Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ba3fbf0-0085-32b7-af67-663bf3728543.roa
File: 6ba3fbf0-0085-32b7-af67-663bf3728543.roa (raw, json)
Hash identifier: p0shlfR31R9A4tn95NfiruUQS2UrJZ5J2iEpuPCH+q8=
Subject key identifier: 3C:F7:77:3B:62:5D:B1:D9:D6:BA:CD:63:27:2E:12:E8:1D:A6:10:18
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858408E5DE0B4570BE63458DF0200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ba3fbf0-0085-32b7-af67-663bf3728543.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 134.63.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8e:5d:e0:b4:57:0b:e6:34:58:df:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=8cc47f25-ced6-45de-8fb6-f861a1f94278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:97:03:d3:d4:76:ab:bd:6c:4f:7a:e9:4d:
4a:d4:d8:23:c9:e0:2d:3e:f0:45:15:db:d5:70:bf:
af:ed:68:c1:7f:14:43:f9:05:9f:4d:86:29:fe:da:
a2:d1:32:e3:c6:72:25:ec:8d:9b:21:75:0c:f4:22:
3c:43:a5:85:72:87:ec:59:f5:db:63:ef:9c:c3:c8:
ca:4b:ba:75:83:c0:e8:48:a6:90:dd:1f:6c:36:20:
39:b3:ff:f4:8c:3a:0a:e9:01:b4:64:aa:ea:f7:d3:
18:51:41:ca:ff:38:c9:c4:76:3c:34:f8:ca:73:f7:
b6:7a:1b:f1:52:71:a4:4f:6d:95:c8:4d:53:1d:dd:
8a:a4:b2:b5:91:27:1d:72:79:76:a0:e8:64:1c:26:
91:e6:55:17:df:31:e8:99:c4:8c:a4:0b:98:a2:cb:
b0:0f:d3:43:04:92:7b:e0:1c:7c:4e:58:92:50:fa:
86:94:f4:4b:e7:3d:8b:1e:48:70:1e:61:17:05:f2:
6d:63:82:bf:55:cd:0c:ab:0f:f9:25:aa:aa:d7:68:
fc:67:e1:f8:a6:c7:20:d7:dd:05:a0:dd:5d:54:0b:
73:36:98:2a:0c:7a:db:72:5d:88:92:be:15:93:3b:
e7:92:e9:a0:1b:0a:13:9f:ed:75:a8:42:00:95:12:
ba:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F7:77:3B:62:5D:B1:D9:D6:BA:CD:63:27:2E:12:E8:1D:A6:10:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ba3fbf0-0085-32b7-af67-663bf3728543.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
134.63.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:22:8e:db:d4:e7:db:12:e2:0a:95:68:2b:cc:bd:71:8c:a1:
5c:4b:5f:ee:97:28:13:13:d9:a7:b6:af:0f:42:65:12:6b:0d:
af:8c:c3:b1:d9:1c:46:08:73:9f:20:34:23:1f:99:0f:2e:97:
a2:15:0f:2f:74:2b:09:0e:19:5f:14:39:7e:56:7f:0f:2a:ae:
cb:ea:d8:e3:dc:c4:47:d0:db:01:6b:2b:9a:99:c9:85:c7:01:
29:0a:e8:dc:5f:46:2f:c0:2a:d0:06:f9:82:8e:fc:d6:e2:78:
07:2c:e6:4e:5b:8f:d1:a5:ee:5e:77:5e:de:ad:93:f9:31:a0:
2f:84:b3:1c:3a:90:ea:20:7f:3f:82:5d:0d:e0:86:f3:d4:c0:
69:5a:7c:b4:dc:4c:8d:72:b8:dd:e2:90:aa:93:0a:cd:35:27:
36:cd:9c:a7:fc:75:f4:cd:b9:f9:8e:f4:72:2f:f2:2c:dc:40:
73:f2:2d:4a:2d:1c:16:48:ac:d0:50:99:57:f4:4a:0d:b9:02:
62:c2:39:79:e3:68:d4:59:78:93:bc:b5:6b:66:f1:e5:34:28:
e7:04:3e:ba:5a:58:55:23:cd:cf:bd:68:e4:99:2e:a8:c3:7b:
93:b8:c3:96:e7:65:6c:16:8b:b1:61:43:5e:ef:10:fc:9b:76:
a6:97:ab:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:40 2025 by rpki-client