Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/96c7cee3-7384-3c32-8b49-467cdb4d1db8.roa
File: 96c7cee3-7384-3c32-8b49-467cdb4d1db8.roa (raw, json)
Hash identifier: lLgpdNQBbgtF2NhrIyo1q+xClYOu4V+JDeZTqH7oMSw=
Subject key identifier: BC:3E:9B:A9:9B:87:BD:8E:E5:1A:BD:92:66:63:41:63:06:5F:22:00
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D96DE62D467DC09B16BAF4E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/96c7cee3-7384-3c32-8b49-467cdb4d1db8.roa
Signing time: Sat 16 Apr 2022 04:00:00 +0000
ROA not before: Sat 16 Apr 2022 04:00:00 +0000
ROA not after: Sat 21 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 170.120.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:96:de:62:d4:67:dc:09:b1:6b:af:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 16 04:00:00 2022 GMT
Not After : May 21 04:00:00 2022 GMT
Subject: CN=25a70598-749d-4508-8697-60523e61a930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f6:61:85:55:de:47:75:80:c9:bf:f6:ea:75:
89:b2:e4:45:55:a5:b0:52:3f:6b:42:6b:8d:d5:a0:
f8:4f:d1:f3:18:54:bd:c2:a6:59:d6:a6:c6:a0:fb:
60:9f:85:bc:c4:6d:50:7e:2e:ae:47:83:23:c4:ff:
11:75:d3:6c:84:9f:11:4b:a5:90:df:d3:0a:96:20:
ab:7f:9f:fc:9b:84:54:5c:96:44:2d:3b:2d:7e:c7:
02:e0:5d:dc:fc:1a:8c:4b:84:56:82:01:7c:1e:6a:
75:74:b7:8a:f1:bc:c1:16:fd:34:28:24:08:4d:f9:
30:9e:e1:2d:35:22:77:d4:ec:8d:80:90:58:1b:05:
6a:73:3f:bf:87:51:51:97:c1:2c:9f:bf:67:3b:c1:
af:3d:17:4d:fe:0f:2b:68:33:4b:95:84:4f:58:dd:
b6:ab:d2:76:dc:1d:c1:9d:55:ae:e9:d2:a5:47:0d:
f0:d2:81:0e:9f:5d:de:1a:32:85:33:df:86:44:4e:
01:45:cd:ee:11:23:c7:89:58:9d:b7:f0:a3:99:74:
ad:7a:12:86:7a:04:bd:4e:81:e8:70:2f:e1:69:63:
c3:5f:42:b3:0e:17:e7:42:f1:46:7c:34:5c:3e:50:
f4:cb:e8:6d:21:f4:f0:41:61:99:5b:13:c2:f6:6d:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3E:9B:A9:9B:87:BD:8E:E5:1A:BD:92:66:63:41:63:06:5F:22:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/96c7cee3-7384-3c32-8b49-467cdb4d1db8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
170.120.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:3d:cb:1f:3f:fe:39:0f:ac:ba:f8:d5:5d:88:2b:02:d1:7f:
cb:5f:10:ec:17:8a:3f:ba:d2:9a:eb:ea:a4:b8:72:ac:44:08:
e9:4c:f4:3b:78:77:ad:3f:76:af:c7:13:f1:6f:a1:47:92:fb:
04:30:ce:23:8c:0d:4c:d8:c4:c5:d3:d1:55:68:f7:18:41:b5:
2d:a7:28:4f:e1:bc:15:19:5c:39:f0:4b:8a:ae:fe:66:70:79:
bc:57:82:e6:43:77:36:c8:73:5c:db:25:1f:6d:4c:81:3e:91:
9e:fe:ac:14:43:af:fc:df:a6:31:30:d6:ba:dc:54:ec:3c:6b:
2d:c4:4a:9c:7c:aa:4b:74:cb:34:84:bd:68:f3:cd:2d:8f:78:
85:69:2a:3a:76:71:f9:17:89:9b:12:77:02:72:ab:c6:39:21:
30:b7:95:61:5e:17:06:ca:d3:07:4b:32:90:81:29:cd:c1:a9:
b6:d8:5c:cd:87:6b:74:52:7c:18:b5:16:0e:aa:0c:00:dd:db:
7b:ec:a8:08:ce:0c:08:91:89:90:e6:86:38:f8:d1:78:96:01:
06:08:92:56:47:35:ff:59:9b:d2:b9:5c:19:30:5b:ec:1c:f0:
ea:0e:56:29:a2:11:1f:8c:b7:d4:db:a1:58:fb:e4:b0:5e:ba:
6c:fe:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:19:52 2025 by rpki-client