Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/068cb035-a3a7-3f0e-bd1c-1c27f50ffeb0.roa
File: 068cb035-a3a7-3f0e-bd1c-1c27f50ffeb0.roa (raw, json)
Hash identifier: EA1dggvm/63C9xnNhYBs2YMjn7dr/KBSes/OnKRcpjE=
Subject key identifier: 01:73:D5:CC:D3:74:44:33:25:B5:CD:BD:B6:BA:48:AC:5F:1A:47:AE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406B8E52104EC3D0176CE571C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/068cb035-a3a7-3f0e-bd1c-1c27f50ffeb0.roa
Signing time: Fri 30 Dec 2022 12:00:00 +0000
ROA not before: Fri 30 Dec 2022 12:00:00 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 156.7.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6b:8e:52:10:4e:c3:d0:17:6c:e5:71:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 12:00:00 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=fbb5e87e-127e-4e60-a1ba-fa9af426e551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:db:c6:ed:0b:30:81:90:9c:c3:cd:91:f6:
6c:6b:f4:94:3c:b1:43:45:70:1f:ae:d7:d3:68:c0:
a0:f3:c6:bf:cc:2b:ea:f5:b9:0a:9e:bd:fa:59:35:
a6:bd:51:91:94:d5:06:4e:3f:01:47:02:df:08:f8:
25:78:12:24:71:fd:cf:09:6e:cf:a4:80:4b:56:ae:
09:84:71:05:09:87:2b:e3:2c:06:c8:3d:ba:fb:17:
fa:1e:d4:8c:98:2f:db:86:23:51:44:ad:c6:a0:0e:
91:d1:22:07:b0:74:34:4e:d8:36:23:e7:54:11:e7:
5f:2c:82:b3:d2:48:1d:36:c4:cf:51:5a:d5:a2:2e:
06:7f:fc:b9:9a:47:4d:d3:39:5f:93:fe:48:b1:76:
9c:ea:78:39:2a:c0:9f:f0:97:b7:af:f5:d6:63:ce:
0e:ee:5c:a9:fd:34:6a:75:d1:ac:8f:1b:c0:fe:08:
1f:c8:50:c2:38:43:99:9a:eb:f2:76:49:c3:0b:eb:
94:d3:53:9e:4d:50:2a:7f:d8:52:cc:11:12:4b:ab:
0c:11:a4:cf:08:32:1d:21:db:34:68:f7:e1:b3:48:
1e:9f:49:46:3c:8b:13:b9:f6:23:9d:21:a5:ad:7a:
58:95:d7:28:84:45:ce:e9:82:51:42:76:ab:ed:12:
ea:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:73:D5:CC:D3:74:44:33:25:B5:CD:BD:B6:BA:48:AC:5F:1A:47:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/068cb035-a3a7-3f0e-bd1c-1c27f50ffeb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
156.7.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:28:86:f7:a5:fc:5e:bc:a8:86:7b:04:1f:93:3e:19:66:9e:
1b:08:e8:e9:1a:7f:e3:84:97:7b:0d:44:16:7e:4b:95:df:b3:
54:fa:86:8b:27:64:e0:8c:83:66:31:a0:91:53:40:21:2e:59:
45:6d:ad:8d:f3:43:a6:9a:b0:84:20:d6:09:c0:78:19:8e:29:
db:33:59:23:63:5d:0d:47:ea:35:7b:c9:2b:97:51:43:22:2c:
4c:de:80:a4:64:34:66:d6:cb:91:bf:71:11:a5:4a:d6:11:8e:
3e:4c:f8:ec:3b:67:46:e9:d3:a5:57:38:c4:99:e1:47:46:f6:
3d:c6:26:56:41:ea:74:5f:c8:8a:22:32:9b:04:43:4a:8b:45:
45:f8:f1:0e:55:32:0c:12:71:0f:36:9c:03:2f:15:ae:ca:e6:
42:29:88:d8:6b:a0:53:12:b1:f4:ff:b6:1f:ed:b3:9f:66:1e:
14:5e:6d:f1:a2:ab:a1:01:55:61:af:f2:8d:4b:a5:d7:97:11:
e6:fa:96:64:0b:5b:56:53:6f:87:88:ef:30:cd:24:99:0f:e3:
4e:ed:43:d6:3c:16:80:d7:c6:24:32:a2:df:a5:c6:1a:c7:ed:
2f:3b:51:33:59:a5:dd:ee:6f:f7:0a:33:c5:c5:ab:9b:b2:10:
63:ff:13:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:21:56 2025 by rpki-client