Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ff166252-a51b-34bf-bc0e-3755c8706d21.roa
File: ff166252-a51b-34bf-bc0e-3755c8706d21.roa (raw, json)
Hash identifier: S241vGsqfFAQfO2TKJydzXeMCiTTm85hUDBKJHECa9o=
Subject key identifier: 03:EA:68:68:1B:1B:2F:2E:C7:D1:82:F2:29:8F:99:39:36:88:AF:53
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DA209131F3F040981215D1640
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ff166252-a51b-34bf-bc0e-3755c8706d21.roa
Signing time: Wed 20 Apr 2022 04:00:00 +0000
ROA not before: Wed 20 Apr 2022 04:00:00 +0000
ROA not after: Wed 25 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 146.65.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a2:09:13:1f:3f:04:09:81:21:5d:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 20 04:00:00 2022 GMT
Not After : May 25 04:00:00 2022 GMT
Subject: CN=5b889af7-0756-4bd0-b9c2-21def81a3b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:36:e7:7e:f7:d1:1a:77:10:e3:60:70:49:18:
85:98:0a:4b:57:11:81:e5:b5:75:93:1c:07:81:ae:
0b:0b:d5:0b:ad:b1:0a:50:aa:b4:b1:f3:22:cd:c0:
d6:a9:af:4c:b5:98:d0:03:d6:46:8f:ac:b8:0f:3f:
67:fa:a4:7d:0f:2b:37:20:77:ee:90:ea:1a:65:e6:
1b:ab:b0:2e:eb:97:0a:0a:78:5e:8a:b5:08:93:28:
27:88:3d:ec:d5:c1:26:48:ca:81:73:a5:e7:a2:36:
09:1e:2e:69:0f:94:7f:62:e4:df:77:da:d7:e5:ed:
7c:56:fb:bf:47:fa:93:cc:72:2a:f6:e4:b9:83:85:
d8:ba:5c:5a:07:13:ef:ad:fe:a4:03:60:f3:cb:b8:
d5:1b:14:2a:42:23:0c:aa:6c:bc:56:3b:7b:8e:1a:
93:7c:8f:e6:c4:45:f6:b1:94:01:da:66:73:6a:d2:
8a:4f:a3:1b:fc:5b:a9:40:86:85:3c:7d:4d:32:89:
e9:ab:32:b0:38:28:ac:65:58:5c:36:94:f8:d4:35:
ec:35:f8:ae:29:84:5d:90:62:b9:2a:43:52:67:26:
81:aa:75:a7:27:38:4e:65:50:85:c8:6c:5b:eb:eb:
aa:ee:7b:97:e8:a7:f9:63:2c:b9:8c:2c:9a:08:92:
68:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EA:68:68:1B:1B:2F:2E:C7:D1:82:F2:29:8F:99:39:36:88:AF:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ff166252-a51b-34bf-bc0e-3755c8706d21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.65.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:96:78:7a:47:cb:67:47:0b:74:18:1b:e0:61:13:a3:4c:d9:
96:b6:c6:f5:db:96:5c:ea:d9:17:b3:c6:cd:df:8d:45:cb:fa:
dd:2e:97:01:a0:ed:48:d6:29:b6:27:c8:0d:13:1b:29:4d:91:
fd:42:60:d6:94:b6:c6:50:c6:a4:d8:d8:70:66:5e:11:cd:12:
92:8d:3c:e1:b0:b4:81:4b:7f:20:98:9e:08:c8:d4:86:16:62:
16:23:94:33:ec:50:ae:2e:03:22:ac:53:5f:15:27:22:4c:39:
df:b4:a6:46:83:94:b5:c6:a6:4a:0e:47:7c:29:20:10:ca:f4:
cb:21:2c:07:8b:fc:83:21:83:97:2b:76:0f:40:dd:8f:cc:66:
69:7b:6b:a6:c3:49:12:90:f0:28:e1:3d:58:ce:df:20:72:8b:
d5:45:ef:2b:c8:05:59:fe:d9:b0:1b:eb:76:55:2e:7f:e0:b2:
1e:b0:40:d3:49:67:fe:7b:c7:6c:28:b2:7a:a8:c6:16:dc:9f:
71:84:50:e0:bd:32:c6:0e:ff:1c:5c:55:72:de:e4:40:9b:51:
19:64:36:f9:2a:91:2b:ea:d8:89:63:d3:db:85:a5:55:9d:32:
72:75:ce:3d:3a:b5:9e:95:21:f1:ca:75:26:0d:34:87:23:17:
d3:43:68:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:57:11 2025 by rpki-client