Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb53055f-2c7e-3223-9e3f-8f8e8140dc1e.roa
File: bb53055f-2c7e-3223-9e3f-8f8e8140dc1e.roa (raw, json)
Hash identifier: 75fc80x6SpvuAlYaJUbuTM6ejyLz7GrT7H39rCcCFQ0=
Subject key identifier: 58:80:25:63:FE:55:2C:CA:98:25:DF:A3:AF:B0:65:BE:B7:1D:AB:5F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EA5D74B4EB242D64E6E7BE280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb53055f-2c7e-3223-9e3f-8f8e8140dc1e.roa
Signing time: Thu 21 Jul 2022 12:00:00 +0000
ROA not before: Thu 21 Jul 2022 12:00:00 +0000
ROA not after: Fri 26 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 141.185.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:a5:d7:4b:4e:b2:42:d6:4e:6e:7b:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 21 12:00:00 2022 GMT
Not After : Aug 26 04:00:00 2022 GMT
Subject: CN=f4cd3ca2-d8e3-425d-81a3-ed5ecfb43da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:d0:66:09:c6:35:03:cb:23:99:2b:39:20:
c7:d4:04:50:f8:d3:fd:f8:22:a6:fa:62:60:5e:2f:
3c:12:48:48:1b:ec:c2:b8:b0:7b:4a:5f:a0:94:f7:
e7:43:52:f4:87:e3:13:65:43:33:71:0a:b9:d8:64:
85:3c:5e:ab:94:64:36:83:40:6e:ff:6f:fd:d3:ea:
3f:07:2a:eb:da:e9:d1:d8:a9:55:09:b4:2c:06:6d:
06:8c:13:37:b3:0b:2a:34:7f:f6:86:0d:aa:68:3a:
b1:a3:40:b9:c5:3d:ae:05:37:36:20:28:1d:5e:b3:
de:28:ff:b8:0c:c3:4f:34:ac:93:e2:96:b0:81:67:
6a:66:06:35:ac:7a:f6:92:5e:38:b6:85:31:e5:6a:
29:93:ad:95:68:4a:75:bc:64:70:eb:3b:da:12:c6:
94:b5:51:60:a4:2b:59:91:fe:57:80:c3:ea:1b:bd:
23:79:26:b2:a9:43:87:c0:83:5c:b1:31:12:82:8c:
6b:fc:b6:21:d8:9c:93:c5:6b:a2:da:d3:cd:05:16:
97:e6:af:52:f9:de:41:b4:fc:d2:db:45:4e:d6:dc:
b0:52:ae:5a:fb:6c:63:58:69:f1:07:d0:21:93:b7:
1f:22:c0:48:89:1a:10:a6:6a:ba:7f:4f:07:df:da:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:80:25:63:FE:55:2C:CA:98:25:DF:A3:AF:B0:65:BE:B7:1D:AB:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb53055f-2c7e-3223-9e3f-8f8e8140dc1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.185.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:a0:e1:96:21:7f:90:fe:8f:c9:24:93:3e:14:4c:cd:05:46:
98:84:b3:18:db:25:6c:3e:92:47:2e:1d:2a:4d:86:fd:24:28:
af:18:35:80:dc:c2:ee:87:db:c8:5c:a8:20:28:05:09:da:b3:
ea:cf:12:e2:36:63:d4:83:d1:02:f7:81:9e:06:b6:9e:c1:d9:
bb:e3:c8:e7:77:0e:43:9d:53:d8:03:fb:b7:cd:c6:56:21:a5:
66:4f:ba:a7:04:ba:94:1d:17:a3:c5:ca:de:13:be:0a:ba:a5:
f3:28:9b:c0:59:a5:e7:cb:e4:59:2c:02:2d:43:6c:45:1d:3c:
03:37:bf:5c:9e:d1:93:2d:53:a2:d9:cc:af:a2:3e:9f:8a:08:
e2:77:6f:ea:c6:3c:e4:fe:d1:2f:7b:2c:da:f1:a5:f8:7e:8e:
f4:c9:ae:2a:66:d9:d4:88:07:24:d3:fe:88:60:5f:b4:67:c3:
eb:91:f5:69:3a:19:44:94:fc:13:d9:60:6f:61:ec:e7:2e:3d:
d4:fd:af:bf:66:de:6e:f7:d0:14:32:0f:71:eb:ea:9e:67:eb:
85:48:03:7d:70:8a:c3:4b:2e:21:5d:a9:36:19:c8:c3:1e:0f:
91:0e:a8:d4:90:15:f3:47:26:06:89:b5:f5:40:f7:53:e7:ea:
f8:02:66:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:07 2025 by rpki-client