Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67a6377b-4d37-387a-9ef4-27a9bce4ed60.roa
File: 67a6377b-4d37-387a-9ef4-27a9bce4ed60.roa (raw, json)
Hash identifier: T/OWFZHjQCVCNNhdivBeii71F5olJS8PjT/4ki1bqo8=
Subject key identifier: 65:52:83:BF:5C:66:49:58:67:94:4A:C8:B8:A6:A4:BE:B7:C9:C1:91
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C9607D96AE6557A7E54CCF880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67a6377b-4d37-387a-9ef4-27a9bce4ed60.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 146.78.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:07:d9:6a:e6:55:7a:7e:54:cc:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=40772dc8-a6eb-4c68-96df-b207b0f6dcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:26:db:5b:dc:17:8d:cf:df:5f:29:c2:4b:8d:
89:b1:76:5c:6a:2c:6b:5e:b7:1b:df:37:35:7d:47:
94:bb:d1:ff:51:06:ed:bb:4b:d8:35:90:f3:df:44:
ce:d0:ec:45:7d:28:3c:f4:77:30:93:fd:e4:57:db:
03:ac:e4:81:a4:2a:a9:81:d4:27:d3:f3:2f:b6:03:
e3:fd:52:2c:d5:20:c3:dc:d3:f2:d6:cd:91:9c:70:
7b:01:c2:78:b1:cd:d5:ac:87:9f:21:85:56:50:14:
b1:2f:4f:ac:6d:dd:51:5f:88:91:eb:0e:dd:4d:27:
08:ee:90:4e:64:0f:62:e8:8a:36:da:d9:d5:fd:bc:
86:36:0d:9c:7a:d1:60:3e:d2:b3:08:1a:92:cb:54:
2e:64:19:73:97:99:ea:13:6a:13:2d:da:1f:2d:13:
93:d7:0d:05:72:b7:b2:7f:d7:1f:a8:1b:fb:0f:f6:
69:ba:d1:98:64:6a:64:92:ff:40:2e:67:a4:bc:3a:
cb:eb:f2:96:64:19:31:e4:5d:f8:f7:0f:ec:37:f9:
77:86:47:fb:a5:80:a7:6f:c9:9c:ed:f4:e1:92:2e:
e6:4a:e7:41:fc:f7:c2:0a:1c:51:4b:3d:a4:97:a3:
49:aa:95:2c:ca:46:31:a3:a8:4d:2b:78:da:5a:68:
a9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:52:83:BF:5C:66:49:58:67:94:4A:C8:B8:A6:A4:BE:B7:C9:C1:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67a6377b-4d37-387a-9ef4-27a9bce4ed60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.78.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:b8:9a:9a:70:15:73:bb:ea:2d:83:cc:02:26:fc:22:fa:41:
f7:46:fe:0c:c2:b6:f1:ca:22:13:44:27:13:ee:5a:e3:08:30:
ef:04:fa:2d:b1:2c:ce:30:8f:ec:61:03:c9:eb:ee:04:f4:d9:
51:a7:9e:21:e3:3f:81:38:f6:d3:28:67:a4:87:de:41:a3:6a:
f2:c3:6c:ce:5d:ff:98:6a:3a:a2:46:15:24:c2:6b:17:16:d2:
63:c7:af:71:8f:f8:3b:b9:1e:50:fb:c0:7d:75:f3:94:9b:03:
dc:cf:bc:44:c8:97:c2:7a:40:99:44:6d:01:31:de:15:83:ca:
09:30:96:93:9e:ef:2e:4f:70:bc:82:d2:65:cd:d2:cc:42:46:
9b:b8:95:1f:16:db:28:36:e4:a4:0e:a1:6f:87:d9:d6:2e:21:
85:d4:89:50:c3:06:b8:7f:96:e8:5e:8e:c7:83:6a:a0:9d:fc:
80:89:a2:a9:dc:c7:78:d2:db:6b:6f:5b:83:17:00:f8:03:c9:
ca:23:55:a5:bb:f9:b0:7c:07:34:7a:6d:b4:8f:c2:5c:dc:5a:
f3:af:27:3f:05:d0:07:ae:46:ed:3f:d1:f2:b9:78:e3:67:4e:
56:58:50:81:ef:cf:59:82:1f:45:70:86:2d:78:03:52:5a:dc:
f8:a5:d1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:49:26 2025 by rpki-client