Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/865382b0-1820-30e0-aee2-bc651d3754b8.roa
File: 865382b0-1820-30e0-aee2-bc651d3754b8.roa (raw, json)
Hash identifier: iU4ag5yByL58GoHez9/dL9OVKg0jCBanoUWUFLVu85o=
Subject key identifier: 9C:61:D6:6D:54:BE:EB:93:84:87:D6:75:07:71:68:3D:90:55:4E:F6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584041D382628C59A76B6E5B29A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/865382b0-1820-30e0-aee2-bc651d3754b8.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 146.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:41:d3:82:62:8c:59:a7:6b:6e:5b:29:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=8c3d417b-266d-4568-bf30-313ab925ece5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:35:3f:3f:ac:ed:92:fb:2b:7c:f2:70:8a:ec:
97:ca:6e:5a:2a:3a:c9:2e:75:86:57:88:a0:ce:8b:
61:f5:de:b0:f3:4c:b5:4b:e4:04:a3:85:a6:dc:55:
6d:72:dd:d5:7c:10:01:38:ec:da:ef:c9:b0:82:89:
00:96:d1:93:2e:be:a5:6c:d5:64:ad:8f:48:00:5a:
af:cc:4a:4c:44:aa:48:71:0f:c0:35:da:b6:37:c0:
71:82:1c:c7:dd:0f:80:05:85:01:12:b7:1f:82:fb:
ae:eb:b6:d0:d1:b0:63:d0:6f:5a:e0:f9:65:3f:e0:
23:bc:62:e9:36:ba:0e:ac:b3:56:5c:89:40:49:5a:
8b:bf:8b:ba:ef:ce:8a:66:d9:16:7d:be:a8:5c:1d:
cf:c3:72:bd:bf:c1:33:fb:2a:11:00:0e:a5:43:83:
22:85:40:99:0b:5e:02:a3:67:a3:71:6b:89:52:eb:
c0:4c:df:82:a4:0f:18:91:c4:e5:9f:4e:a2:22:06:
a1:8a:23:8a:97:72:73:02:bf:2f:4b:e5:3d:7d:a3:
ae:4c:8e:d8:05:b8:b0:53:0e:27:23:9b:9c:e9:e1:
6c:86:c4:43:9b:53:57:5c:c5:31:d3:9f:3a:fa:4a:
f3:da:e3:67:c5:af:be:3c:3e:22:90:d5:89:30:6d:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:61:D6:6D:54:BE:EB:93:84:87:D6:75:07:71:68:3D:90:55:4E:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/865382b0-1820-30e0-aee2-bc651d3754b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:c7:bf:67:60:f9:3e:c0:dc:8f:5d:54:fe:61:cd:d2:7b:53:
e2:21:69:0c:3f:7f:8c:4b:93:17:29:5a:f7:8b:e3:88:0c:f2:
1c:f4:fd:26:6e:da:25:9a:ba:60:3f:e3:b6:ea:9a:e4:88:ec:
36:cf:36:cb:98:7b:37:cf:b3:8c:7e:ec:dc:be:a3:d9:fe:6c:
e3:f6:6a:b1:df:65:67:43:67:6f:90:7d:dc:05:99:60:69:bf:
c2:2b:b2:8a:c3:7d:8b:de:71:45:f6:f5:fb:7a:ea:16:11:b9:
c0:e6:8a:56:f8:20:f5:2d:07:c5:53:dc:12:34:d1:53:49:cc:
ae:3c:5c:47:f1:77:46:f7:4a:e9:66:d3:f8:cf:0f:84:75:97:
16:77:75:10:9d:d8:ff:fd:2a:c1:e0:39:f8:af:66:37:cc:ae:
4e:a2:60:4c:64:0f:ba:0b:17:1a:ca:96:90:d6:fe:9a:d0:d7:
57:b9:b8:4f:4c:99:e7:e9:67:7d:b5:2d:bd:6e:db:e8:97:0f:
68:e1:05:e8:a9:64:d6:ff:31:bf:2a:00:42:64:e4:82:60:6a:
a5:98:33:fc:f4:d0:fe:81:74:d4:05:9b:9c:d5:ce:d8:0c:3c:
2b:49:15:94:24:7d:77:c8:52:b8:66:80:f8:3b:48:1e:83:71:
fe:7b:0a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:00:21 2025 by rpki-client