Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8822e961-31b4-37d1-8dbe-3c87e60673df.roa
File: 8822e961-31b4-37d1-8dbe-3c87e60673df.roa (raw, json)
Hash identifier: XWwXNgc7Q2XHPD7Q/Oom2QqPz7CHLtF4uelMpKXg7V0=
Subject key identifier: EA:57:63:A9:B5:CC:4E:44:62:A3:7B:DA:20:41:DA:48:81:D9:D6:30
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C9723D48C767CE5F8B254D280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8822e961-31b4-37d1-8dbe-3c87e60673df.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 146.9.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:97:23:d4:8c:76:7c:e5:f8:b2:54:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=9a3759f7-b7a5-48d5-bba6-515752166ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:2b:e9:38:e3:e0:d9:17:56:65:94:81:a5:
96:03:db:f0:26:c1:4c:c5:d1:32:48:73:a8:2f:b4:
12:6a:74:d8:f9:8c:71:8c:90:9f:9f:36:fd:c6:00:
fd:70:9f:92:e2:6c:97:c9:eb:3c:d8:3a:bf:90:6b:
b6:01:c5:6c:1a:ce:45:26:46:23:e2:df:44:89:b8:
56:5a:bd:c4:0b:46:3f:05:28:a7:32:ca:0f:71:72:
e8:8d:7e:d0:08:2e:29:bc:6c:fb:4d:3a:f4:87:6d:
6f:c5:22:27:68:53:06:8c:ae:c0:52:bd:09:1b:84:
a3:76:17:04:49:e8:f0:e3:eb:27:6c:85:dd:e7:8a:
f6:cc:31:12:8a:58:df:bc:11:f2:4f:c9:97:88:ab:
87:0e:44:29:fd:7f:e4:4a:17:39:77:53:c3:16:fe:
00:2e:85:42:e0:5e:1a:1d:50:3b:c3:5f:d2:07:6e:
5a:1b:1d:50:04:43:74:71:e7:d0:ac:68:6e:5e:17:
9e:16:48:af:a5:f1:47:8d:8d:18:44:7f:ec:f9:e3:
18:90:fc:22:ca:20:84:eb:f1:46:49:0e:37:27:46:
0f:57:cb:16:88:ef:19:a1:17:53:05:9c:4c:11:c1:
88:b1:30:81:b1:26:13:90:b0:35:14:76:36:4d:21:
5a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:57:63:A9:B5:CC:4E:44:62:A3:7B:DA:20:41:DA:48:81:D9:D6:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8822e961-31b4-37d1-8dbe-3c87e60673df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.9.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:f1:35:e2:6f:94:0c:41:f3:0d:7f:41:84:96:7c:1b:f0:d8:
ff:af:62:9f:85:16:f6:6c:0e:c9:1b:04:9a:14:a9:60:c3:a8:
e5:8d:dc:7b:92:ee:78:1f:7e:61:b1:a8:03:9b:99:6b:35:37:
42:17:46:8e:04:a4:a4:44:21:0d:70:43:2c:63:1c:ad:b7:5e:
89:7e:71:ed:cb:6c:e4:6c:51:73:a5:2d:70:bf:81:05:37:f5:
c1:a2:6a:c3:7a:36:9d:9e:d6:6c:db:be:b1:1b:6f:df:b2:4e:
64:82:86:48:af:72:4c:d4:9e:39:cb:c7:40:23:43:d8:a5:f3:
f7:63:71:19:62:58:ba:c7:a2:c2:21:02:69:56:27:ef:ea:80:
fe:e6:fe:72:8f:10:cf:20:09:fd:eb:0e:0f:c3:78:b0:5d:44:
e6:fb:b9:ee:38:3d:5f:6f:a9:95:a6:54:85:90:93:26:17:ff:
b9:6d:72:42:53:3a:a0:44:dd:2b:46:73:d2:4a:a0:0a:4e:7c:
21:e3:fe:5d:b8:41:84:8b:d4:27:77:93:ce:d5:6e:7f:d7:93:
44:09:b2:7e:08:65:e2:2e:39:5c:eb:b4:15:9a:d5:26:f0:b6:
18:f9:bf:1f:6a:38:e3:0b:79:55:17:d1:36:61:2c:63:89:41:
b9:1b:77:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:14:39 2025 by rpki-client