Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67ce8201-0ddd-389b-87f4-e68abab28e44.roa
File: 67ce8201-0ddd-389b-87f4-e68abab28e44.roa (raw, json)
Hash identifier: npCdwoSL84cKj4Z+x6Tr5HWzfJ2voR6MQppuBZsTnN4=
Subject key identifier: 3F:B9:30:EF:C8:2F:C4:3F:08:21:95:B4:83:F1:B7:7A:1D:D7:03:EF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D45D263997A63DE4399D80880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67ce8201-0ddd-389b-87f4-e68abab28e44.roa
Signing time: Fri 18 Mar 2022 04:00:00 +0000
ROA not before: Fri 18 Mar 2022 04:00:00 +0000
ROA not after: Fri 22 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 141.182.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:45:d2:63:99:7a:63:de:43:99:d8:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 18 04:00:00 2022 GMT
Not After : Apr 22 04:00:00 2022 GMT
Subject: CN=2c833dfe-ce85-405a-8b6a-f56984546a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:77:3a:71:3d:cc:4e:be:66:89:ad:a6:23:85:
65:f8:e4:1c:5a:14:d2:7f:d3:5e:46:fd:92:72:07:
3b:04:24:cf:ca:87:76:b6:5b:d4:cf:e1:dd:d5:92:
22:3d:cf:f6:e5:37:10:8f:af:c4:34:c9:ec:a3:d8:
0e:8f:8e:f7:92:85:8d:04:d2:ea:91:00:27:b4:76:
bd:6f:98:bc:34:b2:ef:80:6f:af:96:8c:3f:1f:59:
e2:6d:be:a8:7d:36:c1:85:f7:93:65:fb:1e:9e:69:
72:80:39:a8:82:d3:7e:73:76:89:9c:b7:61:d5:8c:
56:54:1c:9a:39:84:51:76:3b:23:7c:df:34:d5:78:
a3:f8:ca:5b:ab:46:6e:b3:8b:e0:e5:33:c3:c2:2f:
d4:da:c6:7c:ad:0c:87:14:8c:80:96:23:7a:4a:90:
b9:f4:da:0b:4a:8e:4a:1f:f4:2d:fa:eb:89:62:27:
8e:06:c1:33:57:91:0b:8b:bc:6b:a6:7b:89:54:dc:
da:2a:d7:82:27:62:6e:15:21:fa:b3:b9:48:6a:65:
cc:7d:3d:15:71:32:57:69:58:4e:e1:0e:7e:2d:25:
ac:f7:df:22:48:42:de:e4:c4:e1:c9:06:be:b7:56:
31:da:4d:52:d7:c9:f2:41:77:32:8c:18:2b:78:6a:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B9:30:EF:C8:2F:C4:3F:08:21:95:B4:83:F1:B7:7A:1D:D7:03:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67ce8201-0ddd-389b-87f4-e68abab28e44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.182.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:61:0b:7f:ba:73:f6:5f:f8:1c:b2:ad:e6:62:73:1e:83:2a:
8a:40:a4:59:cb:71:48:b1:1d:2b:cf:20:27:4d:59:b1:40:74:
31:71:a2:13:92:8d:2b:1c:19:26:45:82:7b:39:62:43:d5:56:
34:5a:72:11:62:ef:c3:0b:40:bd:76:56:9c:bc:fb:68:15:7f:
0f:1d:f0:02:7e:51:bf:ae:9f:d8:31:18:46:7a:eb:7f:0c:35:
7f:65:f4:52:62:4a:b9:df:fd:f8:de:f0:34:4f:33:dd:db:c6:
27:9e:1c:e1:af:40:6a:62:c4:52:e0:36:15:0e:e5:27:43:b3:
0c:95:dc:0a:9f:2c:84:30:58:32:6f:c1:b1:f1:e9:4e:5a:d9:
d4:83:ad:63:a3:4c:50:e8:93:c1:14:32:dc:e6:e2:cb:ed:47:
f7:34:e4:3e:ed:49:87:db:f8:c7:01:76:bb:55:24:43:a5:7a:
1e:8c:54:a8:e0:cd:1e:4e:ac:d5:60:2c:96:b5:bf:ab:b4:6c:
bd:af:e4:b2:fa:29:cd:11:40:e0:ac:ac:2c:2c:04:10:53:a0:
1e:38:ad:0f:70:61:a1:86:c8:d3:06:77:50:03:00:6c:10:51:
27:7c:6f:58:8c:a3:9c:ee:ef:11:39:d1:54:48:15:cf:c7:2f:
96:88:ca:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:52 2025 by rpki-client