Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a48079ac-d2d6-3366-a524-92f43492ab9b.roa
File: a48079ac-d2d6-3366-a524-92f43492ab9b.roa (raw, json)
Hash identifier: kXsrHielVIlDZObignfkJ68NbOgfBQ1f/hFGzGA4xlI=
Subject key identifier: E3:F4:06:EF:EA:A2:50:AB:09:5E:30:00:1F:9A:A9:2C:28:F4:4A:1E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584053F191EC741249BC3F50FD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a48079ac-d2d6-3366-a524-92f43492ab9b.roa
Signing time: Thu 22 Dec 2022 12:00:00 +0000
ROA not before: Thu 22 Dec 2022 12:00:00 +0000
ROA not after: Fri 27 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 141.181.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:53:f1:91:ec:74:12:49:bc:3f:50:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 22 12:00:00 2022 GMT
Not After : Jan 27 05:00:00 2023 GMT
Subject: CN=49cab17a-d306-4954-8c69-92d1af4d760f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:f7:31:e3:13:60:88:02:9a:6f:bd:ff:af:
8f:64:aa:8a:85:6a:7c:2d:ca:7e:8c:4b:18:0b:ab:
f5:fe:13:da:f5:58:37:18:f3:b5:11:94:f0:86:79:
da:d1:6e:da:e5:1e:7c:2b:47:f1:46:3f:8a:38:8f:
e3:e4:af:28:9f:c7:4e:c5:70:d7:91:7c:cc:4f:31:
a6:6e:30:29:00:aa:26:30:33:a0:3b:72:09:15:58:
06:fe:15:6f:ca:83:6d:a3:c1:29:11:6c:8a:7c:cd:
a2:ce:f0:0f:3a:59:3a:2d:9c:8e:cc:1c:fe:98:4e:
ae:f7:27:a9:4c:c4:80:21:69:0e:33:42:63:85:67:
e6:1a:f4:46:70:0e:c3:45:11:63:eb:4e:05:1e:32:
0d:1f:83:d6:60:fc:eb:f5:3e:1c:64:30:2a:20:0c:
a8:ef:e9:4e:3d:ee:a4:b7:ef:3d:6c:7e:95:06:5d:
25:ed:c5:19:b3:96:22:08:e7:ad:2f:33:af:1e:fe:
0a:dc:a8:18:00:19:98:56:87:95:52:f3:dd:3d:a9:
64:ae:26:d0:96:d2:7c:0a:1d:63:62:bb:d8:31:11:
61:c5:db:98:6b:78:12:d8:a0:60:8b:78:18:de:1b:
43:55:b3:cc:5e:8e:39:15:e0:3e:df:e6:51:ac:3b:
17:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F4:06:EF:EA:A2:50:AB:09:5E:30:00:1F:9A:A9:2C:28:F4:4A:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a48079ac-d2d6-3366-a524-92f43492ab9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.181.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:6f:8f:6b:8c:04:08:d3:8f:da:f2:65:02:94:77:05:a1:f0:
18:08:b7:87:94:3c:97:75:05:7b:11:4b:4d:df:ae:11:e8:2f:
e3:91:22:ad:37:e7:bd:d4:16:31:c9:e7:29:43:a5:04:66:00:
01:d7:04:71:cd:93:23:ab:e4:d3:98:91:09:3e:44:4f:a4:fc:
d4:88:b3:83:09:48:40:41:04:f2:56:8f:55:5a:dc:93:62:ec:
82:10:d6:4c:e5:e4:0c:0c:85:19:9a:42:7b:7b:84:b8:f3:4a:
7d:a6:c1:3e:05:df:a8:18:e8:72:be:49:79:33:d7:0c:9b:40:
0c:9e:9d:97:e6:82:fe:0f:66:4d:df:ac:e8:6a:43:e9:38:32:
87:ac:b0:1c:7e:f2:f8:f4:a2:ae:c4:a2:6d:f6:7f:f9:6c:b0:
62:b2:87:f8:d1:50:08:e7:bc:21:07:02:69:c4:3f:e0:47:a7:
bb:a1:e3:1c:5f:46:cb:3e:8a:59:52:83:de:59:23:95:50:6f:
95:c8:f1:74:7f:d2:b0:78:0f:be:3f:ab:a3:2d:bf:0f:f8:1d:
af:d0:de:8f:97:97:d3:ab:51:73:e4:88:eb:4f:0d:6d:52:b1:
7c:47:81:2d:06:fa:99:54:0d:03:5d:7d:e6:58:b4:9f:ba:1a:
f9:72:0a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:17:29 2025 by rpki-client