Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d1ce9b52-7c12-3a82-94a7-aaa0a8eebd04.roa
File: d1ce9b52-7c12-3a82-94a7-aaa0a8eebd04.roa (raw, json)
Hash identifier: WPnnWhzKjsm3g+wPYDFz8idU8jAWOb8y2g4rE+uWQTU=
Subject key identifier: FE:DD:76:71:91:AB:3D:BC:04:8A:D0:AF:0C:8F:84:60:BB:48:5F:81
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6FE7F53568E51E074E571800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d1ce9b52-7c12-3a82-94a7-aaa0a8eebd04.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 206.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:e7:f5:35:68:e5:1e:07:4e:57:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=71b072be-8446-4638-a066-a0df9fa67975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:78:b6:a8:13:87:07:d6:73:34:09:19:eb:05:
7e:56:e2:44:5d:6f:8a:d3:96:5a:90:33:94:99:95:
db:c0:8b:a8:f2:51:b1:1a:5f:36:ee:e4:ab:fc:35:
dd:69:a2:9b:91:5d:ed:b3:6c:53:dd:d8:b6:c3:69:
55:7e:2d:08:71:39:e2:20:4f:a3:48:c1:cf:03:74:
72:96:c9:84:ec:a1:58:f8:44:75:24:71:75:25:fc:
d9:6b:ce:f5:3e:43:e9:70:7c:58:a8:46:a2:a7:2a:
7f:2f:32:7e:6f:c4:ad:91:a0:6f:f4:7d:66:99:ea:
fc:9b:96:5a:26:ce:77:40:45:2a:b2:e1:5e:fb:7d:
d5:d3:bd:e2:c6:4b:ec:05:ec:56:e5:71:39:f5:b9:
9a:66:89:29:56:7b:ec:2d:e4:b0:54:f1:6f:9f:7c:
71:69:f6:22:a5:2b:1e:93:d6:2b:0d:58:c1:2a:6b:
4a:27:91:3f:87:99:e5:8b:dd:a8:59:c0:e5:3a:9f:
af:de:7e:42:82:22:96:95:40:f7:67:22:86:d0:07:
cf:a0:3c:20:97:33:04:24:fd:2c:7c:cb:39:a5:76:
f7:23:ed:60:16:e3:19:84:91:46:7d:c5:c3:1d:70:
f1:e2:1d:ae:ee:7d:4f:3f:3c:ce:7b:7f:6d:ec:d4:
60:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DD:76:71:91:AB:3D:BC:04:8A:D0:AF:0C:8F:84:60:BB:48:5F:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d1ce9b52-7c12-3a82-94a7-aaa0a8eebd04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
206.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:8b:14:fc:7d:3c:bd:d2:98:5f:b5:95:c3:b1:4b:90:57:1e:
03:36:1e:0b:31:27:54:4d:59:fb:30:c6:8e:dc:f4:fa:77:82:
fa:1b:25:58:3a:07:ef:4f:aa:c1:fd:c3:aa:44:c3:c6:69:66:
a6:7e:d2:76:73:8c:64:28:c4:1d:0a:2b:ca:4f:dc:a1:62:b0:
35:b6:f3:67:d9:7e:fe:8c:ed:7f:b8:9f:f8:ce:73:7c:cf:38:
58:37:44:15:04:8d:53:6a:f9:76:bf:bf:68:14:65:0a:dd:16:
98:55:41:9d:38:54:8c:d7:1f:8b:b5:ac:c6:29:b6:50:ea:bc:
fd:8e:ea:32:31:96:0b:83:50:fd:1c:28:78:64:60:fd:89:47:
fb:a3:14:0c:bb:7e:e9:ab:17:ba:1f:8b:91:79:55:ef:31:06:
90:6a:91:27:c6:2b:f6:75:40:4f:1f:c8:67:d7:16:e2:18:c9:
76:4e:96:e0:f0:a6:3e:82:6a:d2:6e:b6:f8:ac:ea:ce:4e:95:
8e:58:2f:2d:aa:a7:7c:a3:48:53:dd:1f:4a:80:53:d5:9a:26:
89:11:eb:02:e3:8d:f6:0b:0c:1a:d6:35:47:7a:fe:5f:ac:ea:
f7:8f:90:ed:7b:4a:b1:e9:58:ac:12:b5:0b:b4:8d:7f:09:7e:
78:80:4c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:16 2025 by rpki-client