Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6caa70d6-0ea0-326d-83b5-32029d47014c.roa
File: 6caa70d6-0ea0-326d-83b5-32029d47014c.roa (raw, json)
Hash identifier: TLRn/YpWhZay70u6hn9/oQ2jgUmLnuExvt+33WiKZaI=
Subject key identifier: C9:80:71:22:72:FA:0A:59:AC:F8:1E:D4:2B:92:8D:3F:C8:76:76:30
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406D280D783E5B5CFE00718140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6caa70d6-0ea0-326d-83b5-32029d47014c.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 141.139.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6d:28:0d:78:3e:5b:5c:fe:00:71:81:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=835bbc08-7dbf-4d38-8375-5918825dc5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e1:c0:5c:f4:a5:67:d2:d2:2a:b1:49:db:d7:
d4:f2:b9:89:41:01:6d:c0:f4:8b:b4:a0:94:f0:0a:
ff:2c:99:1b:c7:b3:7d:4c:95:63:34:35:27:fb:d4:
2d:f0:53:ae:18:d4:cd:63:c2:24:63:b3:8a:db:bc:
b9:66:e8:16:9c:b6:4f:15:29:5e:df:4d:d1:9d:e0:
50:e5:23:ea:d8:9e:4d:ad:25:b0:7e:12:80:53:bd:
5c:fa:30:17:53:7d:8d:69:74:31:4b:ec:6e:a6:db:
33:05:0b:f5:eb:e6:55:bc:ac:54:f7:db:eb:67:7d:
fc:5b:74:0c:19:90:fe:72:e0:ef:ed:48:90:26:3d:
33:03:7a:4b:d2:35:8d:33:3a:01:e6:99:9f:7d:ed:
75:71:f9:b0:2c:16:cf:63:08:fa:45:46:3c:cc:b5:
a4:98:16:26:4e:23:55:e8:54:a7:cb:c6:e7:2c:0a:
ee:9b:f8:a8:e8:ef:58:90:ad:87:f1:65:d3:47:dd:
5b:bf:33:f8:02:80:83:7b:e9:43:b1:cb:86:01:99:
bd:e5:a7:e9:5a:4f:47:09:1b:75:08:10:63:23:1a:
08:41:1d:65:d3:5b:ae:4a:1d:63:06:2e:40:fc:4c:
a3:d5:14:3c:16:81:5b:27:e4:5c:c6:e2:9b:28:12:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:80:71:22:72:FA:0A:59:AC:F8:1E:D4:2B:92:8D:3F:C8:76:76:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6caa70d6-0ea0-326d-83b5-32029d47014c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.139.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:ad:88:9d:53:ea:8d:0c:c9:07:35:09:85:87:c4:67:be:da:
6b:bf:bb:c6:d3:db:8c:c5:37:35:b8:b1:f2:9d:69:83:33:a2:
5f:da:22:fe:11:60:1b:34:7b:0b:94:89:a9:ad:60:28:72:44:
b9:0e:c4:33:fd:b0:1d:69:40:42:9c:74:3f:e0:04:53:22:ed:
9e:9f:97:5e:f3:5a:88:c1:94:22:91:65:55:c4:39:fc:46:65:
4b:12:24:33:71:6a:7e:a2:82:03:34:d6:be:4c:a3:87:ab:1f:
22:7f:0c:1c:10:31:2b:72:79:30:95:cd:8a:60:44:76:51:c4:
4a:e6:d9:34:39:55:69:aa:49:7f:ad:44:c0:5c:02:24:75:00:
36:50:5a:f2:5a:5d:4c:d3:0d:24:5f:7e:d2:8e:dd:ba:60:0c:
d9:52:1a:ef:25:53:20:ec:67:c6:23:10:de:d7:e2:d7:d7:5e:
46:56:06:77:4a:b2:c0:9f:0e:dc:b0:b7:7d:2e:3e:e3:b0:56:
a0:76:ba:be:9a:be:d4:a4:6d:c9:fa:d0:e8:76:3a:a7:ee:7c:
81:ec:09:43:f5:fa:e4:d2:d1:9e:70:6e:48:e3:d6:f8:ff:81:
a4:0b:92:e1:ad:65:eb:31:46:32:31:fb:60:6d:1b:85:d9:7d:
76:70:75:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:46:44 2025 by rpki-client