Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c37eb16d-36e5-3651-b144-4f53915b8fa1.roa
File: c37eb16d-36e5-3651-b144-4f53915b8fa1.roa (raw, json)
Hash identifier: uM7HvRaY79v9acwxcuMHwOiugjKOF5nHQOfetd2Syh8=
Subject key identifier: 84:09:35:13:4F:DF:7B:1E:7B:8E:25:BE:EB:E2:8E:16:95:1D:96:C0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840402B373D74311ED4057E4D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c37eb16d-36e5-3651-b144-4f53915b8fa1.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 165.94.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:40:2b:37:3d:74:31:1e:d4:05:7e:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=d47fd245-4457-4f42-b0e8-1e585f259385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:16:e5:a5:31:33:80:f5:cd:a3:ca:64:1e:
77:31:91:d5:38:4a:2e:b0:37:7e:80:d6:30:4a:73:
fc:ee:16:06:35:3d:4c:a7:a8:e4:94:36:07:e5:e4:
b7:b9:ae:4d:4c:09:e5:36:91:58:4d:bc:14:55:22:
7e:36:37:88:5b:a6:e0:4b:6d:08:4b:d3:a8:cb:e1:
3b:e0:7e:5b:e4:cd:6f:cf:e2:c2:22:a4:e6:36:a6:
ef:3f:d4:10:0a:bb:16:6b:0c:52:38:59:1f:29:a2:
94:77:9b:53:c6:1a:02:14:53:8c:40:4a:ff:50:99:
b4:83:17:e5:76:a8:4f:d4:91:33:e3:80:65:ee:27:
45:86:1d:9c:99:a1:72:0d:4e:23:cb:d4:e5:7a:c8:
3e:df:e8:74:a2:84:8e:86:c0:14:57:b9:6e:6e:50:
17:81:c0:90:9c:24:0f:03:6b:0b:bd:c0:7f:e7:db:
d7:71:9a:4e:be:18:3f:cb:41:ba:e3:5b:4d:57:67:
97:a2:a3:20:a4:61:35:af:5b:65:d2:89:ad:73:58:
db:ad:8c:a5:80:94:e2:bd:d1:26:16:f3:3d:8d:e2:
f9:cd:51:ee:cb:23:94:06:51:e6:45:aa:9f:93:e7:
3d:f3:67:59:7b:09:b3:a1:12:b1:b8:d1:70:4b:86:
df:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:09:35:13:4F:DF:7B:1E:7B:8E:25:BE:EB:E2:8E:16:95:1D:96:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c37eb16d-36e5-3651-b144-4f53915b8fa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.94.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:2a:61:50:5f:f3:63:92:48:a5:47:76:ba:2d:de:f8:ce:b8:
2f:67:fa:e6:13:99:d2:61:9b:a6:bf:8a:b5:e9:8f:c3:59:43:
7b:96:46:82:64:a0:37:d4:af:a9:36:fb:1a:8a:50:23:1d:c1:
74:7c:1f:d3:8f:55:09:5d:f1:70:46:b0:92:43:44:ef:57:b4:
b1:8c:51:2a:1c:e0:d2:48:94:ed:aa:66:53:89:62:5a:92:31:
10:db:69:74:d2:40:f8:ec:31:01:e9:7c:8d:8c:54:be:00:8b:
27:61:7a:29:ac:59:2e:56:ab:74:a7:cd:91:80:39:05:dd:dc:
80:f4:c3:bd:1d:08:9d:ec:0f:55:bd:f2:8d:da:cf:5e:4b:1b:
f2:1d:19:ad:0c:78:3f:4d:24:30:7c:13:41:38:d4:45:c5:35:
1f:17:d0:23:93:b8:6e:58:61:03:1d:c4:bb:c6:30:a4:d5:da:
a4:23:9b:3e:59:0a:cc:a0:1a:57:50:b7:17:51:b9:35:89:ba:
91:d2:8d:e9:ef:04:57:86:36:bb:d6:3e:e9:39:36:7d:32:ad:
36:1a:b0:0a:07:1e:4d:5e:b2:bc:c6:d9:bd:bf:7d:c5:a6:f0:
e7:fe:df:04:d5:96:46:27:fb:98:13:a0:13:ec:43:2e:39:d4:
29:98:a9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:40:15 2025 by rpki-client