Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7fc955b2-dac6-3bf7-9d4a-957945ebc9e8.roa
File: 7fc955b2-dac6-3bf7-9d4a-957945ebc9e8.roa (raw, json)
Hash identifier: OXWRJKFIuw44l8VwTQG7FFE3CbdgmPGp7rDsvcK+bAQ=
Subject key identifier: AB:82:BB:38:DE:88:2E:D0:01:91:10:E7:C0:59:D7:E3:6F:B3:C0:46
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406A37D863B9A97C40D3C82960
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7fc955b2-dac6-3bf7-9d4a-957945ebc9e8.roa
Signing time: Fri 30 Dec 2022 12:00:00 +0000
ROA not before: Fri 30 Dec 2022 12:00:00 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 168.163.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6a:37:d8:63:b9:a9:7c:40:d3:c8:29:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 12:00:00 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=ebb93d26-2959-4bf3-91f0-016288b4593f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2c:e1:e7:4b:d3:ef:37:7f:cc:f1:73:df:37:
e7:be:49:14:6e:b5:38:8e:ef:23:77:32:ab:39:8f:
a5:dd:70:ea:a1:10:46:45:15:d7:69:b3:05:a1:fa:
16:92:d8:f2:aa:40:9b:3f:e3:56:0b:aa:5d:4d:e2:
32:dc:02:15:10:80:7c:10:74:e1:08:25:c5:10:b6:
d0:38:8e:2e:4e:02:14:cb:7a:3a:ec:a8:fc:23:4c:
06:5b:9c:9a:15:76:0a:66:a8:2e:d5:ba:41:ca:45:
d7:d4:21:ed:eb:ee:ed:4c:19:b9:34:6a:af:71:cb:
05:db:d4:04:a4:f9:b8:9c:76:bd:80:2f:4b:aa:d2:
6d:dd:cc:3d:6b:96:54:6b:9d:2f:86:f2:f8:06:22:
65:d5:6b:b6:e6:80:94:ed:57:4d:b2:e1:b3:ef:14:
97:43:8c:26:a9:99:70:69:29:69:d2:fc:50:ae:10:
0a:0f:22:09:4c:54:85:71:21:60:49:06:02:35:75:
47:bc:74:47:2a:01:21:22:60:01:78:30:5d:48:c2:
82:bc:1d:82:3b:3a:fa:75:83:1c:39:17:99:a0:e7:
6e:d9:a2:a2:0f:c8:73:d5:c9:9f:36:49:2d:fb:e4:
48:3e:cf:f5:c4:04:db:06:00:3b:75:56:6c:6b:80:
6f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:82:BB:38:DE:88:2E:D0:01:91:10:E7:C0:59:D7:E3:6F:B3:C0:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7fc955b2-dac6-3bf7-9d4a-957945ebc9e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
168.163.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:bb:a6:6d:0f:3c:c0:b0:3d:81:01:c1:d0:ea:e5:df:b6:c9:
bd:84:fa:7c:13:26:87:9a:2b:3b:1a:a0:8d:6a:47:ba:b2:69:
10:f1:cb:f1:74:14:70:d9:b0:a1:0a:c9:ed:10:68:b5:31:1f:
18:da:6f:ec:b0:92:7d:29:76:07:49:45:f5:91:3e:06:17:1a:
a6:24:8f:6f:c3:7b:82:fe:19:81:55:2a:3c:73:26:2f:02:68:
6b:b4:a3:29:85:d0:b7:f3:7a:bd:b1:b3:2d:06:74:97:48:90:
16:be:86:70:9c:ec:fe:13:5c:78:d0:01:87:39:9b:99:89:35:
16:67:0b:34:aa:cf:ff:11:3c:b4:d8:cd:f6:27:9d:57:73:00:
31:6b:0e:4d:52:bc:14:78:19:15:e9:28:66:b6:c5:d9:c1:c0:
fb:d1:e7:25:83:da:11:1f:b5:d7:b4:a8:05:75:b4:02:2b:0f:
ea:53:41:48:92:91:ba:fc:4c:aa:c7:77:81:08:d1:13:b0:49:
a5:fd:13:10:d5:ae:fb:4b:63:cb:b0:6a:de:08:e8:ff:dd:de:
2a:1c:37:05:68:66:3d:38:bb:d5:2f:1f:70:04:97:be:94:2e:
d6:6e:4f:33:da:60:ca:30:15:5a:49:65:09:4f:64:4f:09:47:
b5:0f:96:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:55:13 2025 by rpki-client