Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/933e813c-3945-39d7-bf72-ae59c1047a90.roa
File: 933e813c-3945-39d7-bf72-ae59c1047a90.roa (raw, json)
Hash identifier: D7ZDqeR3bnSiOb7krLU/vamsbmsvvR2msmpriqBbCXc=
Subject key identifier: 39:4B:00:AF:23:0A:CD:8D:3F:9B:B5:6B:AF:69:7F:C6:E8:B8:BC:C1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D64794CB9E2B17A9551E28300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/933e813c-3945-39d7-bf72-ae59c1047a90.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 03 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 165.208.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:64:79:4c:b9:e2:b1:7a:95:51:e2:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : May 3 04:00:00 2022 GMT
Subject: CN=6cade2e0-514b-4a7c-a188-d4f30e8f4790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:55:17:19:48:93:01:ba:6d:2a:72:c1:cd:
f1:87:99:f7:ed:59:18:87:88:ac:6e:4d:82:5a:dc:
4c:af:ee:57:25:e9:29:d6:a7:bb:0b:a2:19:e1:ea:
fa:92:8d:e5:d5:75:cb:20:66:5b:2c:47:51:e3:b7:
fe:2b:ad:81:00:97:2f:97:d7:c8:a7:c7:96:63:37:
d4:1f:4d:9f:3b:91:6d:24:a5:4e:e4:d3:2b:ad:be:
ba:f6:8b:02:48:96:f5:bc:2b:d3:2c:56:f0:32:6a:
7e:f3:80:16:c7:97:3d:dc:0a:ee:9a:08:f1:e2:2b:
2d:8b:8b:47:33:92:b0:9a:40:f2:28:08:79:24:ad:
99:30:33:59:88:7a:cb:67:8e:73:83:a9:c6:bd:59:
cb:0a:fd:78:d0:24:e3:9c:61:22:84:be:3c:a7:c3:
5e:19:f1:e7:88:e5:fc:02:9b:8a:fd:54:a0:73:23:
63:73:2c:06:cc:28:a8:c5:0c:2f:69:8b:5d:f7:06:
a0:c9:18:ff:58:c1:53:03:24:86:ad:9f:b3:f9:b5:
8b:90:d8:f7:42:f3:d9:25:20:ed:9a:1a:23:cb:9b:
8b:00:dd:44:cf:64:a9:3d:5a:2c:3d:86:0f:0d:33:
37:4b:2a:fb:63:bb:f6:f2:5e:41:d9:f9:94:27:fe:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4B:00:AF:23:0A:CD:8D:3F:9B:B5:6B:AF:69:7F:C6:E8:B8:BC:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/933e813c-3945-39d7-bf72-ae59c1047a90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.208.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:73:af:7c:11:81:c4:b6:b4:5f:5a:68:66:cb:30:9c:15:d9:
df:cc:24:1a:8e:a3:ff:ab:68:b5:8e:4f:6a:0d:1e:24:95:0f:
a1:7d:9e:95:72:23:e8:51:31:c9:14:f0:4d:d9:dc:f6:4f:9d:
66:63:d8:23:33:ae:cf:91:77:eb:b0:3e:1d:e6:15:52:44:f5:
c0:69:56:d6:e0:c6:60:07:32:f3:fc:3d:cc:bd:4b:f4:c1:ee:
65:f2:5d:bd:36:2e:ce:2f:b7:79:84:4d:28:45:6e:85:45:9c:
fc:ae:70:c6:76:16:f1:02:6f:88:9e:aa:67:fd:15:9c:fc:51:
f9:82:27:02:0c:38:eb:6e:aa:5b:5a:8b:29:7b:4c:d8:4e:cb:
9f:ab:64:9a:5f:a4:3b:43:9b:24:fc:d6:0c:1c:c3:a2:75:ee:
3d:60:b0:6b:36:68:ec:7e:5c:ab:03:ae:0a:8b:8e:b4:36:da:
55:2b:04:15:8c:84:2c:86:a5:83:84:7e:c6:64:1a:b9:a5:cb:
f9:b7:c0:c4:e7:6a:3e:16:d0:1c:c4:84:72:c4:3d:18:ea:4a:
82:79:05:f5:bb:c4:4a:40:53:28:a9:03:7d:03:86:93:3b:36:
23:85:f5:14:77:58:72:6d:49:2c:f2:e4:de:b9:e8:e8:12:3b:
4f:1d:b5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:26 2025 by rpki-client