Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07dfa1c7-9493-3e8f-9e6f-93a6b8972d6d.roa
File: 07dfa1c7-9493-3e8f-9e6f-93a6b8972d6d.roa (raw, json)
Hash identifier: Tn5jPkZ4QG/wJQx+2UvxIMSUR3EGiBeHR5TfzSRQ09Y=
Subject key identifier: E6:51:03:DE:96:F8:10:77:E8:B0:5F:9F:BA:D8:4D:B8:F3:CE:C4:DF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE484FD13AD5B5E9612ABD100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07dfa1c7-9493-3e8f-9e6f-93a6b8972d6d.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 47.255.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:84:fd:13:ad:5b:5e:96:12:ab:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=6561e232-22d9-4f58-993e-db943fbad75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:98:8a:bf:4e:b4:d3:d3:bb:b0:1a:97:78:4d:
3f:03:13:71:61:02:bf:38:cd:19:14:56:85:1b:a6:
ef:83:8b:e1:b3:9e:08:be:22:d6:39:e8:7b:85:3a:
a2:c2:a6:7b:c6:c7:15:65:94:e4:e7:0e:8f:53:ad:
59:e3:8c:af:b6:2e:57:5a:7b:49:45:72:23:19:52:
e9:a8:5f:ca:fb:51:a9:a1:58:43:35:0d:0e:12:09:
c0:26:f8:22:3b:0c:bf:4b:ec:fd:e4:15:39:29:0d:
9b:02:ff:98:7f:47:8d:c3:3e:b0:09:2f:1d:66:49:
e0:10:7a:b0:15:86:ae:21:90:28:89:94:d5:62:59:
72:aa:c8:a5:39:ca:9a:6f:b6:08:e0:e2:8e:68:76:
7a:5c:45:e6:00:f6:b6:af:3b:85:7a:96:5e:a8:87:
3f:60:66:d3:f0:ca:27:71:18:01:87:a5:a6:7b:0b:
bd:f7:9e:57:25:8d:44:e8:8d:20:6b:00:ed:4f:d0:
dd:80:b0:aa:a4:a8:2f:5d:33:35:6f:10:a6:f9:7c:
bb:c9:3e:7f:38:5c:47:eb:00:87:0b:db:c9:60:af:
c9:94:89:86:eb:03:d6:c7:4a:33:60:c3:8e:83:01:
3e:7e:5e:c6:8c:d4:84:16:6f:01:aa:e3:03:aa:db:
c3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:51:03:DE:96:F8:10:77:E8:B0:5F:9F:BA:D8:4D:B8:F3:CE:C4:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07dfa1c7-9493-3e8f-9e6f-93a6b8972d6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
47.255.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:d9:29:ce:bc:15:6b:7a:1f:97:e4:7d:34:31:8a:28:38:71:
7f:b8:c3:c4:42:0d:c6:7d:86:d7:6a:7b:76:28:60:a8:41:13:
d1:0d:fe:07:b4:fe:94:51:2d:2d:d5:61:f6:c6:80:47:d7:40:
95:05:40:7b:be:0c:61:6c:09:9c:f4:95:24:80:1a:27:8d:bd:
ea:44:b5:bb:31:58:48:5f:a2:dd:ab:83:7e:47:0a:2b:f3:6e:
5c:60:f0:30:a8:ef:49:f3:bd:a3:52:d7:ce:72:e9:41:ce:4f:
4f:32:dd:92:f8:b2:83:3e:14:fd:56:e1:88:bb:d8:6e:2c:aa:
58:09:ed:68:d6:85:8d:ac:ea:a6:90:17:53:c1:0e:00:1f:8c:
96:bc:cc:0e:c5:ff:ba:fb:e4:e9:f3:b1:a5:58:d7:d6:e2:96:
d2:b3:30:a5:47:aa:41:c5:98:6b:25:87:72:68:51:31:cb:a1:
69:5d:18:59:e9:2b:1d:1e:a9:b3:5c:93:34:03:42:83:85:db:
18:57:96:77:e1:35:e1:0a:d2:ec:e0:95:72:ff:12:26:70:4a:
b5:64:9e:18:52:07:70:48:a5:ed:5d:8e:2c:50:6d:fe:b4:71:
40:7a:c9:43:70:2e:d7:6a:e4:ff:81:e5:de:28:97:2d:4a:27:
5c:a4:c1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:15:19 2025 by rpki-client