Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cfd98592-6b13-3234-b963-96aa96c81ae5.roa
File: cfd98592-6b13-3234-b963-96aa96c81ae5.roa (raw, json)
Hash identifier: w0G6ijTYp8x9s2FZrPEqHrTWRMZq04mbjkgzGVB3kR0=
Subject key identifier: 66:14:78:7E:4F:8B:63:70:B7:F5:18:B8:06:65:DF:CD:5C:21:D2:EC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1FA25DA6964BD7EEBF650A90
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cfd98592-6b13-3234-b963-96aa96c81ae5.roa
Signing time: Fri 03 Jun 2022 12:00:00 +0000
ROA not before: Fri 03 Jun 2022 12:00:00 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 168.163.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1f:a2:5d:a6:96:4b:d7:ee:bf:65:0a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 3 12:00:00 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=ee7b6175-11ee-4b66-844c-e7e3dd5311e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:b4:97:41:d7:fc:8e:7e:b7:74:db:4b:7f:
21:e4:ca:42:ee:d5:b6:47:b4:75:42:c4:3b:1e:23:
72:64:64:7e:5e:1e:95:0f:26:d0:1e:62:8b:a4:09:
18:a5:a3:96:97:82:67:5e:1f:c5:cc:44:bc:be:b5:
82:d0:58:30:21:10:fb:99:5c:09:12:b8:ed:0b:f4:
1a:95:95:0a:df:3d:58:2e:ef:c3:6f:09:7b:27:34:
14:bb:64:2b:e1:a0:52:2a:56:b3:df:eb:66:c5:0a:
f3:83:a0:47:e5:66:f3:29:bb:20:08:d5:7b:89:5a:
42:d8:dd:10:8a:eb:c9:80:05:b4:56:53:30:f4:c8:
a1:b8:a1:66:a2:5a:5e:31:08:15:f9:a4:dd:4d:9e:
da:9b:e7:76:93:93:b2:db:85:01:df:f2:be:da:31:
83:92:87:f2:64:0d:4d:ef:f7:bc:9d:fa:c4:1e:f5:
dd:2c:e8:fc:4f:50:f1:e5:de:cf:a3:8e:81:a7:d2:
a0:38:f8:92:b3:cc:93:06:ca:97:fe:2e:f1:73:c1:
8d:5e:5b:b3:da:2e:42:95:c7:29:83:78:df:3f:6f:
f7:8f:ad:82:7f:5c:22:79:f7:69:52:33:43:2e:5a:
67:9d:16:45:b5:64:11:a9:c8:71:ed:f0:7f:1f:36:
fa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:14:78:7E:4F:8B:63:70:B7:F5:18:B8:06:65:DF:CD:5C:21:D2:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cfd98592-6b13-3234-b963-96aa96c81ae5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
168.163.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:98:72:12:9d:84:61:27:2c:61:26:92:b2:ac:a5:0c:8a:87:
1b:1c:20:fc:26:c4:94:77:c0:da:2e:64:cc:c5:b4:85:b1:f5:
a7:c0:d2:35:fe:e9:9b:6c:55:a0:4b:7d:91:01:99:bb:28:78:
22:59:6c:26:de:5a:ff:b8:9c:58:25:22:ff:48:70:c2:51:e2:
e7:47:6f:c4:cd:74:40:65:40:45:11:ee:52:14:3b:c1:58:86:
a4:a8:ec:74:f4:fd:3a:e3:fe:37:02:fd:f3:07:4c:f4:f0:59:
9e:3c:b1:2e:dc:6c:6c:b7:ee:b3:a8:72:23:1d:15:06:8b:64:
6b:5d:d9:ad:11:4d:0d:18:f5:a5:73:cc:b1:ce:7a:0c:f7:f8:
da:10:a0:a1:9e:ec:3b:07:8a:a0:f1:2e:85:71:54:54:77:b3:
d2:0a:a9:87:61:c8:63:3f:25:80:ab:21:de:a2:7f:24:b2:07:
ab:21:93:f6:7c:58:89:a7:03:21:a7:7a:75:03:56:aa:5d:24:
f1:a4:c4:40:f5:4d:60:94:c4:61:a1:36:45:ad:f2:62:f5:93:
f2:c5:1d:01:a4:0f:d6:ab:f9:e1:10:4f:6d:62:3c:4b:90:45:
ff:17:b9:f2:e2:f3:40:89:e8:f0:49:11:79:3e:01:91:ae:68:
93:9c:53:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:44 2025 by rpki-client