Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6db98615-f1c3-3e4b-95cb-97e47f9694aa.roa
File: 6db98615-f1c3-3e4b-95cb-97e47f9694aa.roa (raw, json)
Hash identifier: 16Ri6jBc3mKzNQia8eGxy4WyjABNqom3LKwYEx+FZdo=
Subject key identifier: 09:5E:F1:2F:0A:39:14:45:55:E0:EE:B3:D5:F8:52:D2:08:5B:EC:C0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858402C98EFCA37074E137E7ADC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6db98615-f1c3-3e4b-95cb-97e47f9694aa.roa
Signing time: Thu 08 Dec 2022 12:00:00 +0000
ROA not before: Thu 08 Dec 2022 12:00:00 +0000
ROA not after: Fri 13 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 141.186.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2c:98:ef:ca:37:07:4e:13:7e:7a:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 8 12:00:00 2022 GMT
Not After : Jan 13 05:00:00 2023 GMT
Subject: CN=bef01ae4-106b-4642-9a30-3cfdbb230b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8a:a4:07:f5:a7:bd:cb:54:de:8d:77:ea:0b:
22:d5:c6:d8:94:4a:1b:d8:55:81:49:76:c7:83:0e:
e8:a7:f3:a0:18:bd:8a:8e:7f:a6:62:ec:42:24:83:
1e:9c:e8:11:1a:05:8f:d4:d0:7a:c7:02:77:9a:63:
49:38:f1:b1:7a:77:75:33:60:7f:bb:e9:08:ea:68:
8e:e2:e7:d8:d7:59:15:cf:8b:0e:07:bd:a7:a7:03:
36:fe:c8:ba:b0:de:cf:93:be:e1:9f:d7:9e:e3:5b:
06:3f:0e:b7:e4:99:4e:2f:51:e5:64:0b:32:f3:bd:
4b:ee:91:4e:33:45:86:25:2a:df:c2:a1:c6:dc:da:
ee:bc:27:4b:c8:83:c2:b3:f1:c8:33:58:fb:87:6f:
5e:04:41:77:fe:93:53:13:c1:ea:61:d1:2d:5b:8d:
b5:39:a8:65:1f:66:dc:be:ae:e2:11:d8:ac:38:2f:
f7:ac:c8:91:21:d8:3c:e9:c5:b9:7b:1c:ac:88:0e:
b4:82:da:bc:d6:10:59:bc:a1:f6:a0:79:89:5b:d2:
17:7c:44:f6:a3:b2:3b:f6:66:4d:38:81:67:02:6c:
2b:92:9a:a4:85:52:34:62:c3:10:6a:88:78:c1:b9:
c3:c1:ab:46:92:84:04:6c:ed:17:5c:f8:d5:4b:0c:
c0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5E:F1:2F:0A:39:14:45:55:E0:EE:B3:D5:F8:52:D2:08:5B:EC:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6db98615-f1c3-3e4b-95cb-97e47f9694aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.186.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:78:d7:8f:4d:44:7c:ab:1b:d0:8f:c2:38:97:af:43:6d:9b:
f9:00:2c:f2:9c:25:7f:0b:4d:f6:7a:83:64:79:db:e5:ad:71:
eb:fd:7b:16:f0:5b:1f:d0:4b:9b:7a:d5:10:52:d4:b2:3b:a4:
bb:19:87:be:e7:72:40:b8:c4:69:81:33:6f:d4:29:9f:16:d6:
58:1b:09:54:1a:0e:17:16:65:f0:e5:e3:54:95:61:78:0a:45:
ad:0d:6b:26:b9:96:9b:00:b2:ac:c0:07:5f:66:63:c8:ce:26:
19:08:46:a7:61:a5:45:fb:b8:7d:17:13:90:4c:37:64:96:2c:
31:cd:1c:e7:73:68:02:50:30:d5:40:97:61:96:67:8c:e4:d6:
a4:2e:ba:76:59:ab:94:c9:ae:6c:72:8f:f7:ca:26:f3:7d:3c:
f3:36:38:b3:6b:c6:c0:b0:7f:25:42:60:7f:41:31:95:c5:4e:
63:51:dc:66:86:1d:56:98:e9:b4:67:e0:81:69:4b:cc:b0:38:
76:c3:69:42:19:b3:c7:1e:f8:e9:2a:84:8d:bd:7c:ac:59:90:
ef:55:fb:20:3a:87:c0:67:6e:79:5b:c8:0c:fd:48:77:61:9a:
e3:cd:05:63:ff:0d:75:67:fb:03:36:8c:35:1e:d8:00:cc:45:
72:0c:81:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:30:18 2025 by rpki-client