Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce946ab1-3423-3aee-8651-b1d36a04ba4d.roa
File: ce946ab1-3423-3aee-8651-b1d36a04ba4d.roa (raw, json)
Hash identifier: 7vqCe6088pAH8Xu7ZmV1H/79BWEtBn2jqQN8lkFMI2E=
Subject key identifier: A9:FB:AA:10:68:53:07:D6:DD:43:62:7F:F8:1A:04:F7:EC:30:31:22
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C824185FD1C63EE9919E91C40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce946ab1-3423-3aee-8651-b1d36a04ba4d.roa
Signing time: Fri 07 Jan 2022 05:00:00 +0000
ROA not before: Fri 07 Jan 2022 05:00:00 +0000
ROA not after: Fri 11 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 141.185.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:82:41:85:fd:1c:63:ee:99:19:e9:1c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 7 05:00:00 2022 GMT
Not After : Feb 11 05:00:00 2022 GMT
Subject: CN=0d876370-bdf3-4531-a4b1-826144925bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:20:74:1d:8d:ba:a3:9d:75:cb:90:e2:f5:
0e:60:94:00:81:ec:1e:a7:22:f5:e5:79:c7:c1:7a:
0c:7d:1b:a5:09:ea:0a:53:0a:8f:32:67:47:a2:f7:
42:4c:04:d2:12:5e:a3:39:bd:5a:72:36:02:70:0f:
1d:58:e9:db:7a:2b:b4:9c:79:a0:43:58:74:9c:12:
ac:c1:ab:cc:26:e3:ea:5c:35:a3:57:79:aa:57:42:
81:bc:da:ce:be:b1:e9:f1:de:f8:57:9b:6e:eb:93:
fc:45:06:bc:2e:c7:b2:ae:67:03:ed:0a:92:15:00:
fa:77:81:cb:c7:48:c1:5b:87:ba:8f:58:c2:c9:3d:
e6:c7:a5:55:0e:c4:21:1e:52:ca:50:06:ec:3d:8a:
0e:54:48:c1:c7:48:bc:bf:2b:7c:07:7b:1e:48:b4:
ee:87:2c:4a:40:2d:81:b1:1e:6b:21:c2:46:b5:2e:
77:28:e2:ca:5d:50:57:00:28:eb:30:04:30:b5:9a:
a3:2a:4f:65:36:fb:05:9e:bc:95:98:9a:c5:b3:09:
9a:c1:af:22:52:b1:9f:d2:78:14:c9:46:5e:62:7e:
98:91:58:46:96:90:ab:73:08:a0:5e:6c:9e:d9:f5:
f4:aa:24:87:aa:bb:8d:56:0d:67:30:22:8a:99:eb:
f8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FB:AA:10:68:53:07:D6:DD:43:62:7F:F8:1A:04:F7:EC:30:31:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce946ab1-3423-3aee-8651-b1d36a04ba4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.185.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:d1:5c:32:32:38:b3:30:27:24:65:87:28:ac:62:b7:0b:d7:
b2:80:8e:b1:22:73:89:5d:81:c8:7f:ba:79:7d:40:d2:87:2b:
26:fb:97:33:2f:14:6b:8a:d0:fc:1f:e0:93:c2:ab:92:15:04:
c9:84:24:43:a4:bc:83:bb:c4:b0:54:f4:e9:14:ce:55:9b:0d:
49:d7:2d:24:a2:19:46:4e:f0:c0:44:f7:2e:05:02:95:36:58:
df:2a:a1:f5:60:e2:c1:e2:c9:51:14:8b:92:6a:0c:89:68:55:
b7:e9:0e:f4:c7:bd:9d:df:5d:cf:af:84:9a:a3:4e:a7:e6:2e:
02:d0:02:04:e9:c8:a7:20:70:1e:26:ac:f7:43:f7:97:67:85:
58:fa:36:c1:81:05:fd:80:8a:8f:ee:ef:ff:f2:3f:b1:3b:40:
62:a0:b8:eb:e5:bc:97:e3:b4:46:41:57:3b:2e:31:bf:a4:e3:
bf:55:6c:92:89:fc:23:6d:c1:88:94:cb:94:3a:11:50:36:a6:
a3:eb:b8:f7:e7:f8:dd:67:da:cd:43:df:3f:c7:04:e1:dd:4b:
05:13:94:98:ab:ae:74:6c:a7:62:88:bc:34:60:be:aa:5d:78:
00:90:9e:fa:83:e8:d1:b0:87:45:1a:cc:49:de:3e:2c:f1:a8:
cb:2c:03:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:23 2025 by rpki-client