Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76e2c7e4-3975-3682-ab32-4f919e10f66f.roa
File: 76e2c7e4-3975-3682-ab32-4f919e10f66f.roa (raw, json)
Hash identifier: m1dhenQ03gJsvJgW+rW0F6Kgalved0wHVNiDHxsehTA=
Subject key identifier: 33:AE:4A:60:1C:21:3E:52:84:99:1F:BD:40:E2:90:35:66:63:AE:C7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE2CB6BAA09FCD67E52584400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76e2c7e4-3975-3682-ab32-4f919e10f66f.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 206.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e2:cb:6b:aa:09:fc:d6:7e:52:58:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=62b28671-a198-44db-a4f0-f797bfd5138b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:86:fe:2d:6a:01:e7:cd:4d:d0:e5:03:fb:41:
8e:51:72:8d:7d:6e:2a:fb:ab:c7:8d:28:7c:17:ec:
20:fc:c4:a1:0a:e7:f2:c8:ae:f6:4b:fa:f5:c3:86:
f7:46:95:65:8e:8b:63:8e:a7:09:fc:07:33:6f:38:
13:fe:96:02:4d:f1:72:68:21:14:97:94:d9:68:6f:
29:42:76:a0:70:0b:92:aa:ce:52:fd:68:51:c2:11:
9c:97:80:35:f4:d7:69:49:4d:5a:f3:26:58:fe:12:
69:34:86:67:0b:ef:77:b7:e2:3d:1d:9e:19:26:82:
c9:68:e2:8b:ec:87:8a:e7:92:05:69:c0:e6:ca:e8:
5f:92:fd:e6:e1:cc:bd:e6:e9:45:15:86:5d:e1:7a:
a1:0c:67:26:2d:28:6f:08:17:17:80:40:17:4c:11:
bc:ed:9c:37:8c:89:86:42:96:af:51:cc:2c:15:b8:
9a:53:b6:34:43:85:1b:49:53:d2:4d:98:c8:83:ee:
b1:ab:88:3b:19:8b:44:f2:8f:c8:6e:9c:ec:5b:ba:
08:c9:08:6a:08:c3:7d:15:b3:3c:a2:97:d1:21:f2:
6b:b9:8e:3a:d9:dd:77:a2:b1:a2:59:98:00:83:9e:
c6:e8:ea:25:a9:83:5a:cc:9a:76:69:08:70:db:b8:
e9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AE:4A:60:1C:21:3E:52:84:99:1F:BD:40:E2:90:35:66:63:AE:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76e2c7e4-3975-3682-ab32-4f919e10f66f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
206.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:45:16:49:f1:41:16:e8:bf:86:80:17:c7:a3:da:9f:79:78:
39:29:1c:af:f4:46:51:59:ce:12:7d:a6:f9:7d:9d:e6:7d:07:
64:4b:f7:03:5e:fc:3d:1c:1c:12:69:ea:66:83:d9:f7:10:79:
2b:87:15:46:90:2a:cb:33:e1:4f:5f:e2:de:d0:cf:3d:5d:c1:
20:d8:19:97:11:84:53:f1:58:c2:7e:5e:f2:41:d5:6a:c6:db:
aa:c1:16:47:76:45:5e:f6:2a:1d:01:55:88:85:1b:59:1e:c6:
3e:e6:61:79:a3:32:6d:c4:42:73:9a:3f:2e:d7:0a:fb:c6:a9:
34:59:71:33:b9:8c:95:c9:96:5a:8d:2d:46:c2:8e:cd:6f:f6:
81:bd:ec:7e:7c:de:da:c9:a0:9d:f1:63:1e:45:4f:21:eb:f3:
ed:35:24:49:83:f3:4e:26:54:9a:8c:e7:e1:98:ab:1d:56:0a:
06:cd:2a:67:dc:80:f4:46:91:a9:5e:ef:18:d8:55:15:44:13:
0f:ad:5f:4f:db:94:28:1f:86:cf:9f:d7:02:46:7b:c9:69:5b:
96:f6:c4:7a:e4:5c:9e:f8:89:48:1c:d1:28:9d:f7:2b:18:79:
22:61:98:4e:17:22:40:42:fa:6a:b6:2a:68:7b:ad:69:e9:3b:
9d:54:66:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:08 2025 by rpki-client