Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fe37a401-6a1e-384a-bf19-9ca6ccf25e68.roa
File: fe37a401-6a1e-384a-bf19-9ca6ccf25e68.roa (raw, json)
Hash identifier: +IqV7vcAheCWpb1eBWx5iI1BcMufpXWN0IswC7SESJo=
Subject key identifier: F9:F2:94:8C:A9:AB:18:DC:98:E3:8C:50:45:28:90:B6:8A:8E:EE:03
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B9E660AABB6BC9D838057AC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fe37a401-6a1e-384a-bf19-9ca6ccf25e68.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 169.205.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b9:e6:60:aa:bb:6b:c9:d8:38:05:7a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=75b0512d-43cb-48d3-aeb4-8a0cc6d4e958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5b:ec:fa:65:20:22:b3:96:cb:ec:f6:4b:57:
61:b4:a8:9a:b2:25:59:60:a8:7c:b3:55:79:4b:60:
75:54:99:3f:b5:a9:82:46:c7:84:29:d1:55:eb:34:
ff:ff:d9:df:b6:64:ce:3e:9f:c3:1a:0e:52:be:70:
0a:63:3f:c6:fe:3c:e7:16:d4:10:e5:f7:d7:e7:7c:
37:d2:9c:7a:0a:be:91:a6:e6:f6:6f:f5:f4:ba:a8:
da:b7:bd:93:11:2e:1d:aa:d4:2a:43:03:33:af:b2:
7f:26:c5:92:c6:73:81:db:d7:77:58:4c:17:ef:70:
3b:69:d1:4e:ab:5f:be:07:b5:c8:56:61:e9:ce:6f:
08:16:f4:cd:e4:ac:29:9d:3c:e2:e8:c2:18:8d:73:
a7:6e:a1:30:2f:b8:1c:91:fa:de:d6:d0:2c:0d:9a:
24:08:7b:f3:1f:9e:bb:24:97:91:a5:59:bf:41:fb:
1e:49:fe:ee:b1:d6:ac:be:f2:6a:7c:4d:79:4a:5b:
62:d4:96:29:a1:bb:6f:24:cb:04:1a:2f:0f:fa:e5:
f0:8c:55:04:a9:09:d4:b4:01:8e:4a:f0:09:f9:77:
03:c9:c2:4c:64:13:b0:74:36:2b:7b:29:16:94:75:
32:58:22:c3:f8:45:94:16:bc:23:01:14:fc:73:f7:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F2:94:8C:A9:AB:18:DC:98:E3:8C:50:45:28:90:B6:8A:8E:EE:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fe37a401-6a1e-384a-bf19-9ca6ccf25e68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
169.205.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:42:ab:b0:a2:2a:7f:56:59:1d:8f:da:4a:3e:31:a1:50:49:
1d:7c:82:15:db:72:49:4e:ec:e7:fa:76:45:26:02:4d:d9:5e:
62:93:9b:33:6c:48:27:02:6c:f0:f7:e2:f4:4e:8e:e7:da:cf:
97:d0:67:f7:0e:b3:c5:fa:90:42:d0:17:81:85:eb:b3:60:14:
ed:61:f3:a3:db:04:0e:7e:62:61:02:a6:cd:b4:f9:2b:86:18:
85:98:42:10:f3:7b:d5:07:b2:ed:5e:5e:8a:8c:7c:07:b0:e2:
4c:c0:57:a8:85:b6:12:1e:22:5d:25:06:06:1f:42:53:ce:6a:
f7:f7:6c:26:53:5f:aa:db:08:3f:59:29:c3:93:4c:82:56:c2:
9c:5c:16:eb:17:e5:c4:a8:93:89:4f:aa:04:6c:08:ca:fe:f8:
06:6d:7b:a0:e3:75:29:9d:74:48:b9:4a:c5:8b:8f:b2:90:d8:
39:20:24:91:44:0d:eb:88:87:b5:e2:4d:09:79:40:d0:fd:e5:
19:c6:12:4f:55:d0:0b:7f:08:db:05:99:da:d8:7b:6b:9b:66:
fb:bd:8e:3c:5c:5b:aa:fd:47:d2:4d:ae:b9:dc:bf:8a:06:5b:
1a:10:e9:c8:13:6e:8c:be:f4:0d:4a:87:24:d2:b8:d2:52:1f:
92:ae:79:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:20:07 2025 by rpki-client