Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b2bbd7e2-ed8c-314c-88ad-8fa3eecb019d.roa
File: b2bbd7e2-ed8c-314c-88ad-8fa3eecb019d.roa (raw, json)
Hash identifier: MPhJ9sfEX40rmBsNa9PyzEvzF8T2RovLdjlCs24vUKI=
Subject key identifier: DC:B7:AC:8F:C6:3F:D1:9E:E0:8A:FC:8A:70:21:05:2F:4B:D5:33:40
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E3E7D1F6A536D6777550DE100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b2bbd7e2-ed8c-314c-88ad-8fa3eecb019d.roa
Signing time: Tue 14 Jun 2022 12:00:00 +0000
ROA not before: Tue 14 Jun 2022 12:00:00 +0000
ROA not after: Wed 20 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 146.65.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:3e:7d:1f:6a:53:6d:67:77:55:0d:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 14 12:00:00 2022 GMT
Not After : Jul 20 04:00:00 2022 GMT
Subject: CN=5e3c4601-454d-4a92-b5b5-1e4c2f18a4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:78:d8:8c:4c:70:82:72:de:59:2a:93:b3:
bc:c1:da:ec:bc:56:ea:49:da:e9:a2:62:17:27:80:
ae:49:0e:e6:5f:80:bc:e4:d7:36:cf:66:b9:e1:77:
da:23:61:f3:c4:23:29:84:23:2b:6d:51:90:63:8f:
00:08:ad:4f:e1:58:0b:f3:0d:9b:7f:0a:f9:eb:db:
26:7f:80:81:2e:ab:46:29:60:da:12:75:2e:e8:32:
e7:a8:ef:0f:26:22:75:f8:b4:ae:27:72:6e:45:b5:
54:e9:6b:be:cb:28:79:7d:73:32:5f:67:f3:00:66:
53:a8:97:f3:e6:f4:7f:8a:5a:3f:60:a0:03:aa:bd:
cc:54:09:6d:5e:04:b3:cf:0c:7f:55:c1:ca:71:38:
9d:77:64:1a:95:6a:62:ae:3d:c6:af:04:68:96:25:
6a:a2:5f:c3:3a:22:e3:82:ab:6e:12:ae:c8:e8:29:
a2:e4:5d:44:c8:18:16:3f:90:c9:1f:cd:12:a3:f0:
92:9f:83:f4:e3:d6:51:40:db:ce:c8:7a:c1:b0:ee:
4f:c7:54:13:fe:49:24:d2:74:d0:c6:6a:35:3d:87:
c3:3f:cf:4f:b0:e9:8c:c9:3a:5b:cf:77:93:d1:f3:
3d:0f:b2:1b:f2:ac:64:a3:00:ee:5c:e4:05:d8:53:
bc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B7:AC:8F:C6:3F:D1:9E:E0:8A:FC:8A:70:21:05:2F:4B:D5:33:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b2bbd7e2-ed8c-314c-88ad-8fa3eecb019d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.65.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:eb:69:19:14:33:5e:06:d3:c1:e2:91:d7:02:f0:29:6e:bd:
6c:94:c0:97:eb:7f:59:2c:af:88:16:4f:d9:9a:8f:eb:8e:0f:
e2:48:94:e1:ce:1d:97:30:ef:a0:57:4b:83:1a:98:73:87:bd:
a5:a1:62:1b:ac:24:97:86:37:32:53:43:ce:6b:7b:32:3c:d8:
93:5b:9b:c7:a4:da:9e:09:02:4c:ea:4b:b9:10:c0:1a:ff:78:
f6:97:65:70:9d:4b:33:e4:c9:23:e0:1e:a9:b6:b4:bb:68:8e:
f9:ac:96:d9:bf:7a:c6:45:51:eb:53:5d:21:ce:07:9d:29:bb:
22:d4:29:79:d6:71:6f:3f:dd:3d:1a:d3:f7:9f:9a:58:17:ce:
9e:9a:26:97:9d:d4:26:2c:0a:39:ac:35:6f:bd:99:86:58:06:
6e:2c:29:0e:2b:34:9e:00:ed:6b:8f:ba:e1:6e:d7:36:83:3a:
e6:b7:67:40:dc:2f:94:66:d7:b3:90:c0:df:b4:54:62:87:5f:
73:4c:df:e1:0e:11:7f:2a:9e:69:0b:3b:1a:20:59:de:9d:45:
3d:82:3e:8d:16:69:64:c8:fa:6b:32:d8:fb:82:56:fc:86:ee:
03:0b:eb:38:fa:04:54:8b:63:f8:77:ef:d6:51:39:96:bd:16:
ef:34:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:23:09 2025 by rpki-client