Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a8267d97-594f-3a8c-af4c-2984ef1eabb3.roa
File: a8267d97-594f-3a8c-af4c-2984ef1eabb3.roa (raw, json)
Hash identifier: iTSCkx3h82t3K4u33NU8wZk5MXragooPVYM2NIv1EvM=
Subject key identifier: A0:87:33:4B:62:DC:67:CD:32:6F:BB:12:71:75:7D:14:14:10:33:9A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584069338C9E6BDB9D5C15C9636C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a8267d97-594f-3a8c-af4c-2984ef1eabb3.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 140.145.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:69:33:8c:9e:6b:db:9d:5c:15:c9:63:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=5587b23d-4035-4617-aa0c-f5c4fff23194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fe:a3:26:e8:b2:67:71:a6:b7:13:7a:c9:f0:
ee:ee:02:42:db:3a:80:d4:2f:5d:d7:fb:1c:36:ee:
5f:df:9d:c6:9f:ff:80:aa:df:bc:9a:e8:48:49:75:
7c:a4:95:ba:61:91:a0:f2:aa:8a:6c:f8:c6:76:03:
42:03:d8:12:6f:78:3c:c3:4b:75:3c:f5:58:63:69:
be:b4:07:bc:19:6c:08:f5:fa:43:52:94:c6:01:b4:
c5:04:db:50:bb:28:5d:1d:77:1e:c0:59:8a:9a:b4:
df:ac:a4:a2:c1:09:62:33:6b:b5:11:76:5b:c7:b2:
60:c6:0e:15:c0:d3:a1:53:38:0a:76:e0:db:24:06:
65:28:9e:4c:31:19:8f:62:e2:db:c6:c9:68:1d:d4:
2c:61:c6:fb:18:05:80:71:1b:a1:d8:e4:da:34:db:
b6:e7:43:5f:4e:fa:be:ad:73:90:8d:f1:3a:33:9c:
4b:1f:51:37:fc:19:3a:43:28:f1:17:fa:17:65:b7:
5f:a5:60:7c:3f:4b:92:a3:11:ba:59:49:9d:f8:94:
14:ca:5d:06:25:76:8b:b5:73:49:9b:b5:b5:62:bb:
5e:5a:93:b4:4c:1c:86:73:b1:49:ae:eb:e8:2c:af:
a9:79:b9:17:db:9e:57:27:97:59:2a:2d:c0:93:ee:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:87:33:4B:62:DC:67:CD:32:6F:BB:12:71:75:7D:14:14:10:33:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a8267d97-594f-3a8c-af4c-2984ef1eabb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
140.145.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:06:36:ee:06:64:55:fd:62:9d:26:8c:0e:85:87:dc:7c:49:
c4:d6:55:d0:b0:38:f1:6b:84:da:bf:ed:57:91:c0:9f:47:62:
09:ae:f4:5f:9a:a8:bb:5a:5b:6d:f2:e1:e9:a9:e5:53:ac:1f:
3f:14:cc:dc:60:cf:a9:54:e0:5e:38:3c:35:cd:12:95:4b:50:
5d:14:f7:a7:34:90:99:48:82:b1:4f:47:a5:c6:2e:85:74:07:
cc:29:c8:76:ec:c9:75:04:92:a4:e7:db:da:94:71:16:2b:26:
49:1d:8c:8e:29:c0:78:18:6e:2e:0c:8d:94:06:ac:fa:17:a2:
5b:40:9c:68:18:8f:02:56:36:cb:64:99:d8:73:fc:eb:70:3f:
89:c3:f1:02:2d:b7:5b:88:13:a0:fa:ee:63:10:ba:1d:76:2c:
23:13:35:59:de:23:46:49:51:d5:bd:48:e3:d9:a2:5b:41:99:
8e:22:d5:ee:ff:82:04:a9:49:f7:76:e3:91:d9:6a:12:7e:a3:
d9:1a:8a:63:51:c9:59:ca:d5:e0:47:40:e1:a5:db:c0:f8:48:
18:74:8f:61:67:ce:aa:44:9b:26:21:75:e3:03:f8:42:bd:a0:
67:39:13:33:78:1e:05:8b:c8:21:57:0f:d5:c1:f9:d3:ae:57:
52:8f:91:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:20:22 2025 by rpki-client