Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/660cdee4-4eb4-3663-8ec6-ef2173b541b6.roa
File: 660cdee4-4eb4-3663-8ec6-ef2173b541b6.roa (raw, json)
Hash identifier: 6ml+KOdUZkZkZ1YgEXuX+JhgyZ+vfkiD48zOraWg7zs=
Subject key identifier: E4:4E:A1:25:8B:1E:BB:23:55:54:2A:DA:E3:5C:08:5E:70:F0:83:C9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401FC59B46B8CFFDA08D88B900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/660cdee4-4eb4-3663-8ec6-ef2173b541b6.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 162.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:c5:9b:46:b8:cf:fd:a0:8d:88:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=c16fd3b0-99aa-4bfc-85f1-82c48d503254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:02:86:f7:6d:92:2c:e4:b1:39:21:b8:3d:
3e:65:d2:dc:3a:f1:92:15:4b:7d:a3:d7:54:61:1a:
de:42:ea:fb:c7:eb:b2:6d:ad:c1:68:c8:21:d5:55:
f0:9f:b1:ba:54:51:34:de:5a:0b:eb:c5:de:6e:82:
9e:2c:1d:6b:13:6d:84:7f:cb:93:1b:11:fd:74:d9:
f7:31:88:8e:e9:27:3d:09:a8:1d:e9:fa:ae:cc:09:
0f:6b:84:1f:76:0a:fa:e0:fa:4d:37:55:4f:3c:22:
0e:75:9e:69:e3:1b:42:48:84:ff:a0:a5:20:a5:9d:
b8:10:06:83:e6:45:58:1c:e9:3e:7a:c5:41:2d:90:
ac:26:44:7f:01:b5:97:a2:33:91:f3:ef:0a:7c:48:
79:82:2f:6e:9e:9f:cd:ce:a3:4d:53:85:31:66:6b:
cf:fd:0c:fd:d9:5f:51:81:87:d2:5b:af:78:79:f0:
f2:b0:24:0a:62:41:ea:51:01:1d:43:2e:9f:94:e9:
11:4e:de:28:5a:a9:49:ad:00:ce:c3:a9:87:c9:7c:
25:85:d9:6a:0a:6b:b0:f2:77:08:80:b0:f3:ad:b3:
91:a9:a0:75:87:d9:6d:b1:c4:3c:bc:6c:02:67:72:
6a:53:62:72:f3:97:c0:c3:91:c5:ea:82:1d:2a:a1:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4E:A1:25:8B:1E:BB:23:55:54:2A:DA:E3:5C:08:5E:70:F0:83:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/660cdee4-4eb4-3663-8ec6-ef2173b541b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
162.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:0e:6c:d3:95:74:6b:25:f7:0e:f1:5d:72:76:40:93:c8:3b:
24:27:97:e6:fc:22:62:f1:91:82:84:6c:ff:da:9e:7c:95:96:
5c:e9:d9:7a:46:9d:9c:33:56:e8:e7:a4:19:40:1a:68:9b:e9:
53:81:3d:ee:b3:49:0a:3a:5e:9e:6a:1a:68:fa:2d:b4:a3:e7:
2c:19:21:be:a2:a0:57:8c:6b:75:01:47:99:74:0e:24:06:c2:
88:79:09:f6:14:0a:7e:f6:f4:2a:dd:3f:83:d9:77:53:e0:1c:
b1:b0:22:db:cc:dd:f7:78:99:3d:cf:ea:82:44:cf:17:35:e5:
2b:9b:06:e1:8a:99:7b:26:51:8c:54:b0:ec:1c:06:b0:77:49:
13:b4:9d:71:71:5f:54:e3:4c:89:35:ed:ed:15:64:46:68:03:
b6:64:8a:aa:30:15:56:48:08:96:bc:4c:3b:7b:3d:24:bb:5c:
29:4d:70:c5:12:d9:e2:4d:e1:04:4e:18:ea:d4:43:8e:a7:18:
02:18:4f:eb:9f:37:fa:84:f6:df:ea:12:b7:ee:f2:fc:a5:77:
2d:6b:1e:7c:aa:27:d0:b0:17:dc:92:ce:81:e2:9e:5e:c7:71:
fb:42:6b:5e:9b:9e:ba:db:9c:c8:cd:44:92:a6:f2:a9:24:4e:
18:dd:37:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:52:25 2025 by rpki-client