Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b203c77a-311c-302f-8399-4e4592628934.roa
File: b203c77a-311c-302f-8399-4e4592628934.roa (raw, json)
Hash identifier: Px7aGnrrMMspiutDxw0Pv90Lkq0LTosZOpX40YUaZsA=
Subject key identifier: 44:D9:9D:02:2E:D0:11:DC:C3:F4:BD:79:6C:11:3B:F2:08:30:7C:D6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCC9A2C6D9DAAB221C157FDF4
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b203c77a-311c-302f-8399-4e4592628934.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 146.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cc:9a:2c:6d:9d:aa:b2:21:c1:57:fd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=c12af4c0-f640-484c-b3cc-80789d747f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:62:58:02:91:47:f5:47:eb:1a:8a:81:e8:
56:a7:42:f4:67:43:49:3a:3e:c1:5e:ae:d6:c4:a7:
e3:8d:ea:83:96:b2:b3:20:75:bb:ab:08:82:18:3d:
16:42:11:60:5f:a8:df:1d:2b:be:b1:fa:9b:c5:a7:
fb:28:5c:99:12:b1:76:2b:99:a6:b3:1c:1f:0d:c7:
46:b2:39:f1:ce:d9:1b:93:2c:64:9f:1c:75:7e:6c:
c4:44:d6:82:01:e0:1e:82:34:0f:9a:c9:56:19:08:
d2:9a:42:29:7b:02:c5:51:4d:45:a1:04:dc:b0:0b:
e9:7c:43:e2:26:69:38:8b:69:45:91:8f:39:0b:3e:
33:04:e4:8c:ed:6c:c4:fe:f8:02:64:64:8d:b4:03:
39:91:2e:bf:f9:37:66:d8:41:12:c6:c1:70:17:20:
12:79:5a:36:e1:4e:3b:21:d7:7b:09:e5:bd:2d:d3:
c1:2e:65:19:78:71:44:57:cf:31:c0:ec:0c:b5:c4:
8d:cb:2f:c2:5a:96:a1:c2:c3:b6:ed:fc:85:9b:cf:
7f:81:88:0c:fb:0f:f9:fa:e1:e8:5d:75:7e:e1:0c:
d9:ac:57:4f:8a:8d:c4:fa:13:e7:d0:9e:eb:df:85:
f4:d7:71:ca:f3:c6:24:8b:68:cc:ef:53:19:22:57:
6a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D9:9D:02:2E:D0:11:DC:C3:F4:BD:79:6C:11:3B:F2:08:30:7C:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b203c77a-311c-302f-8399-4e4592628934.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:73:f4:f5:80:08:f3:fa:b4:c5:e1:31:c2:50:a4:2f:c4:93:
91:bc:65:21:05:ff:69:b0:09:97:2a:35:1e:a0:00:df:74:6e:
76:d6:e1:e1:9f:0f:bc:6d:8b:ee:f3:ed:a6:dd:a8:6f:08:49:
c3:25:58:fc:57:91:b8:7e:34:1d:54:15:e8:60:32:a9:4a:9e:
db:c3:ae:1c:6f:50:73:a6:6c:ca:ff:fc:ae:e7:b1:76:0c:f7:
68:18:0e:39:31:6f:d0:a1:cb:5a:e1:c6:7b:aa:38:cc:54:c8:
67:c4:96:75:17:d0:6a:d5:7b:01:5f:db:6e:c3:23:e8:db:aa:
72:a3:5b:0d:6c:42:d5:c0:2c:6a:e2:80:4a:7d:b6:07:5f:f9:
ca:84:30:af:13:1a:25:89:5b:c4:b4:0b:1f:31:77:7f:d9:a3:
07:46:f9:1d:b3:d1:94:af:21:28:61:99:23:27:22:67:c7:86:
34:d3:85:11:b1:e1:3d:cd:78:db:8d:61:59:94:3b:77:9c:53:
cd:66:f7:a2:54:b8:3e:48:78:ec:35:ec:09:da:22:39:26:b4:
65:1e:9b:cf:95:8a:52:09:a6:88:fa:fb:5d:cf:46:4d:15:44:
fa:55:3c:fc:63:43:a6:46:35:a4:d2:08:0f:e7:56:3f:b8:67:
5d:80:f1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:28:21 2025 by rpki-client