Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0a65f25-caa6-339e-918c-b5c618a2399b.roa
File: b0a65f25-caa6-339e-918c-b5c618a2399b.roa (raw, json)
Hash identifier: eEvQfHpupxiVYqdf3p/hVEn/rm+ZD3exGsYXkuvoDpc=
Subject key identifier: CF:C0:BB:03:61:9C:82:19:BB:99:4F:DD:17:38:DE:BA:C2:1F:2C:8A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFAA4FC4E88C36EF524CCF140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0a65f25-caa6-339e-918c-b5c618a2399b.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 146.78.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fa:a4:fc:4e:88:c3:6e:f5:24:cc:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=b5f734d7-89b7-48e0-adc0-fb3218f52c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ad:b6:a0:e3:35:40:ff:41:d9:0d:cf:18:17:
ed:c6:f1:a8:a7:bb:2a:71:02:be:8b:b5:e9:d5:da:
ff:28:27:a2:10:ab:43:fa:f4:e7:4e:3c:5d:5a:8b:
8d:68:ba:20:19:22:26:11:11:2c:ea:e8:7d:82:24:
63:30:c5:8d:2c:70:27:10:0f:56:f0:4e:71:8f:b6:
16:7d:28:83:0d:8f:0e:9a:f2:a4:90:b8:d4:10:7b:
e2:2f:41:1f:24:74:fa:30:5e:f5:89:c2:86:02:62:
cb:f3:11:53:62:97:5e:e2:f4:a3:ec:29:bf:40:c1:
89:5f:69:f3:69:36:09:41:29:26:10:9f:94:5d:9f:
7b:71:af:dd:02:75:7b:28:cc:dd:8a:2f:4f:e4:45:
7a:85:05:6a:f9:62:da:85:77:51:30:cb:15:d2:2b:
78:9e:e2:6d:ea:72:64:4d:87:a0:8e:b7:5c:c4:38:
23:51:a5:88:de:53:3b:3b:b7:77:ab:1a:3e:58:c4:
fa:a0:c8:14:29:39:1a:b5:cb:f6:c3:cc:54:2e:d9:
21:fc:bc:3d:81:d2:dc:d7:be:d9:32:8a:84:cc:67:
70:b6:39:9d:b5:bf:b1:3c:3e:e1:35:29:60:d2:4e:
6e:97:4e:ed:04:b5:90:a4:42:6c:ca:d5:7c:e6:5b:
83:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C0:BB:03:61:9C:82:19:BB:99:4F:DD:17:38:DE:BA:C2:1F:2C:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0a65f25-caa6-339e-918c-b5c618a2399b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.78.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:a5:5f:4f:bf:5f:13:88:d5:bf:61:0d:09:c3:78:ae:13:bc:
a0:13:ce:d2:2d:94:84:6d:a0:81:da:d9:b2:e0:08:f1:36:e9:
78:51:c3:51:ff:22:20:b1:1e:4b:e2:dd:2b:14:cf:58:f9:5e:
76:a1:ce:6e:87:4b:38:93:4d:9a:fd:fb:25:77:aa:72:2b:85:
19:8e:54:cc:ac:ef:2a:b1:52:51:c2:49:57:6b:83:73:4a:02:
32:96:4e:90:5b:17:f8:46:b2:ee:b9:b6:99:ff:bb:bc:3d:81:
47:75:8d:d3:26:da:c7:e7:a9:aa:32:26:dd:d4:19:4c:8a:ee:
83:9f:51:bf:2c:09:d0:56:18:f2:b7:88:c5:79:f9:9a:8f:d4:
40:3a:e8:c5:34:45:f6:fb:4a:c7:d6:dc:8e:bc:92:53:d8:34:
38:a1:c8:19:8d:7f:75:b5:f0:87:f8:c3:61:96:ff:8f:15:0f:
37:31:88:fe:9d:c4:90:e0:a9:18:ec:d8:da:a2:c5:ba:35:c3:
d4:dc:9b:01:a7:fe:4d:a7:6e:1a:c8:90:8d:5f:6f:eb:db:22:
e3:96:b5:d4:18:88:ad:2d:62:e2:52:00:fd:18:a1:49:50:04:
8f:b0:c9:db:de:6a:9f:ba:11:bb:44:e2:79:ee:1d:42:08:23:
ab:6f:1d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:57 2025 by rpki-client