Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e4033c98-2c7b-346e-93c7-c8dcb040c778.roa
File: e4033c98-2c7b-346e-93c7-c8dcb040c778.roa (raw, json)
Hash identifier: 2rYJf6p/Elsd0+RyPaaX7mShYgpyXXuRWeLjLnDGn68=
Subject key identifier: A6:06:34:B9:4E:E1:F0:14:A2:96:C8:4E:DB:E7:E6:CB:8A:69:E2:09
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D6CEF8781CB42800B000A5D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e4033c98-2c7b-346e-93c7-c8dcb040c778.roa
Signing time: Fri 01 Apr 2022 04:00:00 +0000
ROA not before: Fri 01 Apr 2022 04:00:00 +0000
ROA not after: Fri 06 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 141.182.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:6c:ef:87:81:cb:42:80:0b:00:0a:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 1 04:00:00 2022 GMT
Not After : May 6 04:00:00 2022 GMT
Subject: CN=4515b157-24f9-4da9-9e8a-a1516f22a947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:72:ac:9a:80:ec:2b:b4:e1:f2:8a:11:13:
e5:4b:85:17:da:c5:4d:92:6d:d1:8c:6d:3c:86:39:
18:67:b8:48:0f:e2:f9:04:4c:9b:35:ac:9f:ef:79:
fa:7f:0c:a0:02:95:49:6e:6a:25:ba:4e:7d:92:09:
56:43:7c:14:16:aa:a5:e0:c4:09:45:1a:84:ac:81:
09:07:5b:e5:bd:f3:3e:2d:98:df:0e:4d:ad:79:7a:
2b:89:d8:c3:8d:79:f9:5b:c6:16:47:f9:0a:7a:5e:
c3:e3:dc:ad:96:87:85:cb:df:44:63:21:e8:95:4c:
1c:9b:f1:4f:9f:c1:c5:67:68:43:96:d4:33:92:42:
6e:a9:e4:40:ce:38:17:c6:4b:6f:99:c7:c5:2a:f9:
70:9d:c7:c6:1f:5b:06:7f:fb:c5:1e:6d:ac:d5:65:
bb:a8:9e:ea:be:1b:4a:c8:95:84:d6:0c:9f:ae:4a:
e8:86:f7:a9:05:6b:03:b5:42:6b:a2:90:48:f9:35:
e7:75:5a:18:c9:fe:85:e7:6c:d2:e9:be:c1:1c:cc:
87:ff:5e:97:14:ac:82:20:26:3d:a4:14:03:cb:a1:
84:7a:c3:94:5a:b0:b8:2b:b9:7e:a9:fd:b3:12:ff:
78:17:d0:cc:20:b4:ff:ca:de:7b:4a:57:bc:e5:6f:
64:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:06:34:B9:4E:E1:F0:14:A2:96:C8:4E:DB:E7:E6:CB:8A:69:E2:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e4033c98-2c7b-346e-93c7-c8dcb040c778.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.182.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:7a:64:97:b7:a0:35:cc:eb:66:17:6c:20:8e:d3:48:74:65:
e0:5b:e7:b9:47:b4:cf:a5:66:80:b0:b3:a9:c1:b4:76:d5:40:
39:8d:e2:88:5a:a9:7c:43:a3:15:cc:a1:cf:f5:46:86:ac:d1:
03:16:51:00:fc:b4:e0:57:36:48:87:a9:49:b5:62:b5:7c:7d:
5c:28:fd:91:3b:bb:3b:35:df:77:e4:15:9f:91:88:27:81:3b:
e8:56:3f:8d:a1:8a:af:38:c5:79:43:f4:da:a8:fd:6a:11:08:
fb:5d:5c:f0:e1:27:8d:42:7d:aa:0f:28:f2:ab:61:1f:c5:9e:
de:9d:d4:e0:25:ca:80:da:86:47:4f:eb:b2:84:19:5a:e2:47:
1c:33:02:48:4a:11:32:e0:c7:27:74:32:79:8a:31:2f:1c:88:
0e:2a:46:a5:d6:e6:de:a4:a5:57:a9:c7:25:72:dd:fc:6a:cb:
e0:9e:b8:46:28:6c:7e:ad:09:b4:83:6f:b7:23:8b:cd:37:61:
79:97:c2:7e:69:6e:c0:fa:36:67:67:43:c0:20:e6:8e:f3:8d:
dc:66:d7:b8:c3:55:9b:82:27:52:82:73:d8:08:0f:90:18:77:
02:75:4e:ff:15:18:f7:9a:f4:d0:35:6b:54:20:bd:1f:aa:b2:
5d:45:36:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:28:19 2025 by rpki-client