Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d56b9dc-6273-3cd0-8983-3422852fc830.roa
File: 8d56b9dc-6273-3cd0-8983-3422852fc830.roa (raw, json)
Hash identifier: phL9oGKh5QBNvrj6FsFTvHE7e0ey6WIPhUJvhAzU8rs=
Subject key identifier: C6:DB:B4:00:36:64:EC:16:AD:AB:70:AD:C1:43:62:83:84:0D:31:07
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE52FAEF0F80356EE85D89B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d56b9dc-6273-3cd0-8983-3422852fc830.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 165.94.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e5:2f:ae:f0:f8:03:56:ee:85:d8:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=51e00930-59ee-432b-9a16-db541eb0a141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b3:0c:1b:d3:67:c7:7c:ef:9e:43:a1:3e:2e:
2e:1c:e3:16:99:ed:41:ef:90:0d:d1:6e:24:54:1b:
06:3f:3c:75:db:8c:ce:54:d1:75:af:a3:c1:9a:c6:
b8:bf:28:8c:6a:33:7f:2d:27:85:cf:47:1b:55:f5:
b6:13:a1:b8:2a:0b:c3:cd:e9:c5:ff:11:94:7e:58:
0a:3e:2c:62:91:1a:ea:a2:07:f2:a5:03:04:ea:b3:
22:ef:c3:1d:76:63:7c:8d:b0:8d:98:4e:26:ba:45:
32:40:1c:70:cc:f9:a8:02:ec:19:eb:42:3e:2a:6a:
c5:d9:6d:8e:08:c8:da:fc:c6:56:12:df:8d:f4:2a:
c4:f5:40:66:e0:9e:91:d6:86:78:b6:16:b9:f7:c6:
0a:95:fe:6f:62:14:28:6e:8e:9e:cd:7f:6c:90:1f:
48:d3:29:41:9c:72:d3:6d:e9:be:59:83:05:41:ac:
3b:c1:7a:6e:65:99:60:23:41:d5:e4:47:39:47:56:
6c:4d:fa:62:2f:7c:a2:51:8f:5a:d3:1d:9e:e2:1a:
77:d0:ea:90:4b:bc:81:55:98:b4:a1:3a:b3:e0:f0:
5e:9f:a5:90:f8:ac:f6:24:62:59:98:75:be:e3:5c:
65:46:31:c6:b3:95:6c:3b:6a:ca:31:c5:15:81:e0:
07:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DB:B4:00:36:64:EC:16:AD:AB:70:AD:C1:43:62:83:84:0D:31:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d56b9dc-6273-3cd0-8983-3422852fc830.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.94.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:50:4f:09:e2:fd:73:df:2a:37:0c:cf:bd:c1:d3:c4:27:26:
66:d9:ee:ef:fa:c3:15:c1:a8:d5:77:d1:46:35:23:e3:ac:db:
47:e4:66:7c:f0:8d:76:1c:16:ec:4d:a4:67:45:19:84:32:2d:
aa:83:a0:ca:43:d5:e6:87:fd:c2:77:b0:f4:e0:08:73:3c:3b:
35:0c:ba:7f:13:c2:5a:1a:d8:f6:4e:4e:82:aa:02:70:e4:d8:
f4:36:14:81:d4:8e:1f:ad:09:74:12:52:21:db:46:1d:72:85:
3f:15:68:47:f1:9f:6b:92:0f:e7:ee:7b:04:62:2d:9b:c0:62:
9e:6c:9c:71:02:86:a2:ce:88:47:cc:01:b3:01:e1:93:58:ff:
96:7d:f7:12:62:93:55:95:cf:e0:ed:eb:9b:59:ef:d3:db:64:
50:52:06:db:5a:ab:24:0b:13:b2:1b:59:f1:ff:ac:d7:15:36:
8c:e0:10:f0:51:0b:74:aa:2b:3f:3a:b5:08:c4:f0:25:ea:44:
dc:c1:3a:9d:e2:b4:64:a5:67:18:0e:c5:ba:03:26:df:71:c6:
b9:62:99:d7:7e:e8:09:ed:ce:8f:b0:4f:bb:1e:16:c5:62:f1:
5f:ec:e5:f5:d1:18:af:27:ea:e6:de:ee:c6:4c:ef:3b:43:5e:
f2:41:ce:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:22:50 2025 by rpki-client