Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae1ae709-7fd8-34aa-a624-adc86963841d.roa
File: ae1ae709-7fd8-34aa-a624-adc86963841d.roa (raw, json)
Hash identifier: rIdJahr5fRvhzjZ5rH4xNT+X+VwilVelcUvdR9VFQkI=
Subject key identifier: E4:0F:B5:FE:B2:D0:B9:57:44:DF:E9:FD:E3:30:95:90:F8:1B:68:73
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CAB8C9C5A4A82D141FC6E1DC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae1ae709-7fd8-34aa-a624-adc86963841d.roa
Signing time: Fri 21 Jan 2022 05:00:00 +0000
ROA not before: Fri 21 Jan 2022 05:00:00 +0000
ROA not after: Fri 25 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 148.162.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ab:8c:9c:5a:4a:82:d1:41:fc:6e:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 21 05:00:00 2022 GMT
Not After : Feb 25 05:00:00 2022 GMT
Subject: CN=c4c31831-a561-4926-b7bf-a72936524283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:17:f7:9b:b7:0d:6c:dc:5b:6d:bb:6d:90:
c3:5f:f5:d8:c7:c4:d3:b0:f8:0a:89:ff:0d:97:8c:
28:71:f6:88:57:dc:0d:6a:9a:ca:8a:18:f8:7c:ef:
82:09:7d:bd:2b:50:3f:f5:70:43:b8:bb:2e:ed:86:
80:61:fd:e7:45:81:cb:84:c6:76:3b:18:09:8c:44:
88:1e:07:98:a6:d9:60:f9:05:fc:ae:c6:b2:76:64:
22:8d:33:84:80:2f:22:03:95:c5:85:8b:9a:1b:1f:
87:de:e0:65:d3:7e:ab:d3:b2:25:6c:b8:41:d4:e4:
59:58:3b:e8:91:36:9b:44:cf:45:d2:75:10:51:cf:
13:e8:7d:6e:85:94:a1:bd:91:37:f5:50:3c:63:c8:
87:19:d9:7d:60:38:7e:b4:1b:66:95:c3:99:dc:39:
71:1d:ce:4c:3d:71:8e:33:eb:cd:f9:7c:45:b3:5f:
09:5e:c2:ff:01:23:26:19:94:77:16:4a:7c:9a:7a:
38:f6:f0:1e:08:27:44:7c:12:52:20:95:f7:41:19:
87:80:e5:e5:1d:de:c6:4b:00:fa:0b:70:75:08:71:
99:25:cf:b3:0f:a4:9b:9a:b3:0a:52:d3:b8:c9:c0:
ca:5d:32:7c:e1:3c:ca:e0:0b:e7:6b:81:4b:60:15:
25:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0F:B5:FE:B2:D0:B9:57:44:DF:E9:FD:E3:30:95:90:F8:1B:68:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae1ae709-7fd8-34aa-a624-adc86963841d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
148.162.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:8c:86:82:97:fb:f0:45:e8:5b:f6:51:a5:a3:31:16:41:6d:
de:53:9f:27:fe:22:a8:c3:4b:57:c8:1d:c4:8e:de:ce:52:c5:
49:34:9d:3c:9e:dc:e4:14:b6:6a:36:bd:3e:15:e4:4b:9c:b1:
19:9e:43:00:88:c6:a6:9f:ff:ff:6a:89:f3:6a:b4:22:3d:19:
57:f6:37:dc:ea:6a:bb:45:21:10:e4:a0:c1:e5:9a:3c:ea:4d:
de:dc:98:86:4e:1a:7e:52:2b:41:7b:c5:ca:eb:bc:37:3b:b7:
5a:cf:3d:45:03:cb:d7:0b:1c:d8:b6:96:eb:45:e3:93:d6:48:
37:0f:c0:b2:35:e2:0d:4d:72:29:90:86:bd:1b:d1:ef:4c:8e:
76:71:f8:88:c8:f7:0e:be:48:a2:9c:ee:ac:00:0f:8c:6c:d2:
76:d0:5a:9d:15:c8:6a:b6:54:22:02:44:8f:14:79:4c:5f:e4:
22:e6:d2:bf:17:6e:c1:46:1d:14:84:6f:64:83:b9:51:03:9e:
c9:49:4d:2e:50:34:cd:dd:09:9f:4c:9a:21:92:0a:25:10:1f:
a9:bb:0a:01:56:5a:d8:c8:8f:6b:cb:1c:ca:06:27:76:02:00:
d6:ad:ed:67:b0:47:f7:bf:41:9e:12:6b:94:da:73:ac:7d:ae:
f9:14:a5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:58:37 2025 by rpki-client