Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8c237db1-7005-3e7c-bb1d-19008cf1e1dc.roa
File: 8c237db1-7005-3e7c-bb1d-19008cf1e1dc.roa (raw, json)
Hash identifier: JOkwUuAJojkaCx/H9s1CMVkDfy2mTmahtmc0sciAt7E=
Subject key identifier: 93:66:29:03:0C:00:3D:54:18:AC:A8:E1:5C:BD:F6:D3:36:D0:6C:83
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE16D93CE7CBDCE100CF94000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8c237db1-7005-3e7c-bb1d-19008cf1e1dc.roa
Signing time: Thu 11 Aug 2022 12:00:00 +0000
ROA not before: Thu 11 Aug 2022 12:00:00 +0000
ROA not after: Fri 16 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 134.63.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e1:6d:93:ce:7c:bd:ce:10:0c:f9:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 11 12:00:00 2022 GMT
Not After : Sep 16 04:00:00 2022 GMT
Subject: CN=1ae14802-65db-4948-9b14-1607eb64b816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:17:4f:16:6b:05:d3:64:be:a4:87:ba:fb:
52:76:4b:9b:2a:eb:7f:60:1a:c7:2d:e2:bb:ca:23:
02:ab:15:a2:46:f2:4d:46:7f:f4:71:58:45:1a:0f:
e3:51:0f:16:97:8f:d3:79:dc:3b:31:1d:00:d8:f3:
ec:5a:f5:aa:76:75:44:b7:0a:7e:ff:94:58:af:5f:
4a:7e:3a:cd:17:f6:ab:59:36:17:4f:7a:d5:f8:7d:
e4:62:1b:69:69:4e:12:64:58:b2:69:af:f2:1d:1d:
a2:72:24:d7:60:2e:36:48:bd:b4:10:96:12:d0:24:
6f:f9:b2:c6:2b:9a:c5:b8:60:c4:36:85:ef:55:2e:
8a:8b:79:7f:a9:ba:af:8c:5f:99:6b:44:b9:59:6f:
e7:8f:66:a0:f6:36:77:88:30:7b:ec:c8:9c:26:1d:
ab:00:c0:34:61:58:35:3d:20:52:fd:57:2f:40:1e:
f4:0b:29:f9:8d:d9:74:0a:06:df:c7:0a:3d:5a:ce:
3c:2e:7f:c7:72:96:23:2e:4f:e5:63:04:e0:81:b0:
0f:35:2a:12:7b:37:df:2c:ab:51:64:53:0c:3f:e2:
b0:49:37:72:1f:c6:93:21:34:5b:5b:9a:6c:c5:62:
db:89:32:1c:20:98:f0:73:9e:c5:f2:e9:5d:f3:83:
01:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:66:29:03:0C:00:3D:54:18:AC:A8:E1:5C:BD:F6:D3:36:D0:6C:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8c237db1-7005-3e7c-bb1d-19008cf1e1dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
134.63.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:87:e7:fa:b1:3c:03:c9:27:f9:1f:11:25:91:98:80:63:ed:
68:12:ac:4b:3c:ea:98:f4:5c:e4:14:f2:59:d7:cc:b1:5c:9a:
f8:d1:dd:31:2b:77:d4:3f:ae:eb:75:f5:6b:8b:1e:65:4a:38:
2d:ff:95:0f:a9:85:c2:c7:20:17:4c:17:2b:4d:26:2f:32:44:
f8:17:3c:d2:16:13:be:e0:0a:79:b6:ec:2c:b6:c7:e7:d6:16:
2e:4a:bf:4a:71:a0:0a:2f:96:dc:d4:9c:3f:4c:f1:ef:9a:e4:
bd:66:72:51:67:03:14:a3:01:0a:c2:80:6b:a2:07:d3:3b:bd:
74:8e:0c:ee:41:fe:a1:ab:16:23:5b:47:d4:c4:90:b8:27:b9:
e9:02:d0:4b:c5:8a:ca:6b:2b:af:54:7c:99:13:cd:81:47:a2:
f2:82:43:af:3d:5c:10:ce:1b:9d:78:b5:d0:bb:79:b4:a3:a6:
ea:ff:7a:c5:14:48:53:21:85:b0:25:34:31:2c:0b:9a:33:bc:
09:66:e7:b5:61:97:b3:76:41:dc:26:54:cb:79:ce:00:54:4f:
e3:4f:60:5e:34:73:e4:43:0e:1c:4c:10:06:59:d6:18:2f:68:
af:2f:ce:59:55:45:ad:64:2a:78:c8:cd:c0:7c:ed:0e:59:98:
f2:e2:82:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:58:49 2025 by rpki-client