Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a8cc6f26-aca6-31b9-a2da-b6385ea5eb1d.roa
File: a8cc6f26-aca6-31b9-a2da-b6385ea5eb1d.roa (raw, json)
Hash identifier: RZDSOpRhqIDOc8krVR+kduxhrVJBX9Pzk6hyVx5wcRE=
Subject key identifier: 43:97:AD:91:57:60:9F:A2:8A:53:2B:03:68:9F:FC:FF:8D:7A:F3:B0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6FE06723DCEC9A9CB5E58600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a8cc6f26-aca6-31b9-a2da-b6385ea5eb1d.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 167.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:e0:67:23:dc:ec:9a:9c:b5:e5:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=3bf2049e-34a7-4470-b7dd-0bbf081f5063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4c:e7:1b:85:cc:77:ca:22:3b:80:83:f2:4a:
76:36:da:64:15:59:d5:c8:ef:bc:21:e7:f9:92:fa:
7f:8b:fb:ac:4c:79:d5:1e:c9:ed:3d:1d:33:c7:1e:
32:61:b9:06:7d:f6:d5:f1:4b:29:6f:3b:a6:27:a6:
51:f4:77:6a:3f:9a:30:f0:6f:bc:f0:10:37:9d:e4:
f3:1a:9e:d2:ff:71:8d:4f:a2:3f:3d:66:51:cb:0b:
af:8b:41:bb:d6:d3:62:33:6a:b2:cd:2e:41:52:f1:
5e:e1:f2:87:4c:6a:06:7e:70:96:4c:50:12:76:b9:
49:aa:20:b6:ec:4e:ba:8a:db:7c:ab:64:12:7a:53:
74:29:ff:35:43:bb:f6:19:8f:b1:21:82:55:ed:b7:
a3:de:a5:70:8b:df:86:6d:33:90:47:2d:cd:01:79:
b7:a7:0e:ac:4d:64:c5:2f:37:83:53:d6:9f:50:2e:
65:e3:88:73:a5:40:ad:93:4a:4b:12:d2:09:95:1e:
44:d5:ff:2a:f9:e6:cd:0a:76:e6:90:21:10:55:ac:
91:c2:3b:e1:bf:b3:9b:d8:28:8e:70:a1:11:77:99:
b6:1f:87:fe:ca:88:b7:98:88:44:7f:07:c7:e4:7a:
f7:65:62:d9:d1:9b:d2:c1:9a:a1:98:90:76:b8:90:
22:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:97:AD:91:57:60:9F:A2:8A:53:2B:03:68:9F:FC:FF:8D:7A:F3:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a8cc6f26-aca6-31b9-a2da-b6385ea5eb1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
167.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:b3:44:69:ff:a1:2f:8d:5e:cf:51:d3:41:aa:a3:0f:3a:33:
fd:bd:43:2f:2a:23:d9:a6:d2:aa:3a:87:7e:87:62:31:82:4c:
19:af:f2:65:8c:85:eb:f3:57:4f:31:de:9b:4d:a0:0a:1d:69:
cb:5c:53:ba:47:7c:ef:25:7a:9f:d2:f5:2f:6e:e0:b9:0d:a4:
f7:c6:5f:3d:0c:26:d5:0d:41:d1:67:35:e2:ef:97:72:12:53:
c7:75:1c:17:33:ec:fa:98:cf:d8:de:b4:a7:69:59:cf:b7:67:
ee:24:9e:9f:98:10:b8:ca:61:3c:4b:f2:88:48:8e:8d:cc:ff:
82:e3:15:64:32:a5:20:c6:80:f6:56:a6:da:52:f5:7e:22:6f:
9f:ac:29:eb:92:bc:94:9d:21:0e:e3:73:bf:0c:64:77:66:80:
fb:0a:f8:3a:e0:df:27:34:fb:4f:03:38:53:a5:dc:19:c8:00:
32:a6:ec:f5:58:fb:11:81:e5:6c:bc:54:0a:58:58:47:e1:df:
15:35:31:ea:da:f5:18:d1:6c:ee:02:5d:3f:fd:43:a4:40:fd:
66:f4:20:1b:c1:7d:11:ab:e3:0e:c5:35:e4:66:d3:ac:33:f6:
df:b9:16:7f:a0:bb:79:69:4d:45:37:75:02:88:75:db:12:b4:
1a:19:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:29:29 2025 by rpki-client