Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e23bae8-aa00-32e3-b982-6c12c3e395f9.roa
File: 9e23bae8-aa00-32e3-b982-6c12c3e395f9.roa (raw, json)
Hash identifier: vj+UkQGKOUITimkm/9/cLsv6kCbgn5LpD6okCm8NL5M=
Subject key identifier: ED:52:E4:E5:A5:93:28:33:E7:7C:35:B8:3B:B2:1E:B6:7F:35:1B:88
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584043227821BE0201C782F57B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e23bae8-aa00-32e3-b982-6c12c3e395f9.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 168.163.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:22:78:21:be:02:01:c7:82:f5:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=4b2f79b7-786f-47f7-a926-e8be1c922357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:ca:88:75:e1:69:45:38:05:ce:6f:70:c3:
9f:ca:d1:9f:fc:a8:b4:89:5d:a2:98:e3:27:06:f0:
ca:59:97:76:eb:e0:04:5f:ae:30:4b:e3:44:7e:27:
15:ae:50:82:69:f5:47:cc:b3:28:a6:ed:2b:7b:0c:
b2:8f:a8:d7:ca:54:77:d6:91:63:c3:91:9b:c6:c1:
a1:f0:34:c6:c9:ce:e0:76:34:8f:b5:92:cd:e6:d9:
04:31:b2:fc:18:08:ac:e1:65:d0:46:a1:01:5d:f8:
1e:20:8a:ee:fb:36:12:86:20:47:80:ba:5c:05:5f:
c4:0c:dc:0c:a2:64:f3:e9:f3:67:4e:6b:3b:d7:f7:
bc:b3:45:ec:d5:a9:cc:16:63:cd:de:ec:2f:0a:04:
9b:7f:49:81:86:49:31:92:e8:57:76:be:91:03:90:
4c:0b:7b:e7:8e:56:e9:6c:55:34:0c:db:e5:e6:36:
07:c1:1f:aa:9b:49:77:7f:37:da:dc:81:85:b2:3b:
01:0c:cb:23:8f:dc:e2:aa:f9:0e:44:e4:32:53:23:
57:84:a4:f7:ac:a0:9f:5d:1b:fc:20:ff:d2:af:74:
00:7c:63:aa:e9:f4:ea:8f:dc:b3:8a:31:c1:4b:26:
c7:d6:d7:45:7a:9d:46:7f:85:4c:20:00:e2:fb:51:
1d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:52:E4:E5:A5:93:28:33:E7:7C:35:B8:3B:B2:1E:B6:7F:35:1B:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e23bae8-aa00-32e3-b982-6c12c3e395f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
168.163.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:24:0f:d8:be:b3:fc:cf:3d:c3:9f:74:3b:a5:d7:55:28:b6:
7f:0b:ef:c9:39:31:f1:dc:95:d7:2c:46:37:88:37:8f:f0:d7:
93:d8:d2:f2:5c:f4:4a:e7:d5:90:96:90:3f:01:63:2f:c2:d7:
75:00:3e:56:33:be:7f:88:80:93:77:a5:8f:f9:32:83:d2:87:
8a:53:1e:3f:a9:dc:a6:30:bb:5c:86:ab:30:6d:58:46:92:44:
e3:e3:0d:f6:db:e3:9d:26:3d:2d:7b:cc:cc:f6:c7:4e:3b:c1:
a5:f3:a3:27:48:96:d3:51:15:17:9d:23:d2:fd:8a:60:c0:d6:
d3:fe:e5:be:ae:f9:3a:6f:d6:9a:d1:6e:e0:14:85:86:b0:c5:
a6:3f:fe:a6:30:08:1e:56:56:8a:25:77:28:6c:df:33:b5:d4:
b4:0f:48:6e:f3:e4:3f:a7:10:27:ec:b5:c1:2b:9b:b7:d2:2c:
ed:9f:92:11:b4:dc:f7:1e:74:43:4d:d3:fa:53:80:d7:6d:b7:
3d:cc:bd:c1:2c:43:0e:48:f6:76:c9:00:ee:8a:4f:9d:54:42:
9c:2a:13:61:e9:59:a3:eb:53:26:29:72:0e:41:c3:00:01:5d:
08:a7:be:d4:fc:ec:b6:a6:4b:8a:00:4e:b6:fd:e5:5e:67:0c:
8a:35:4a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:31 2025 by rpki-client