f9:0f:45:07:25:ef:de:ac:87:6f:57:fa:2f:3e:94:03:16:c9:
07:13:4d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:20:08 2025 by rpki-client