Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d0d3b4bd-cbfa-3db4-aac8-32172af2c034.roa
File: d0d3b4bd-cbfa-3db4-aac8-32172af2c034.roa (raw, json)
Hash identifier: ZkN1XITWkdFjTjpgIFK5AlkoPY2gR/relnLoxgOzDdQ=
Subject key identifier: 1B:F4:5E:C1:47:3E:24:B6:71:E7:E9:B1:36:E6:9D:8F:E2:41:7D:65
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FB76E95382F132F8BE3031A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d0d3b4bd-cbfa-3db4-aac8-32172af2c034.roa
Signing time: Thu 27 Oct 2022 12:00:00 +0000
ROA not before: Thu 27 Oct 2022 12:00:00 +0000
ROA not after: Fri 02 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 141.181.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b7:6e:95:38:2f:13:2f:8b:e3:03:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 27 12:00:00 2022 GMT
Not After : Dec 2 05:00:00 2022 GMT
Subject: CN=97c23141-e31b-4a12-acea-1fcd765a8b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:62:11:c7:08:70:2e:62:68:1a:d3:92:3b:84:
3c:13:85:23:bc:92:16:ca:11:25:45:96:f5:08:c3:
21:9f:5c:3e:0a:7a:e2:4f:66:37:85:15:47:5c:d8:
79:1c:e6:41:6d:8f:6c:74:67:bd:16:a6:31:2d:1b:
f3:53:69:bf:5f:3c:22:3d:17:a7:2a:d7:cd:af:9d:
2e:82:10:cc:07:7b:2c:07:54:1f:29:af:45:70:37:
07:41:01:7e:b1:1c:0e:a5:2a:18:b2:72:a7:65:41:
54:ae:bc:ff:ea:3b:f8:71:5c:b2:01:24:41:ce:3d:
7f:dc:05:c8:d1:19:57:1d:e5:c2:3b:3a:f0:06:3f:
52:11:43:37:e1:a0:09:7a:ac:9b:0b:14:31:a0:4c:
48:3c:83:29:14:ad:da:80:36:03:7a:4e:d2:d6:70:
b6:0b:15:69:5f:e1:d2:85:5b:bd:5e:9a:91:f8:cb:
c5:f3:65:23:1d:bf:d2:1e:0d:26:aa:03:0f:03:2c:
44:5e:1f:f2:58:3d:3c:29:2c:42:20:18:65:ee:a1:
da:03:3f:ce:a9:2b:c5:5e:8f:62:c9:96:3f:76:c0:
c6:ed:b8:88:92:67:20:4e:bf:29:eb:25:90:e0:43:
d5:9c:71:a5:10:75:f2:b0:3a:81:ec:f4:5c:af:56:
c2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F4:5E:C1:47:3E:24:B6:71:E7:E9:B1:36:E6:9D:8F:E2:41:7D:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d0d3b4bd-cbfa-3db4-aac8-32172af2c034.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.181.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:2e:93:71:e1:68:d4:e6:6a:2d:48:41:c2:7a:6a:11:67:f8:
f7:c2:4d:82:29:ce:0a:a1:cf:a0:56:49:01:11:e9:77:3b:2f:
5a:73:47:ba:00:50:14:37:39:2b:77:87:de:7d:be:c1:b7:d0:
9e:41:28:4f:1c:fa:98:63:fc:a4:b1:e6:d1:0d:1b:53:bf:21:
4e:a2:96:f8:24:26:a9:65:36:13:b6:16:04:34:91:dd:53:78:
7d:2e:0c:5f:12:15:a7:9e:9b:dd:79:6c:ec:cf:fc:40:40:b6:
24:3f:c1:a4:1b:58:6d:24:a4:f2:9d:7c:d7:12:4f:0a:aa:21:
2a:c3:a0:24:8f:a4:ab:f9:fb:db:df:14:db:3e:d4:9d:82:27:
ee:9a:03:d2:68:f8:59:9c:3b:4e:a5:00:14:e1:2c:9f:d9:65:
b2:a6:7b:cb:52:b5:56:06:4d:62:66:53:f9:e6:db:89:69:23:
9b:07:67:3a:21:5c:02:14:c9:d9:40:d7:8e:2b:71:2c:7e:22:
1a:27:0e:3b:ea:6d:df:18:42:e8:c8:16:38:21:4f:95:45:2d:
31:17:dc:11:94:96:a0:c2:9d:c7:fc:d5:fd:20:a9:9c:89:4a:
49:47:e9:36:1e:2f:d8:34:dd:83:30:d9:a4:6f:20:7f:98:db:
10:fc:7c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:21:29 2025 by rpki-client