Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b01bd62f-9037-33fe-9805-7a8c04954da2.roa
File: b01bd62f-9037-33fe-9805-7a8c04954da2.roa (raw, json)
Hash identifier: pZAd7+8OU1Tbni/vYopbQ0DhLE7pvO+sK/K41v/Q23Q=
Subject key identifier: B4:9C:22:03:DE:63:2D:2E:54:E1:5C:A6:FD:01:63:FF:00:F7:CB:4B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0A2B52CA697CE7FA1B413B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b01bd62f-9037-33fe-9805-7a8c04954da2.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 167.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0a:2b:52:ca:69:7c:e7:fa:1b:41:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=79d83842-4762-4753-863b-d821c820c740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:12:a1:9f:44:cd:da:52:56:60:30:79:f9:4a:
eb:49:c3:26:76:e8:f7:12:13:e1:68:24:42:ea:21:
70:c0:ce:84:dd:e9:a8:6c:ee:4c:40:a2:3f:f3:64:
25:41:bf:44:9a:11:b3:d8:df:ea:e5:38:d7:8c:b6:
6a:51:24:9b:00:d4:d5:ac:de:e8:12:43:e2:56:5b:
60:0f:08:c1:4c:15:0b:bf:fa:f2:51:6a:4b:c3:39:
a8:ce:57:c9:cd:18:83:5c:23:8c:08:3f:08:a3:7c:
36:55:01:01:7d:7a:26:ce:a2:c5:c7:ab:c5:ac:f1:
d7:71:43:14:9c:85:1a:a4:1c:35:13:9f:96:1a:11:
82:60:33:8f:ed:24:6a:4a:ce:0d:ec:6e:1b:24:2b:
3e:57:71:e6:cb:7d:d6:e8:5a:c5:7c:dc:ea:d6:bd:
98:1e:6e:3a:d1:23:9d:a2:59:a6:61:09:33:d0:5f:
60:29:67:03:9e:80:59:7f:be:68:c2:d4:a9:a9:4c:
a5:59:52:d4:96:a3:10:b1:4c:63:6a:98:20:16:62:
c8:df:56:4c:f4:0b:5a:a1:a8:7a:5d:50:a2:85:29:
fb:df:10:ae:08:5a:26:94:61:a9:34:e4:e6:18:0a:
b5:2b:2e:71:f0:38:3a:73:8e:02:fc:6a:60:26:56:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9C:22:03:DE:63:2D:2E:54:E1:5C:A6:FD:01:63:FF:00:F7:CB:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b01bd62f-9037-33fe-9805-7a8c04954da2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
167.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:59:ae:80:66:1c:ec:37:eb:0c:1a:11:38:5e:f4:30:05:5d:
2c:13:71:87:b2:a2:33:11:92:22:1c:6a:f4:43:ab:9b:ae:e9:
e5:fa:90:3d:6c:5e:db:9a:9c:81:04:85:65:38:bd:e7:d4:c8:
4e:7d:5d:f9:dd:12:46:34:3c:5d:8d:f5:36:17:21:a2:f8:9f:
32:ed:30:72:d5:f3:d9:22:9f:1b:5f:d2:7e:a0:49:b0:6d:0f:
51:2f:43:ab:d2:1d:41:93:7c:8a:fd:c8:f5:b9:4a:bc:e0:af:
6d:15:a3:91:95:f4:af:a4:f9:62:d9:da:bc:84:47:a7:2b:fc:
65:72:96:b7:ae:0a:16:6e:0c:8d:86:e3:08:4a:e5:2a:ab:ea:
d0:3a:99:aa:ec:cd:f1:71:26:fe:36:15:72:50:40:ba:3c:41:
ea:6c:df:4f:21:9e:ba:bb:4b:96:83:b9:93:2f:32:e1:ce:9e:
53:4b:0c:32:58:a9:b0:6b:87:39:f6:17:1a:fd:1c:dc:2c:93:
e3:63:ed:b2:f7:78:87:ff:e8:09:c4:b7:92:af:1c:24:79:7b:
4d:a2:0f:3f:d3:76:16:6c:f7:09:36:9f:07:b9:7d:31:0a:55:
ed:4d:9f:7a:a0:f9:c1:01:b7:96:16:d8:6e:11:eb:37:d2:39:
6a:44:55:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:46:55 2025 by rpki-client