Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db132c23-17d1-3c74-831c-2795f921c35a.roa
File: db132c23-17d1-3c74-831c-2795f921c35a.roa (raw, json)
Hash identifier: 9ve5fri5YtuUbU5DmavIde0F3bPrwj/DPfx909xZ1U0=
Subject key identifier: CB:95:64:09:C2:43:C8:BB:E3:9D:A0:5E:36:E5:F8:2B:A6:53:A6:A7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F58CDC24C6A394AA12C65A168
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db132c23-17d1-3c74-831c-2795f921c35a.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 167.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:58:cd:c2:4c:6a:39:4a:a1:2c:65:a1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=a78e95ae-57ee-4d29-8fe7-12cf80f926fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c3:44:6d:ff:d1:14:34:94:a2:20:b4:8e:65:
ec:80:c9:16:9d:bc:5c:f5:5b:90:0f:8e:7d:63:e7:
6c:22:ff:09:be:92:84:7b:4f:aa:50:b7:e4:f3:df:
7c:3c:02:41:eb:8a:5a:8e:73:01:35:02:37:71:96:
b8:5e:69:6b:81:34:1b:f6:c9:37:54:62:f1:e4:e5:
61:6c:48:3b:82:1b:d8:dd:43:10:da:73:95:25:36:
69:e2:9e:c7:69:78:6e:cb:1d:5f:95:af:44:a7:7d:
13:f9:65:72:11:5a:49:30:3b:52:61:78:6d:08:3a:
22:78:a6:6b:78:8f:62:69:81:f7:04:44:f6:64:cc:
84:2b:7e:6d:a2:24:92:d3:79:2f:76:a8:d7:8e:e3:
30:8f:8d:78:3a:da:ed:bc:12:73:c0:fd:ab:df:42:
30:25:32:30:c0:25:24:f0:df:01:ef:7b:c9:ec:49:
0c:4a:f0:64:0b:8e:59:04:e5:f1:97:bf:1c:86:35:
07:31:0e:08:94:d3:2f:be:8c:09:f2:ac:19:30:d1:
f1:a9:65:ef:42:34:e7:63:08:49:a2:c4:ed:de:03:
97:1c:f8:90:b6:c4:4c:48:bc:95:06:c6:0c:ff:10:
57:bb:9e:ea:05:ff:d6:70:58:6b:06:84:54:25:56:
1e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:95:64:09:C2:43:C8:BB:E3:9D:A0:5E:36:E5:F8:2B:A6:53:A6:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db132c23-17d1-3c74-831c-2795f921c35a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
167.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:09:e9:e7:3e:e9:9f:76:f4:58:96:e8:41:5e:d2:45:a8:8c:
26:e8:90:a1:30:d3:b8:79:cc:80:65:aa:27:5b:e8:e2:dd:c3:
a5:f6:fe:01:04:06:ab:c5:07:91:5f:c9:f3:06:1c:7e:9d:11:
b4:13:24:54:69:a3:ee:65:a9:d4:01:4e:3f:b8:ae:c6:0e:2f:
ad:c4:c4:a7:29:6e:b7:89:65:11:b5:d9:1f:00:88:f0:4b:31:
18:09:8a:df:e4:c6:3a:4f:7c:51:d9:f6:ec:a9:3a:e0:04:e7:
72:fb:71:b8:c8:77:5a:bb:1f:f7:a2:81:2b:47:16:dd:c9:22:
f8:77:17:0b:a7:fe:ef:90:30:a4:4e:02:19:d3:c7:30:87:e9:
45:a7:4b:82:a3:b5:9e:c0:26:ab:93:f6:12:4d:2f:c3:46:c2:
c0:c5:49:5d:fa:2b:2e:58:e9:b9:1c:60:a4:a6:38:63:d0:27:
75:f6:e0:8b:dd:1c:ee:31:e4:be:0d:b9:b5:60:0e:1d:0b:ad:
58:09:af:12:35:a4:c6:25:a1:02:98:49:23:cb:7b:69:d8:64:
9b:9a:bf:82:99:c5:a7:7e:9f:d8:e8:24:0c:48:20:27:8a:3a:
8c:30:f9:58:3d:43:37:a2:fb:4e:44:45:cb:a3:c7:f8:71:82:
02:75:2c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:27:21 2025 by rpki-client