Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b695b3e5-0de0-3c07-8189-5f7efb3cd179.roa
File: b695b3e5-0de0-3c07-8189-5f7efb3cd179.roa (raw, json)
Hash identifier: H8fUzYze7ytIEPxjOVAIN3uAue5DE8zbpWvmQ2Bd02Y=
Subject key identifier: D1:84:29:19:9F:E7:76:AC:6B:2C:72:C6:E9:C1:75:4C:05:32:61:E4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E3087BB7B1F51A3275E1DF180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b695b3e5-0de0-3c07-8189-5f7efb3cd179.roa
Signing time: Thu 09 Jun 2022 12:00:00 +0000
ROA not before: Thu 09 Jun 2022 12:00:00 +0000
ROA not after: Fri 15 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 141.186.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:30:87:bb:7b:1f:51:a3:27:5e:1d:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 9 12:00:00 2022 GMT
Not After : Jul 15 04:00:00 2022 GMT
Subject: CN=bb9b979c-2fa1-4532-a7a4-e0fa304a7580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:fb:62:88:97:30:52:50:68:0d:d5:3f:81:
77:ae:18:8d:80:5c:d9:81:4c:f4:c1:d4:45:74:fd:
d0:3d:5c:d7:70:74:45:c0:99:3f:79:63:4f:4f:f2:
96:04:9d:e4:9a:17:08:a5:3b:b5:f0:f4:1d:10:de:
e6:eb:5d:83:c8:19:a2:14:7b:01:50:7a:71:4c:69:
c4:46:49:42:0f:15:04:54:97:03:a9:c6:88:10:7c:
68:7f:e6:46:55:6a:8d:90:2e:41:90:e5:b7:91:d9:
7c:07:6d:f0:22:d8:70:27:32:fc:92:1a:ee:3d:73:
68:cb:d3:af:a0:6e:31:42:8d:79:c9:7c:ab:f0:66:
b2:31:ec:1f:cf:87:1c:09:53:2e:e0:12:45:3f:d8:
60:9f:fb:8c:08:be:87:e2:87:6d:64:15:43:35:0c:
f0:bc:86:3b:11:bd:3d:7f:00:ad:f5:38:bc:d0:01:
f3:ed:a6:05:9f:97:cb:c6:da:97:40:21:bb:7f:d6:
c3:95:7a:86:f7:39:6f:0e:29:d5:41:d4:4b:df:5a:
3b:ba:df:7a:86:78:c7:dc:fc:74:99:d1:dd:b7:7d:
f9:ab:c9:11:d3:f4:18:4e:db:1a:21:6b:31:8e:eb:
6b:d0:99:ab:e2:01:cf:56:dd:74:38:0a:69:84:93:
1b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:84:29:19:9F:E7:76:AC:6B:2C:72:C6:E9:C1:75:4C:05:32:61:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b695b3e5-0de0-3c07-8189-5f7efb3cd179.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.186.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:b7:34:db:57:9b:cd:fd:6e:46:d5:a1:d4:59:dc:6b:be:d8:
e8:c1:23:13:51:97:49:3b:38:2f:cd:4a:35:20:cf:a0:d5:27:
a5:01:b6:90:6b:9c:00:88:f4:8f:93:f5:c0:55:2f:93:ef:8d:
02:8c:04:c8:79:48:15:6f:db:2f:0e:fc:7d:8a:93:31:93:36:
53:0e:44:87:03:4c:7c:37:98:08:fc:a0:60:db:ba:a7:a0:64:
a1:0f:d8:1b:10:63:5f:96:e2:f2:e8:5e:18:28:01:2d:36:cb:
0f:3f:f1:6a:36:20:50:d7:9a:31:1a:aa:5a:d7:43:1d:9f:98:
fa:95:be:ef:03:89:24:53:68:9d:11:ed:2e:11:70:f4:8f:81:
ba:5e:71:3d:5d:7e:e2:c6:36:ce:bd:4e:6b:fe:58:c5:f7:5a:
b1:7e:89:44:ab:52:cd:97:bb:99:61:90:17:0a:8e:85:a4:d9:
7e:45:b1:8a:89:75:49:81:91:80:a8:8b:7a:c6:9d:6c:fc:69:
26:95:90:0a:96:f0:da:e2:42:1f:a1:fd:3a:78:05:f7:5b:a9:
48:20:f9:54:e9:0d:48:f0:1c:39:2f:c8:81:64:fc:2c:d5:c6:
b7:54:4f:cf:b8:29:cf:dd:f1:b8:8c:d4:97:fb:d2:30:2b:ec:
53:ab:2d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:18:36 2025 by rpki-client