Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fbb0c819-162e-395d-a6e1-b4fe5d32e46d.roa
File: fbb0c819-162e-395d-a6e1-b4fe5d32e46d.roa (raw, json)
Hash identifier: 6cPPV+jMOdx678ax4Jk0mWmhRzvZSeQJpdgzTR9OkuM=
Subject key identifier: FA:DC:95:57:97:02:13:38:B5:CF:7A:22:7C:2E:70:64:B3:53:45:DE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3D9CC2A105E7633DF8389B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fbb0c819-162e-395d-a6e1-b4fe5d32e46d.roa
Signing time: Tue 13 Sep 2022 12:00:00 +0000
ROA not before: Tue 13 Sep 2022 12:00:00 +0000
ROA not after: Wed 19 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 158.141.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:3d:9c:c2:a1:05:e7:63:3d:f8:38:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 13 12:00:00 2022 GMT
Not After : Oct 19 04:00:00 2022 GMT
Subject: CN=f82ffaf4-37d0-4b0b-a992-f1ab575037a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4d:3d:14:95:f1:4c:5c:23:18:02:55:ad:28:
42:ac:ff:8c:d5:eb:50:b2:9d:a0:bd:fa:27:13:85:
fc:9c:4c:48:31:be:7d:72:55:9c:18:32:a0:bc:11:
df:16:16:f5:bd:8e:36:94:8b:25:b7:6a:aa:ec:7d:
c2:fc:87:48:4e:f9:5e:18:37:21:3c:a0:54:c2:9c:
e6:03:ae:fc:1c:17:a7:cb:b0:b4:a2:ec:b3:53:e3:
a2:ad:68:a3:11:43:a5:75:4b:00:ee:33:a1:c6:c3:
1a:8e:46:b9:d7:ae:39:50:fe:c9:9a:7a:80:08:ac:
be:5b:a5:95:43:72:9d:c2:82:d3:72:eb:dc:c6:50:
7a:a7:30:bc:f0:16:bf:3c:e2:eb:e9:02:12:f9:ae:
cb:ac:dc:84:c2:c8:05:0a:2d:7b:a9:4c:90:5f:1b:
7a:d4:3c:66:25:4a:c8:09:2a:3f:a7:d1:46:f2:2d:
5d:91:4e:6d:d7:dd:12:25:3c:c7:d0:a6:61:1c:39:
98:be:80:6e:5d:bf:ec:d1:be:b6:87:01:6e:db:18:
8e:dd:a8:18:b8:e6:4a:1b:63:74:30:09:9b:9b:2b:
93:94:aa:b1:9d:ba:2d:63:93:c8:dc:fe:96:3f:a8:
49:5f:31:fa:0a:f9:0f:f6:ba:c8:43:f6:77:93:df:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DC:95:57:97:02:13:38:B5:CF:7A:22:7C:2E:70:64:B3:53:45:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fbb0c819-162e-395d-a6e1-b4fe5d32e46d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
158.141.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:32:f8:25:10:d1:ea:be:52:1e:11:bc:eb:4f:4c:7c:a0:f3:
d3:14:e0:2a:f2:8b:96:e3:be:bc:62:c1:5f:b7:7a:ea:47:1f:
71:12:a9:aa:16:50:82:e0:39:a7:fd:57:5b:5a:e7:55:2f:5f:
0d:c7:38:2d:5f:35:a5:89:d9:f0:4c:d2:1f:ab:be:6b:7f:8c:
fb:bb:7a:cf:fd:ea:bd:f1:66:7f:1b:03:6f:28:c4:76:17:2f:
c7:48:23:4c:de:bd:2f:19:d6:ed:ff:73:9e:c8:d8:e0:c4:44:
6f:da:ef:8e:d8:f9:ff:02:cf:61:eb:cd:d6:ee:02:b4:3c:d4:
20:7e:da:bd:9f:34:fc:24:c4:49:0c:be:f3:95:4c:4d:05:03:
03:1a:c1:74:89:48:b1:77:9c:73:00:0f:79:e0:72:e1:f5:81:
22:33:bc:b9:99:32:fe:6e:7a:f4:9d:95:27:72:94:dc:b1:32:
fb:3a:28:07:50:bf:a2:b4:d6:87:23:f7:04:fc:ab:cd:d9:67:
0a:5e:5e:b0:ce:67:f8:24:6d:35:5c:e7:63:d5:33:09:6f:84:
ce:7e:09:83:5a:73:76:8f:d1:48:77:25:04:9a:38:be:ac:aa:
5d:be:e3:ca:bd:67:25:13:de:50:2e:44:40:59:34:8e:4f:07:
eb:11:30:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:22:58 2025 by rpki-client