Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07502bd0-3bfe-34c4-9e0f-308cee193100.roa
File: 07502bd0-3bfe-34c4-9e0f-308cee193100.roa (raw, json)
Hash identifier: CIiw3C4SI1GSBKD9qtmyivSgalKawA5tZjPPMEvkv1g=
Subject key identifier: 8D:36:69:02:4C:4D:EA:8F:A3:40:B3:17:0A:B2:17:17:C9:F7:E1:5A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCF21B90854AB6B69F2860D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07502bd0-3bfe-34c4-9e0f-308cee193100.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 156.7.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cf:21:b9:08:54:ab:6b:69:f2:86:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=9c6269ec-f719-42a8-b427-0eb6cfbd55ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:26:18:fe:7c:65:dc:bb:13:ef:25:7b:29:
64:ac:43:06:a0:d7:75:52:6b:3b:cd:35:36:94:e9:
a2:63:c2:25:98:9e:12:1d:ed:9e:f6:c6:9d:57:af:
21:db:f8:55:c6:77:9e:89:f4:a5:20:e8:95:c3:ca:
d9:13:25:db:4e:71:6d:b3:75:94:34:d9:20:1a:66:
b0:ab:57:e5:1a:4f:00:89:c6:85:87:54:cb:5a:ac:
22:f7:d8:84:fd:8d:24:8e:fe:0d:68:35:09:1d:58:
29:84:34:d6:e3:b0:4d:ef:6d:2d:70:88:ce:75:66:
c6:a7:a7:ee:69:ea:52:fb:31:3e:be:00:33:00:a9:
a9:72:d2:1f:cf:74:fd:45:44:90:0d:c3:f7:c5:5b:
75:6c:21:a4:f6:2a:31:cf:bf:c3:48:4d:b8:3c:07:
1c:06:dd:dd:ce:f0:fe:04:c6:67:99:fa:08:0a:6b:
96:3b:24:e0:ce:4c:1c:b5:98:77:25:84:d5:ba:cc:
b6:53:44:c4:b8:1c:d7:00:22:26:2c:6f:21:f4:0d:
fa:40:12:2e:c8:80:27:46:99:cc:e4:de:23:0e:de:
dd:1c:70:37:36:f4:29:0c:91:2e:3a:59:c6:da:ad:
d2:0d:46:62:2f:b2:c2:6c:ee:67:38:08:72:e5:11:
30:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:36:69:02:4C:4D:EA:8F:A3:40:B3:17:0A:B2:17:17:C9:F7:E1:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07502bd0-3bfe-34c4-9e0f-308cee193100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
156.7.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:e7:b4:b9:26:a5:91:4a:48:c7:89:85:53:2a:2d:21:ff:df:
18:8e:c1:97:f9:87:bb:10:34:34:55:7a:79:28:5e:aa:70:cd:
c1:b7:c3:be:39:7d:cb:47:ad:9a:0d:24:93:5b:c1:a7:8f:3c:
f2:fb:4f:4a:50:80:0e:50:46:83:21:af:69:72:62:4b:61:39:
c5:07:62:5f:95:a2:46:1e:22:14:88:55:7d:62:d6:eb:1c:09:
78:c8:0e:37:cd:3d:ea:e3:62:d3:fb:16:a1:36:19:11:5a:e5:
ba:dc:25:da:04:94:25:1c:11:fd:82:dc:e1:aa:6c:bf:5c:db:
ec:9b:b6:58:5b:bb:26:57:8a:e5:10:60:db:4c:52:8e:e7:aa:
3f:04:a8:f4:2d:d0:a5:72:28:ec:4a:37:4f:1a:f6:e4:67:bc:
b4:8c:92:07:a2:12:d7:af:2e:03:c3:32:d9:cb:81:d9:df:4f:
b2:5f:09:d8:92:ee:13:bb:0d:3d:92:e4:a3:a6:49:9d:f7:91:
cd:c0:4d:09:15:68:d0:fb:5f:6b:da:5d:a6:20:77:57:e7:a6:
4c:79:74:27:74:03:6e:ed:ff:d6:87:4e:84:a7:1b:4b:ac:97:
f4:ba:73:5c:9c:81:1b:95:92:55:46:92:cc:3f:78:45:1b:04:
16:25:a1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:45:30 2025 by rpki-client