Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d01b2c85-ba28-3a91-9eb1-6c6b48a81583.roa
File: d01b2c85-ba28-3a91-9eb1-6c6b48a81583.roa (raw, json)
Hash identifier: TI6UgLtnLuHR972uKrAGtgvTc0QvA+cNEES+RvrFGnA=
Subject key identifier: CE:58:BE:8D:65:87:E0:60:F8:D7:7C:64:8E:6A:59:E8:C9:36:8F:2A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D45D290DF9634B1B701C15A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d01b2c85-ba28-3a91-9eb1-6c6b48a81583.roa
Signing time: Fri 18 Mar 2022 04:00:00 +0000
ROA not before: Fri 18 Mar 2022 04:00:00 +0000
ROA not after: Fri 22 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 141.185.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:45:d2:90:df:96:34:b1:b7:01:c1:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 18 04:00:00 2022 GMT
Not After : Apr 22 04:00:00 2022 GMT
Subject: CN=c11e6554-c588-44ab-857e-a650c95c5a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:49:8f:e6:bf:e5:dd:e5:8a:5b:ce:a9:c9:8b:
53:32:81:35:8b:f5:1a:1b:d0:9e:32:8b:f1:ab:60:
57:33:cc:b6:c7:e0:c5:04:5d:77:7b:59:33:06:bf:
0f:9b:b3:06:12:54:9d:d8:5d:48:41:e1:ae:2a:25:
7e:34:88:d7:f2:37:90:a9:6c:87:d8:b6:a7:e7:95:
fa:fd:ea:cd:13:a9:2b:f6:a2:08:8b:bb:10:46:6d:
04:ba:31:20:18:ce:ba:c3:12:6d:7a:6b:4d:b7:0f:
62:34:e6:38:bb:69:13:31:d5:dd:fe:65:5c:db:ec:
f7:e0:4a:08:ad:b4:e5:45:1d:2b:39:1f:68:51:61:
00:b5:ce:d5:1b:cf:f0:60:24:3c:ff:8b:6d:6d:1d:
db:4e:d2:a3:88:18:91:0e:7d:c1:13:72:77:23:39:
53:88:74:b1:d4:be:46:4f:ac:5d:f1:14:d5:65:9c:
22:bb:c2:a9:70:2f:b8:4c:d5:93:b6:68:9e:fa:82:
ae:3f:f1:e8:ed:61:c2:09:ae:ce:7a:52:b9:7e:4e:
d8:9b:6c:60:3d:b8:54:da:62:0d:f7:93:f8:97:09:
60:84:26:5d:da:32:8c:d0:71:5c:fc:18:d6:12:d4:
b5:e0:0a:9d:15:39:7e:6d:58:e5:ce:af:46:96:86:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:58:BE:8D:65:87:E0:60:F8:D7:7C:64:8E:6A:59:E8:C9:36:8F:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d01b2c85-ba28-3a91-9eb1-6c6b48a81583.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.185.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:7f:54:6f:26:a6:dd:df:79:6e:52:f1:1c:f8:6c:dd:0b:8e:
be:f5:24:70:b8:66:1d:d9:45:1f:66:fe:31:de:58:26:2c:e5:
76:16:7e:a2:8f:a9:55:78:08:13:d7:c5:91:b9:2c:a0:57:1a:
01:92:35:f7:be:f8:63:44:74:ac:42:ea:47:c8:59:64:eb:68:
fa:b4:27:47:f6:ab:81:7d:ee:91:a5:42:fc:a5:aa:b3:0e:e5:
38:71:ce:02:f6:a0:b4:45:b9:df:43:63:70:64:b9:72:5c:4b:
76:c5:f2:0f:3b:b4:84:62:0b:70:22:bc:d4:56:4f:08:48:9d:
fa:9c:14:72:85:23:a1:2b:68:34:35:9d:41:a1:46:bc:36:08:
bd:df:e9:39:72:9d:8b:d4:5e:86:c1:19:b5:d8:b7:e5:13:a9:
3f:b4:72:06:b2:c2:45:bc:b2:e4:09:fa:4e:e5:b8:ec:04:43:
4f:ae:f9:04:8c:e8:4c:17:0d:58:18:be:bc:8f:0b:7c:cc:be:
c7:9a:d9:aa:59:93:d8:ee:c9:fe:e6:ff:fd:13:42:ab:c8:49:
6f:f2:e4:00:49:fd:5f:63:64:cc:ea:a8:6a:33:3c:3c:9b:96:
40:20:30:98:fc:ee:cc:56:04:24:5e:b9:06:7d:80:30:61:fd:
a0:39:d0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:17:25 2025 by rpki-client