Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87b26fc3-99a3-321d-adb1-e3dc3c81437c.roa
File: 87b26fc3-99a3-321d-adb1-e3dc3c81437c.roa (raw, json)
Hash identifier: FRUZ36UCp4MKdxlLi8Jm0nXdXZ17AIsM7JYhFpib3r8=
Subject key identifier: 33:DE:F4:CA:3D:3D:02:57:63:88:18:CA:55:8E:4B:83:6E:73:72:C9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF772114B1EF44480D5F0F000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87b26fc3-99a3-321d-adb1-e3dc3c81437c.roa
Signing time: Thu 19 May 2022 12:00:00 +0000
ROA not before: Thu 19 May 2022 12:00:00 +0000
ROA not after: Fri 24 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 146.9.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f7:72:11:4b:1e:f4:44:80:d5:f0:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 19 12:00:00 2022 GMT
Not After : Jun 24 04:00:00 2022 GMT
Subject: CN=1cde6311-cd2c-4ed6-9814-07579786b337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:ac:b4:7a:3c:ac:c4:90:16:e8:7c:2e:d6:
8a:7c:45:83:3d:b8:d1:27:51:33:e4:2c:79:77:97:
7e:39:7a:fd:28:9f:e6:62:49:99:fe:ed:4c:34:4f:
83:93:cb:98:0b:7f:1f:f1:8b:1e:17:00:c1:8b:9d:
9e:a8:6a:2a:17:5e:a9:8c:ca:ee:49:60:65:06:4a:
f6:91:b7:8b:52:75:58:91:b1:bb:39:6f:ce:5c:46:
6a:fa:29:c7:2d:9a:c6:18:a5:d4:b9:65:fa:59:94:
92:7d:1a:6a:69:54:1a:f4:a1:88:54:65:dc:39:03:
01:d6:b8:d4:29:d7:f0:56:9f:de:29:fb:22:69:2f:
ea:81:39:a4:2d:a1:3b:fc:50:d3:b3:b0:d0:a7:fc:
d2:91:29:c4:7f:85:7b:82:6c:c7:a4:9e:cf:b6:04:
fe:fa:de:66:9d:f3:11:54:b5:e0:02:6b:d8:5f:70:
8b:21:fc:11:18:a0:22:4b:5b:f3:2d:45:6a:cf:26:
8e:5d:b7:84:02:35:b3:fa:56:f9:b3:fa:d3:a2:78:
5a:28:4c:5b:0b:87:70:c6:8f:fe:30:bb:8e:4a:45:
f5:50:78:ea:11:8c:62:01:68:f8:e0:59:77:dc:95:
80:24:76:75:7a:16:2b:fc:a7:18:42:2a:cc:a6:cb:
8f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DE:F4:CA:3D:3D:02:57:63:88:18:CA:55:8E:4B:83:6E:73:72:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87b26fc3-99a3-321d-adb1-e3dc3c81437c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.9.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:f4:cb:ab:91:0a:8b:18:d3:7e:31:18:2d:84:c2:49:a7:fc:
40:77:4b:1c:2c:47:29:5a:1c:d3:55:b1:28:91:f8:5c:9a:76:
ce:50:0e:39:61:fc:43:37:a7:a0:7e:3b:b9:fb:f2:5b:9c:8a:
5a:d6:0f:e9:60:c2:95:56:77:34:4c:fe:fe:71:df:4b:e5:d8:
5e:ac:c6:ec:97:ab:ae:00:96:90:4d:bb:72:32:8d:09:ff:74:
62:bd:ca:e7:15:65:30:66:27:2c:05:75:79:81:16:22:00:4a:
1c:aa:e5:8b:79:10:48:20:93:6f:d4:64:3e:1d:84:1e:65:65:
21:2a:f2:6c:bc:3a:ad:59:62:bd:a5:f9:b3:72:d1:6e:ca:3e:
84:6a:16:38:d3:90:21:08:a7:20:fa:26:ff:27:d5:d3:f5:30:
f8:15:c1:1c:3a:be:56:1d:2f:63:33:22:59:41:85:37:f2:26:
bf:60:88:43:0c:cf:cd:91:67:7f:6f:b7:f6:2f:37:da:a7:48:
77:91:88:48:41:db:2f:96:91:ed:4a:ba:8f:2c:f2:5d:36:d0:
f2:d9:6c:6c:92:81:92:86:c7:c2:b5:23:19:e3:c3:aa:ac:9d:
8c:01:b3:e2:c8:51:ad:70:19:ab:a6:ca:26:88:08:07:e6:2d:
0f:7d:35:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:29:48 2025 by rpki-client