Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b21f3fed-2d28-3c49-a66a-f0b7082ac72d.roa
File: b21f3fed-2d28-3c49-a66a-f0b7082ac72d.roa (raw, json)
Hash identifier: vQdjheAIx7IeAeCPFojTjPgZjVDlzvPmgMbypNYiMNY=
Subject key identifier: 7E:33:99:85:0C:79:40:56:A6:54:7A:67:87:E1:28:F0:6F:02:C3:54
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE2CB331403008C54DBB40580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b21f3fed-2d28-3c49-a66a-f0b7082ac72d.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 206.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e2:cb:33:14:03:00:8c:54:db:b4:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=ca9c6935-975e-4c24-b549-b454b2e2b256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:ad:0f:85:6b:1b:3c:54:9f:2f:87:e6:8f:
87:b6:7c:69:94:91:a4:a8:49:4c:5d:89:90:63:6f:
77:83:37:cd:da:13:46:ef:cb:76:53:90:e1:c3:9a:
7b:7a:9e:2d:30:06:fe:e3:a1:f6:bc:9b:05:59:8e:
e8:39:b7:32:69:8f:ca:9b:7f:25:36:d5:b7:3c:27:
17:2b:3a:90:a1:12:7f:7f:70:fc:ab:e7:71:6e:81:
3d:ca:64:16:4e:8e:f0:7d:c1:d4:75:28:9b:6c:1d:
27:58:be:92:ec:fa:93:4c:13:59:d6:35:c5:15:99:
de:a2:0f:01:ef:6b:a4:8b:f1:a6:e9:64:02:35:05:
2e:d7:1b:90:08:ea:97:5f:e5:54:6b:6b:b3:00:b1:
34:1d:d4:da:0c:8d:a1:d9:bb:3d:f1:fb:a0:5b:a4:
78:29:43:04:ef:a3:0a:8b:87:72:94:1d:d0:b6:91:
1c:52:3f:cf:db:c2:92:34:54:57:57:10:ed:9f:50:
a2:ea:81:76:2e:5f:1a:66:4d:c1:24:11:10:4c:a3:
f1:9c:e7:01:af:ed:a4:75:b1:33:de:77:8a:b0:9a:
9a:cc:6e:43:4d:b9:38:c4:9f:9b:4e:d7:04:35:33:
d0:ef:40:8a:88:1a:40:0f:63:b4:99:71:0f:a4:9d:
79:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:33:99:85:0C:79:40:56:A6:54:7A:67:87:E1:28:F0:6F:02:C3:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b21f3fed-2d28-3c49-a66a-f0b7082ac72d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
206.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:1a:8e:14:85:14:4a:25:42:a6:4c:9e:ac:03:ac:56:5a:ef:
0d:e3:05:15:93:77:0d:f7:24:d8:f0:b7:0c:34:59:54:6a:07:
83:b1:49:c6:d9:ef:02:46:fe:ad:81:2f:32:9c:4a:d1:85:86:
e3:26:24:69:61:7c:94:ee:30:25:f7:0d:aa:01:8b:75:14:ec:
c7:07:e6:38:50:6f:da:e1:7c:5e:87:9c:ab:92:1f:f2:5b:a4:
9e:94:28:71:0e:98:26:4c:49:8c:7d:c8:39:0c:45:54:e6:0e:
09:1d:51:48:ea:be:f3:ab:68:95:ae:d4:d5:0b:7b:ee:4f:fa:
eb:0b:45:be:d6:72:e0:40:ca:15:9b:6b:46:61:f4:e0:39:c3:
4a:37:a7:20:7e:57:45:3e:0a:fe:64:8b:b5:da:42:0e:f5:65:
2d:9c:0b:fb:0c:09:9a:f1:76:ce:95:64:16:39:f8:dc:0f:9b:
5a:5b:48:5b:ee:9c:f1:a7:7f:88:9c:ed:b2:ee:fe:85:b9:e4:
dc:2f:f3:cc:bb:e2:4d:c7:5e:78:51:53:d3:53:1d:91:d1:2b:
0a:a1:84:40:00:da:f6:38:16:77:e5:59:68:14:75:ca:08:26:
5f:4c:46:10:09:fa:cf:63:da:62:a2:b4:1f:f8:f1:66:61:50:
27:50:5a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:48:56 2025 by rpki-client