Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9bfe462-4d62-3b04-bdb5-7d300b6cf505.roa
File: f9bfe462-4d62-3b04-bdb5-7d300b6cf505.roa (raw, json)
Hash identifier: UHRIzVEeP7QdadP5UAHnRq77mYIKzpZIMYx3vwwQVuo=
Subject key identifier: CE:7F:BE:ED:56:FD:13:A4:E5:A5:29:65:39:77:38:43:82:50:D9:2F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E46A94087F36E61AB7AB718F0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9bfe462-4d62-3b04-bdb5-7d300b6cf505.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 169.205.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:46:a9:40:87:f3:6e:61:ab:7a:b7:18:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=60a259f0-5747-4a63-b902-3993834e1f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:47:c1:44:b6:8b:51:a9:ad:78:e6:9c:b9:98:
a4:ce:7d:66:0d:0a:a2:fe:4f:e3:4c:69:9f:94:d7:
19:ec:b1:bd:ba:38:dd:70:a1:32:59:93:5c:d6:38:
bd:c4:60:0e:64:6e:cc:9f:fd:71:03:b7:c3:2b:e0:
d2:7b:13:a4:f5:4e:ed:de:a2:fe:10:86:1d:10:0d:
74:bd:55:b1:98:5c:d7:74:26:bd:78:94:6d:6e:a4:
ca:47:6a:35:33:b9:e9:f0:e1:8d:7e:55:d1:09:61:
81:f1:d0:c5:85:cf:48:f1:cd:eb:26:a3:ad:82:28:
64:33:a1:2c:b2:26:5a:f8:4a:a6:f0:b0:b4:b6:8a:
14:10:4d:88:b9:3a:46:ca:83:6d:ae:3d:2b:0d:dd:
05:67:a7:92:71:da:68:0b:04:7a:7c:38:80:50:e9:
a6:34:cb:88:da:2d:0b:98:79:47:a7:ce:cd:3c:f9:
01:80:76:b0:9d:bd:5e:6c:27:92:1c:6e:fe:93:5b:
3e:b9:e2:fd:40:79:39:8b:2f:8c:44:fb:6c:45:e3:
7b:ff:21:0a:77:94:2b:1a:18:79:d4:26:ef:9f:b9:
80:31:bb:7f:c4:53:8d:89:bd:e8:04:85:64:ed:03:
5b:64:6b:46:be:1f:6e:bc:f8:15:09:70:5b:eb:3c:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7F:BE:ED:56:FD:13:A4:E5:A5:29:65:39:77:38:43:82:50:D9:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9bfe462-4d62-3b04-bdb5-7d300b6cf505.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
169.205.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:3b:c1:ab:2c:af:4a:c7:d2:76:3e:76:4f:c5:aa:fb:ca:f9:
1d:ac:85:4d:e6:cc:f2:6b:6a:5b:65:2f:27:b1:93:43:62:bf:
93:5a:3f:6e:56:34:6f:94:8a:fe:1b:46:89:a8:e7:b3:d9:c9:
73:30:72:7e:be:48:6e:92:c4:6e:fa:5a:4c:60:35:62:d5:f0:
00:a5:50:30:7e:74:26:9a:75:52:0b:ac:61:f2:4c:48:b8:3c:
d5:57:03:c4:86:29:f1:de:12:45:71:a3:be:9c:9c:6f:78:1c:
e4:40:3c:2d:cf:f7:ba:f1:01:50:4d:39:1f:26:6e:2a:b1:ac:
b4:03:a2:6e:aa:f4:e9:d6:a0:1f:4b:28:31:82:7b:97:85:fe:
be:c6:f6:53:7b:56:68:71:17:18:f3:58:d5:6e:a6:25:5b:02:
fa:e7:6a:6f:3b:fd:78:bf:ae:af:ab:ab:bd:9d:4b:44:32:1e:
fb:b9:59:6e:7d:35:53:87:d2:42:2e:c4:5b:1f:e9:21:18:4f:
92:f4:1b:4f:05:f5:b7:65:71:ed:5a:e4:b8:33:45:a8:49:68:
c8:4d:0f:64:3a:a3:48:d9:5e:7b:41:50:7b:a0:a5:3b:a9:f6:
94:17:f6:70:d6:dc:7b:4e:81:87:b2:8b:42:ec:3c:72:7f:80:
19:a6:92:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:14:40 2025 by rpki-client