Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a6581d22-6b80-32a4-9f84-353bbee5ec42.roa
File: a6581d22-6b80-32a4-9f84-353bbee5ec42.roa (raw, json)
Hash identifier: bN5Y7yVvC/gfiBNA4OffijhQ0YoFHyG1JaJ4kLWVuGw=
Subject key identifier: D5:7F:E6:94:07:9B:3B:D6:78:2F:96:5C:0A:30:BF:C0:4F:F3:B4:72
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401DD2CEF11D6A77EA17B7F6C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a6581d22-6b80-32a4-9f84-353bbee5ec42.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 170.58.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1d:d2:ce:f1:1d:6a:77:ea:17:b7:f6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=18f0826d-fc3e-4ef1-a6c0-030262d6cd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cc:3c:ab:92:ba:0c:d7:b8:82:48:b9:1f:20:
7d:0d:44:65:09:e3:be:39:ee:a1:40:63:ea:f8:35:
54:11:de:3e:90:96:d2:83:8c:71:5c:35:cf:60:61:
0f:be:82:cf:90:e9:17:fa:6c:8a:fc:a3:5c:c4:05:
3f:24:b5:3a:d7:b0:73:39:ee:9e:a2:ff:d4:30:c8:
c4:5c:2c:f5:d9:c4:0d:29:6f:e3:35:70:b0:86:c5:
45:8d:eb:46:ba:12:77:96:f7:bd:63:78:27:68:40:
93:e8:c3:82:fd:e6:58:3b:c6:d2:5e:e8:1a:cd:7d:
69:b1:de:63:d7:d3:97:10:e9:fe:65:83:93:88:67:
17:b9:4b:3d:f5:1c:8c:b1:d7:f8:74:ba:fc:78:ec:
a2:30:b9:ed:13:45:be:bc:d8:19:bc:8a:f6:ab:14:
6c:cf:22:4a:60:20:48:f2:70:8a:bc:77:dc:0b:30:
53:9a:7f:be:ac:02:b7:bc:24:a4:7b:70:28:8c:89:
74:68:a2:33:c8:7e:26:30:d5:3b:fa:13:a8:5b:2f:
19:24:06:94:9d:ab:96:8b:92:23:24:6d:a5:6e:a0:
ad:9d:29:be:9e:87:95:f2:af:41:39:dd:1c:30:cb:
73:ef:49:52:b9:a9:41:5c:dd:1b:9e:4a:2f:23:e5:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7F:E6:94:07:9B:3B:D6:78:2F:96:5C:0A:30:BF:C0:4F:F3:B4:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a6581d22-6b80-32a4-9f84-353bbee5ec42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
170.58.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:ce:71:47:f6:d4:f8:b9:79:bd:4d:01:3f:31:06:e5:b8:0a:
ac:01:05:9b:f1:63:0e:8b:0b:d4:e9:5b:b1:f2:d8:84:98:68:
d9:25:16:a4:2c:a1:3d:3d:45:cb:5f:2e:31:93:8e:d4:57:10:
c8:c4:a6:96:19:43:3a:9a:6f:02:f3:ed:1a:9c:f8:86:1e:10:
a9:28:8f:54:9d:48:b4:50:58:4d:b2:fc:63:24:e6:db:22:72:
2e:d2:21:33:a7:df:b9:31:7e:5c:d4:87:e9:c5:87:d4:37:f7:
16:70:2d:c4:bc:c1:50:f3:c9:1d:9d:eb:3f:e0:0c:ab:1a:02:
47:25:86:a9:1c:62:75:c0:3f:f0:01:7b:d9:00:46:11:5b:0d:
fe:42:86:59:c9:b8:4e:65:c8:15:4a:58:59:e5:12:95:9d:75:
6b:cd:61:c2:ab:26:97:4a:8e:8a:d2:fa:20:94:37:a8:82:bd:
51:6c:80:83:e8:8b:89:c5:f1:de:e5:eb:00:7f:0b:1e:3b:e1:
8c:d7:15:b8:06:b6:3c:a1:b9:5f:66:a4:0b:ea:b7:8d:13:3b:
f5:a2:8b:7c:21:bc:7d:da:91:66:3a:8e:fa:79:a1:48:e1:b6:
ea:4d:d0:85:ae:29:74:5e:ed:55:d7:be:bb:5d:69:c7:76:21:
14:ba:38:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:08:31 2025 by rpki-client