Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f42401d0-7293-3a0e-8679-8348186c8a8a.roa
File: f42401d0-7293-3a0e-8679-8348186c8a8a.roa (raw, json)
Hash identifier: H8lc/bxegw5U7JWh43JDc8YPqw7pBf1m+n3YXYplIPU=
Subject key identifier: 1C:39:28:1F:5C:A2:75:FC:56:95:7B:5C:42:63:49:2A:06:AF:AA:5A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584044D9984EB2C5C59908B05180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f42401d0-7293-3a0e-8679-8348186c8a8a.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 170.58.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:44:d9:98:4e:b2:c5:c5:99:08:b0:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=c0c5cedb-1a10-47be-9811-a61ed04598a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3d:37:6c:14:f2:f6:22:0b:da:fa:b1:bd:1e:
7a:c0:fb:c3:ef:c6:0a:8e:05:6b:8a:1d:fe:9e:4e:
82:ab:ce:4b:e2:c4:89:53:9b:0d:cd:f5:53:47:52:
d7:92:fb:52:51:da:e3:1e:ed:13:e9:b5:98:72:16:
3c:81:27:75:cc:c6:f5:33:31:4b:21:b0:de:25:56:
e1:7c:e4:5c:8e:d7:84:45:3f:20:06:0c:e7:52:f3:
72:4a:8b:64:b3:82:ee:47:15:eb:af:2e:cf:a0:9f:
78:a2:54:c9:78:cd:42:0f:22:d0:ce:d1:cd:c0:b5:
35:71:8b:24:b8:20:ba:d0:68:55:20:66:1c:ed:c9:
35:3a:f2:03:cf:3c:0c:7c:8f:c7:50:a2:26:f1:a3:
e8:b6:a1:b3:55:0f:e8:75:51:60:52:78:d3:ea:a8:
4e:9e:25:06:c1:d7:73:db:94:83:a0:dc:c5:2a:29:
95:cf:a7:b2:df:7e:04:1d:65:60:4f:42:94:c0:9b:
93:3f:ff:91:f1:a0:37:4b:e3:15:e3:e9:8b:12:e9:
35:c1:21:79:8a:b3:01:bb:57:db:9c:fb:8c:b2:3e:
68:04:0f:6b:a2:49:c6:1a:4f:82:aa:9a:8b:c4:94:
45:14:c3:06:13:18:ea:4e:58:40:96:65:ae:da:03:
9b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:39:28:1F:5C:A2:75:FC:56:95:7B:5C:42:63:49:2A:06:AF:AA:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f42401d0-7293-3a0e-8679-8348186c8a8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
170.58.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:02:4f:49:24:e8:72:95:4e:56:7e:2d:21:63:fa:a7:29:95:
84:3d:6c:51:11:68:07:96:96:92:ba:99:29:00:ae:22:22:52:
61:10:fc:0a:bf:d6:e1:13:c8:7c:41:fd:22:87:f7:32:f3:fb:
76:53:b2:a7:ff:ec:e7:12:99:34:d2:d6:fd:6f:ce:9d:f6:a9:
00:ad:44:13:08:ee:17:18:13:0a:de:68:82:fb:6f:f9:a3:16:
cb:90:1e:b0:17:98:b7:19:c4:0a:79:a2:1a:00:01:a4:1b:d8:
0d:41:82:6e:e1:64:97:92:71:44:2e:69:6b:33:70:42:6c:cc:
64:07:df:7a:d4:50:de:35:5d:23:63:ca:3f:a2:75:0a:2d:69:
0c:cf:91:e4:eb:78:21:8f:55:97:1f:77:3c:ca:72:67:76:5f:
18:fc:80:d3:69:27:d6:9b:0a:a9:18:e6:59:0b:cd:32:cb:11:
5d:98:53:44:b4:bc:59:d9:32:ae:c9:03:a4:30:e6:6c:08:b0:
2c:6b:35:6a:41:d1:a2:af:25:52:8b:6c:2a:14:b1:a5:a0:95:
a1:29:c6:2e:b5:be:81:4a:2d:d6:db:2d:8f:44:2d:a1:a7:07:
08:05:17:2d:b8:98:19:93:67:2e:67:0f:cc:28:25:ce:fa:c4:
9b:be:98:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:27:31 2025 by rpki-client