Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64ca3a33-b72d-33aa-b34d-b50cf7eb4468.roa
File: 64ca3a33-b72d-33aa-b34d-b50cf7eb4468.roa (raw, json)
Hash identifier: qO82cnHbgUnl7/oNyeQY+pHvIK6/Jy7o0xY07yT/S1E=
Subject key identifier: D2:AE:99:C0:23:21:DA:D8:48:53:7F:27:99:23:8B:C2:01:33:2A:0B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCF82B9DF4B0E3B8BCFA716C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64ca3a33-b72d-33aa-b34d-b50cf7eb4468.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 170.58.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cf:82:b9:df:4b:0e:3b:8b:cf:a7:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=7f8fef7e-d977-4cda-a027-bf12a0b6d069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:f7:70:60:66:ee:4e:52:aa:18:1a:e8:4e:
d7:d4:09:71:48:1d:68:ea:56:53:64:11:ed:ae:cd:
75:1b:9f:26:3a:92:03:ad:02:2e:6e:f2:c8:54:ff:
d2:b9:60:18:4e:72:9e:b7:df:11:fd:92:bd:32:7b:
4a:9a:0b:97:96:44:b2:0a:bb:1f:d5:75:9e:41:fc:
a2:9f:8f:a6:8a:7b:b8:60:26:34:32:29:f2:d7:cd:
59:81:22:f0:cd:37:bd:85:70:bc:dd:b3:6c:3c:f8:
50:92:3d:64:dd:86:18:fc:66:e2:f2:a9:d2:ae:ab:
ad:88:a9:1c:b3:0f:55:f7:1c:84:10:81:2f:50:3e:
8c:e3:cc:9e:05:4a:d8:30:10:b1:c1:98:ef:73:b9:
7a:c3:28:c3:8b:c6:c6:53:7e:af:4f:16:57:b4:c6:
42:c9:19:2e:54:4b:e2:e4:31:7c:64:8f:6c:06:ae:
fa:9a:6c:5c:4a:08:87:f3:02:15:23:75:10:6e:9b:
fe:62:01:c7:1f:be:af:0b:31:ea:cc:34:43:12:55:
a1:e5:10:af:c6:31:a0:28:9c:74:26:d5:8c:8c:fc:
f7:dc:55:2b:ab:3d:8d:a0:19:70:8b:57:b7:6c:01:
1a:60:fd:a8:b0:8d:41:0c:72:06:4b:a9:11:8a:79:
60:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AE:99:C0:23:21:DA:D8:48:53:7F:27:99:23:8B:C2:01:33:2A:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64ca3a33-b72d-33aa-b34d-b50cf7eb4468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
170.58.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:00:f6:7a:ff:a8:ab:85:bb:87:84:d4:b0:a6:2e:2f:34:26:
39:f4:da:2a:82:88:67:05:37:31:0d:8b:f0:54:98:59:44:bb:
72:a3:e5:28:9c:d0:64:27:67:6d:0a:04:e1:6f:ca:d0:49:ec:
7a:6b:5b:87:63:ad:5d:a8:a3:f4:ed:1c:f2:08:21:25:52:ab:
2a:87:df:00:f0:c0:cb:ee:87:a0:f4:c5:23:5d:3d:5c:ca:0d:
30:17:f2:e3:6c:b1:d0:f7:d3:3b:58:f6:f5:36:52:ce:60:e1:
dd:6f:9b:42:98:5d:d3:bd:84:e5:0f:03:6f:dc:5f:b2:45:55:
dd:cb:42:e3:87:ba:7d:0d:9f:0d:2a:0c:89:37:39:01:15:81:
81:b6:d5:a9:75:2a:90:3e:f9:cc:18:fa:b4:d1:0d:72:8e:5a:
8f:4a:85:55:b6:da:9a:2f:8f:ec:dc:26:5a:ab:e0:ae:35:92:
bf:f4:ad:54:52:eb:b0:27:2c:92:c7:ed:7c:bb:4b:82:db:5e:
fe:2a:4e:a3:b9:36:f3:db:7e:bd:32:77:e0:dd:cd:08:0f:66:
a6:95:bc:04:6f:83:79:5c:17:1d:e6:eb:3d:09:eb:f9:0a:a2:
99:31:16:d9:38:37:70:34:3d:b8:75:ef:ee:9a:a4:ff:60:8e:
db:31:f4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:19 2025 by rpki-client