Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0149debe-a0a1-396d-89cc-61fe12301e7a.roa
File: 0149debe-a0a1-396d-89cc-61fe12301e7a.roa (raw, json)
Hash identifier: JJP8OfJTMwPp0khRkZ9mdC2iFdw7aaJT3/NS/eV1luA=
Subject key identifier: B8:39:31:99:DD:5A:63:0C:C5:C2:E1:5C:6D:14:3F:41:5C:83:57:A1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F300FC6748313A5059ECB5880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0149debe-a0a1-396d-89cc-61fe12301e7a.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 137.114.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:30:0f:c6:74:83:13:a5:05:9e:cb:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=60e66e31-ef52-465e-b95d-9a29fb80732b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7c:50:cf:78:32:4f:47:6a:d9:01:a3:e5:e1:
3d:da:60:d0:4d:17:67:22:e6:1c:e3:32:df:49:69:
1d:5a:65:25:59:e9:40:d0:4f:d6:ba:ab:2b:a0:58:
ef:7c:98:54:aa:2a:1b:0c:cb:34:15:2a:82:2d:75:
b6:fd:f8:de:14:e2:d3:c7:e5:ab:80:e6:b6:37:95:
43:07:21:f6:22:c1:44:1e:98:55:f7:e7:ec:71:b6:
01:82:4f:1e:9f:50:da:23:0e:25:20:b0:9a:15:15:
f1:92:04:06:5f:b9:71:63:b3:93:fb:7c:21:f4:0d:
64:5b:7f:22:53:3b:6a:9a:d6:03:bd:c4:74:e7:a5:
b0:45:a1:75:f4:a2:5e:fc:a4:49:42:10:9b:c1:52:
c9:a5:5a:52:bd:11:91:23:d8:8f:59:3e:1d:fa:53:
64:e4:ad:ff:4d:cc:01:54:b4:9e:35:d6:ad:55:6e:
e9:f1:85:59:03:78:ab:da:c7:ee:e6:46:56:88:3e:
c4:30:9e:fc:85:f5:04:2d:b2:d3:3c:58:da:27:7b:
b6:da:08:db:f0:db:00:97:b3:28:3a:2d:12:2d:98:
9b:2b:7d:e6:1d:45:cd:82:da:d5:92:49:56:cd:ea:
6e:09:a9:6b:9d:cb:0a:f3:7b:a3:f6:db:04:4d:35:
10:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:39:31:99:DD:5A:63:0C:C5:C2:E1:5C:6D:14:3F:41:5C:83:57:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0149debe-a0a1-396d-89cc-61fe12301e7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
137.114.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:b2:5c:2c:17:5b:c8:3d:f4:7c:8d:b6:ae:0d:18:84:82:0e:
a4:c5:b2:34:04:98:d4:b6:99:6e:fe:f1:70:ff:e4:d1:46:60:
80:13:71:4d:29:dc:27:12:9d:2f:ee:34:c2:f1:ea:08:0d:bb:
c8:ff:d5:f3:96:ab:de:90:6a:3f:3c:fc:ac:d5:7c:a0:94:03:
d9:22:af:19:6e:4e:af:55:10:ec:f8:e8:4d:e9:f3:b9:c5:7b:
cf:72:a2:85:85:eb:45:11:f2:5d:f9:49:62:fa:e8:53:6b:70:
2e:7c:c6:8c:f3:8c:01:37:20:9e:af:f1:14:4a:6f:7b:f5:bb:
0d:7f:dd:76:b4:a9:cb:4d:39:e3:d2:43:ce:27:4a:f4:b4:e0:
b2:c3:26:dc:7d:66:c0:0c:34:c2:0b:36:5b:7a:aa:0b:e3:6d:
fb:25:0f:a3:59:5d:ab:9c:44:70:35:5a:e0:ed:8c:da:38:39:
39:2c:88:df:21:51:74:d0:f5:e6:b6:2a:28:6d:3a:43:66:93:
3a:4d:f3:90:84:1d:ca:95:8b:e2:7e:74:9c:a9:c6:9f:b4:aa:
93:47:83:5a:da:e5:b8:d2:77:40:3b:75:b7:61:41:04:73:ec:
50:28:c9:d4:4a:43:4f:37:a9:e4:48:84:62:e1:b9:ce:b1:87:
0d:60:6e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:12:28 2025 by rpki-client