Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73997fef-a1e6-332a-86bc-8f39ec74d0ad.roa
File: 73997fef-a1e6-332a-86bc-8f39ec74d0ad.roa (raw, json)
Hash identifier: igllbYuPqSmUaN5LVy0r0amBfa1QbXtK2sTNgMpg0h0=
Subject key identifier: 3F:E7:CC:0A:6C:38:7A:CB:CE:A6:E9:03:8B:79:0E:B6:F8:2B:35:EC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0A66CD9CA36BC2D9B3AB2B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73997fef-a1e6-332a-86bc-8f39ec74d0ad.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 170.58.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0a:66:cd:9c:a3:6b:c2:d9:b3:ab:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=38b912df-e26d-4674-8ed3-5de272c29c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:20:b2:8a:df:78:c2:66:b1:61:a5:3d:71:f0:
4b:79:62:24:9b:e5:9d:fd:79:94:c8:4b:5e:e5:d2:
a9:d0:9a:b2:5f:d1:8e:8e:71:1b:4f:9f:d8:a5:d4:
d4:01:38:1e:1c:ef:79:cc:f5:d9:2c:de:d6:ca:a4:
86:44:49:51:74:7a:91:ac:e3:e0:28:12:9f:66:8a:
63:64:b9:77:f5:07:b3:46:05:e8:f9:09:f0:b8:a0:
a3:f9:39:80:44:39:52:7c:14:99:28:c6:e4:8c:d9:
24:55:d5:d8:bf:32:7e:d0:93:4e:36:37:56:75:61:
55:1f:0a:c3:51:a0:d4:2d:db:ca:61:6c:06:ef:40:
e4:2a:93:5c:df:a9:61:a7:b8:9d:26:fd:0d:73:c7:
c9:02:31:6e:34:dc:18:8f:31:8a:f5:62:ba:1f:23:
fc:d3:c7:19:c7:39:8f:91:57:01:11:40:f5:f4:53:
c1:c5:33:c8:b2:78:34:2f:1c:f6:2a:96:89:0a:be:
c4:86:a3:3a:71:57:01:e1:9d:aa:5d:fc:ee:9a:c6:
7f:09:eb:ce:39:fe:7d:ee:f6:7f:16:ba:64:95:2f:
e5:58:56:e5:77:be:39:4e:fc:5a:88:d8:8b:92:a8:
a1:6a:70:74:7e:7b:4e:44:5e:6e:6d:84:42:58:48:
f7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E7:CC:0A:6C:38:7A:CB:CE:A6:E9:03:8B:79:0E:B6:F8:2B:35:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73997fef-a1e6-332a-86bc-8f39ec74d0ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
170.58.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:26:c3:49:50:3f:f2:e9:93:dc:05:d1:e2:35:de:e7:c0:b4:
77:8e:39:a1:1f:1d:bc:26:47:72:d3:f5:cd:f9:33:8b:6d:06:
3e:a8:d4:bd:d0:7d:e5:bb:51:55:ca:0e:b1:8b:07:89:6d:59:
07:3f:7d:5e:b3:aa:c8:a7:76:c8:f3:03:23:8b:b3:c2:c4:f7:
e5:57:3c:23:bf:ce:ba:13:e0:74:d0:61:50:29:c1:80:52:21:
15:8a:e8:8a:c8:be:a5:6b:c6:a5:7d:fc:8a:ab:c8:c2:a7:90:
2c:e8:28:eb:c6:95:31:9b:df:e4:6e:1f:40:3c:93:33:06:19:
01:ad:03:41:78:54:a9:49:6e:38:63:ee:a6:77:fc:e6:70:78:
c6:8e:12:34:84:09:19:77:9a:49:a8:25:df:dc:77:81:63:0a:
f0:0d:53:63:e4:91:45:37:9e:f7:a4:0d:95:e7:cf:4e:cc:06:
ee:9b:57:30:6c:5a:b9:0e:bc:3b:e6:49:f4:ea:00:1e:29:28:
16:2c:be:ed:2f:f8:b0:f9:2a:b1:03:1f:69:7e:00:00:16:4a:
ca:89:d1:02:3d:a1:f0:05:15:24:41:a2:3d:90:91:de:af:1e:
98:58:47:ed:aa:34:6f:ab:8b:f4:93:05:9f:9e:52:d2:48:20:
c0:48:f3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:39:33 2025 by rpki-client