Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8c9a26b8-b386-3a5b-a7dd-ddc3e8d8e0bb.roa
File: 8c9a26b8-b386-3a5b-a7dd-ddc3e8d8e0bb.roa (raw, json)
Hash identifier: VtcZdGmOzSlyzHi9agjy5wnwA7pt5jUVNiBDqXJ5F38=
Subject key identifier: 10:93:15:40:17:F5:37:51:3C:DD:AD:AA:A3:A4:9E:57:A2:3C:76:46
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF69F834CB7EB77D0CCED3680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8c9a26b8-b386-3a5b-a7dd-ddc3e8d8e0bb.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 170.58.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f6:9f:83:4c:b7:eb:77:d0:cc:ed:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=7713e6b8-03bf-427d-8b43-33d7beb5bb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:b3:98:85:fb:98:58:34:25:89:b0:c3:e4:
eb:90:c1:3c:b1:b6:e1:7a:ee:7e:ba:22:66:48:21:
9e:27:92:df:4b:eb:ba:88:f3:27:e1:2c:45:26:a5:
bc:02:c6:47:ae:b4:fc:0e:fd:45:e2:05:e0:00:69:
3a:50:36:b6:f6:e7:dc:d8:58:20:70:ae:2f:15:a7:
c4:ba:ef:77:41:5f:f8:2e:24:b8:a0:99:ab:bd:90:
21:9c:77:b5:a4:bf:72:79:04:03:97:ea:b4:14:c1:
ba:7a:d8:e4:ad:a1:0f:57:d6:14:b4:09:23:0d:9c:
69:f4:67:3d:93:a7:4b:dd:11:90:10:cb:fc:f6:3c:
e0:bc:ed:35:90:bf:91:98:ef:11:35:98:c3:cd:22:
0b:61:60:65:7d:c2:e9:38:fe:28:f9:4c:e9:df:73:
64:5b:69:d7:53:6f:a4:6d:b7:c1:a1:ab:93:0a:3f:
58:27:54:f4:b1:03:2d:9c:42:b5:8a:cc:ae:50:2f:
bc:b5:da:70:bf:9c:27:61:f4:61:47:61:ae:66:c3:
16:a3:ec:48:68:78:65:ae:8d:47:2f:4b:8e:0f:7c:
23:fd:4c:29:5d:1e:39:73:c5:93:c3:01:5f:e6:95:
f3:1f:b1:88:77:3e:5f:4e:2c:b6:a6:73:6a:54:22:
8f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:93:15:40:17:F5:37:51:3C:DD:AD:AA:A3:A4:9E:57:A2:3C:76:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8c9a26b8-b386-3a5b-a7dd-ddc3e8d8e0bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
170.58.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:9f:5e:1f:8a:e7:4a:0b:47:35:54:6b:77:4b:d8:94:81:cf:
56:a0:c9:57:fc:ae:cc:d3:b0:0e:fa:a7:43:91:90:b8:8f:3c:
69:5d:cd:1d:96:f9:ba:c2:67:9d:85:a1:3f:37:d2:81:92:b2:
fe:db:81:58:dc:c0:c4:10:f1:8c:b8:f2:28:04:bc:0a:db:37:
85:de:65:19:83:75:36:f9:be:dc:9e:dc:1b:72:0e:90:87:79:
dd:9c:1a:d1:f7:ae:b0:5d:02:d0:50:0e:5a:87:96:3f:ab:4c:
69:78:5a:b2:00:95:a3:1f:b7:96:59:4c:f2:77:30:b4:40:86:
be:16:f5:81:84:86:71:db:4e:91:52:0b:ec:7c:04:87:02:65:
41:c1:75:f9:72:de:43:cf:5f:2d:3c:ad:85:1a:b1:8e:20:83:
e8:00:b0:6c:9a:63:e7:d1:68:a0:3c:92:1b:d1:10:fa:94:72:
6a:ee:83:d4:d7:f0:92:4a:2c:d6:2a:8d:5c:c7:6b:99:95:6c:
fd:e4:27:b2:f4:67:f4:12:3c:2c:89:ed:ba:63:f9:81:44:aa:
d6:14:27:9c:40:57:01:28:d2:54:04:3f:18:25:c6:44:0c:41:
16:85:0f:9c:b6:58:c7:c2:77:bf:01:13:e2:92:0d:5d:f1:c8:
a4:ac:e3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:20:56 2025 by rpki-client