Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/63c35eb8-cc6b-30e3-86c3-6664690aa816.roa
File: 63c35eb8-cc6b-30e3-86c3-6664690aa816.roa (raw, json)
Hash identifier: CmSpCtAVu96cafpJbmUuIJeBDPndqCxkaA/JzWbR+lI=
Subject key identifier: 26:4E:6A:5D:EA:66:2A:C8:26:D4:FF:DB:74:08:5C:76:70:A5:15:13
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858407DA510F55C0C6D15783746C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/63c35eb8-cc6b-30e3-86c3-6664690aa816.roa
Signing time: Fri 06 Jan 2023 12:00:00 +0000
ROA not before: Fri 06 Jan 2023 12:00:00 +0000
ROA not after: Sat 11 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 170.120.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:7d:a5:10:f5:5c:0c:6d:15:78:37:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 6 12:00:00 2023 GMT
Not After : Feb 11 05:00:00 2023 GMT
Subject: CN=59819419-a2f2-4c7f-b421-1f030e72d189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:22:37:84:83:1d:76:dd:36:e3:5c:59:97:ef:
f8:7c:2e:98:31:3e:d1:f2:62:c6:a0:36:ff:a1:f7:
9b:e9:87:6c:ab:fa:ef:56:25:86:ac:05:5e:eb:f5:
13:ad:8b:2f:73:ac:c1:e7:26:d7:77:2a:9d:91:e8:
05:c4:c9:61:5e:46:79:f3:d4:7f:29:41:59:d7:eb:
bd:6d:d8:7b:25:70:62:c5:0c:f0:24:29:83:c6:1b:
b2:e8:37:cd:fc:25:ca:81:80:7b:22:e4:6c:2b:87:
05:60:f9:0b:28:cf:05:06:b5:89:65:5d:16:c3:62:
c8:51:11:26:60:1a:7f:f7:ec:f2:e6:72:79:7e:7f:
c5:82:5f:a2:3b:b4:f4:c5:17:b7:06:0b:6d:f2:a9:
f2:24:7a:80:c0:d7:d2:d3:13:e9:70:0b:fa:63:61:
19:c3:45:89:3a:c8:ce:b4:b4:a2:97:f7:28:36:9f:
28:e9:8c:78:56:44:01:54:02:06:58:77:40:5b:e3:
bf:53:cc:9e:a6:f4:d3:33:8a:f7:6b:b1:05:bf:2e:
8e:ea:30:ba:ac:0f:c3:c6:e8:3e:77:a2:96:2d:f2:
93:a3:39:d5:39:bc:79:fd:b6:2a:62:51:5e:91:bd:
6a:af:a2:3e:4e:0a:36:92:3c:f8:37:e0:e9:93:bf:
92:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4E:6A:5D:EA:66:2A:C8:26:D4:FF:DB:74:08:5C:76:70:A5:15:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/63c35eb8-cc6b-30e3-86c3-6664690aa816.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
170.120.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:bd:cf:3f:8b:64:b6:5c:ea:4a:ac:f5:b5:bf:c8:a0:51:8e:
3a:f3:dd:55:32:e3:96:4f:17:78:aa:2c:cd:1d:87:5a:16:72:
d8:0b:91:3f:85:82:08:85:10:4b:dd:16:48:c0:e2:a7:ed:07:
dc:92:09:3e:9e:5c:54:31:49:e5:8e:a9:b5:80:1a:8b:bf:4f:
14:c1:90:30:5e:de:25:62:44:09:66:f0:f5:85:6d:1e:29:08:
36:96:d8:47:ca:28:b4:5d:8a:a8:cb:4d:ef:34:d0:5b:64:5f:
aa:0e:4e:cf:de:64:58:5a:98:05:f2:8c:0e:e0:56:30:27:31:
13:99:31:98:17:6a:b5:97:14:a1:d2:0d:77:7f:df:05:26:b9:
9f:be:49:c3:2d:8e:b3:6e:49:0d:38:10:c4:fd:e2:e6:8f:a0:
aa:f1:79:e7:ec:a2:bb:35:7a:da:ba:1b:99:a3:74:6d:1a:81:
28:cd:ac:fd:37:95:34:17:fa:7e:80:39:d7:50:37:8a:32:0d:
ec:1f:ca:a0:02:df:4d:4f:7b:4d:75:65:30:db:ef:fa:34:b0:
d6:5e:e3:ef:19:62:fd:e7:4c:7f:fe:4a:26:3e:05:6c:8f:9f:
6c:77:d6:a5:9d:a3:23:08:6f:4e:83:1d:49:94:2d:c8:dc:07:
29:8c:5a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:06:09 2025 by rpki-client