Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d43ad2e1-7639-37e9-a95d-a843e30f5bca.roa
File: d43ad2e1-7639-37e9-a95d-a843e30f5bca.roa (raw, json)
Hash identifier: +b8hD6uw9hxzUtI7VucOQ1etlmjjtVhJPZQyaxfESME=
Subject key identifier: 47:30:62:0E:9C:EC:F2:7A:E0:80:79:09:B5:87:4F:1D:4C:9B:86:AC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0C7A678E3940AF10BE617E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d43ad2e1-7639-37e9-a95d-a843e30f5bca.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 146.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0c:7a:67:8e:39:40:af:10:be:61:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=c6518848-366a-45c6-bddf-1757bf446c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:c6:9c:05:74:21:34:24:cc:5e:52:2c:76:
e3:8f:52:0c:a8:06:c7:4d:19:4c:67:0f:f1:f0:8f:
35:e5:8c:7b:b0:00:af:da:77:7b:a4:6f:87:5f:f8:
66:fd:37:be:8d:36:0a:20:6a:ad:39:fb:e2:ef:64:
21:ff:d5:36:d2:29:53:8c:2a:82:10:67:ce:1b:19:
f2:3b:4f:ce:35:5a:76:83:a5:6d:09:89:86:92:09:
f1:98:2b:d8:82:c0:9f:8d:8a:9c:07:e1:51:dd:ae:
fe:41:25:be:04:25:24:48:b2:97:2c:eb:f5:4a:e7:
46:4e:56:fe:6f:89:a0:36:30:54:58:ca:eb:da:02:
77:16:d1:e1:6a:12:9b:7b:bc:e6:3f:3d:6e:d4:70:
d4:73:25:d6:f7:87:e0:63:e3:41:5e:fc:91:a9:7c:
ef:56:65:e8:6b:44:a8:07:fb:60:a4:6e:54:73:9f:
de:db:00:f4:86:c4:30:cf:22:29:6f:75:97:d9:f2:
f6:52:99:b0:ac:d7:31:e0:7d:7d:30:bf:be:93:54:
d7:ea:0a:1f:36:70:2c:cc:ed:f3:27:0f:d1:63:4f:
84:8a:8a:4d:41:ff:32:99:24:e3:40:81:06:73:74:
fc:40:bb:9d:b9:11:ae:77:5a:0e:4d:15:f7:bb:29:
3f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:30:62:0E:9C:EC:F2:7A:E0:80:79:09:B5:87:4F:1D:4C:9B:86:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d43ad2e1-7639-37e9-a95d-a843e30f5bca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:17:9b:35:e3:bd:d8:94:37:66:fc:76:06:c6:05:cf:4f:5d:
9b:c9:58:36:0f:d6:e9:52:23:56:e2:04:d6:af:5a:81:8e:70:
b9:ef:5c:aa:c1:6d:b0:48:92:37:2a:38:23:ab:7f:62:20:9a:
6b:84:10:94:6f:77:f9:5d:34:33:c7:9b:0f:f5:70:ae:fd:4c:
2f:90:a1:44:cb:aa:8c:6e:a0:e0:05:54:6d:ec:22:d0:1f:52:
83:e3:b7:58:33:0b:c5:72:0b:46:ef:d6:1e:cd:b7:33:6b:5d:
52:0b:53:17:52:11:f8:1c:19:e5:a5:bf:47:1b:ac:6c:64:b9:
f7:44:5f:45:99:39:ed:d9:83:20:ad:2b:88:2c:9c:01:a7:3f:
a3:64:8e:fe:c9:a2:7a:fc:a2:75:0d:6a:87:c9:7c:5f:d1:bc:
7c:0b:ef:82:8c:59:39:08:c5:ce:7a:c5:7e:be:4a:76:55:d8:
f3:bf:a3:30:a3:69:81:aa:e2:c3:5b:53:2d:ab:d0:4f:fd:5e:
80:13:76:f2:0a:35:77:f5:f5:bc:de:8c:28:7d:a6:9d:39:78:
b3:05:fa:ca:ef:42:a7:7f:98:f0:98:bd:0d:97:d0:27:2e:8b:
2c:2b:f5:79:4f:86:6e:f5:46:6b:71:52:61:5e:5e:41:2e:14:
f3:0a:50:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:29:15 2025 by rpki-client