Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/09e70ef4-f4c8-3e75-8c35-f7810a1d1440.roa
File: 09e70ef4-f4c8-3e75-8c35-f7810a1d1440.roa (raw, json)
Hash identifier: /qScndzHGCwrmQJj3i4otMEUbdBxQa1Jia7I6wGo8Qs=
Subject key identifier: 7C:99:FE:E8:8F:FE:8A:3D:8D:10:E5:16:41:28:43:32:BC:66:87:A7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F9305EE88A6EFCDF6F6CE9480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/09e70ef4-f4c8-3e75-8c35-f7810a1d1440.roa
Signing time: Fri 14 Oct 2022 12:00:00 +0000
ROA not before: Fri 14 Oct 2022 12:00:00 +0000
ROA not after: Sat 19 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 151.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:93:05:ee:88:a6:ef:cd:f6:f6:ce:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 14 12:00:00 2022 GMT
Not After : Nov 19 05:00:00 2022 GMT
Subject: CN=5ec2c67a-87fb-43fe-8595-51ef404ce3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:6e:8d:54:5b:86:18:5f:ba:b4:3e:3c:25:
e8:4f:6e:f6:8f:05:29:7a:74:1a:d4:8f:be:59:11:
9c:38:bb:17:62:15:81:4d:bf:7f:cf:87:3f:01:28:
89:be:6a:57:76:9d:fa:d4:32:49:5c:ed:5b:dd:d6:
55:65:6d:1a:fc:3f:66:d9:83:64:a0:cf:7b:77:77:
f0:81:76:6b:28:69:f3:12:69:da:d9:97:1a:90:30:
5f:fb:72:0d:0f:71:5f:97:37:27:5a:70:45:ab:73:
01:cf:bc:52:f7:21:9b:45:c9:b1:20:2b:65:f0:c2:
29:ae:f9:f7:7a:8f:3d:86:2c:11:55:38:66:a6:76:
cc:0a:8a:7a:03:2c:86:b2:aa:46:08:ca:1a:ad:40:
a7:cc:46:74:bf:b9:dc:b8:35:73:f5:c0:a9:bf:b1:
5b:39:96:ca:a1:0e:96:bb:6b:8c:b3:ef:9d:49:67:
22:fd:8b:3c:f8:3c:cd:12:59:f3:0a:d3:93:98:f8:
19:03:04:e4:42:63:e1:9f:e6:13:a4:ba:f1:eb:c8:
0f:99:3c:6c:76:66:f7:f1:cb:1b:28:01:7b:c8:c2:
a4:00:fe:8d:0f:7c:8d:70:62:68:fb:e3:ea:62:f2:
bb:03:a3:31:86:16:8d:6f:8f:5e:9f:77:2c:18:97:
79:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:99:FE:E8:8F:FE:8A:3D:8D:10:E5:16:41:28:43:32:BC:66:87:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/09e70ef4-f4c8-3e75-8c35-f7810a1d1440.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
151.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:40:49:29:58:22:18:70:f5:26:99:b2:c9:15:29:6c:75:a9:
17:f8:d0:d7:78:6e:f3:aa:7f:94:fd:29:51:ea:10:b8:a7:25:
fe:69:88:dd:2a:06:ea:44:12:40:d0:8a:14:4d:e5:0f:ef:6f:
d1:74:a4:b9:46:c7:e1:9d:25:f1:c9:e1:eb:85:2e:ca:9c:7c:
bb:24:ed:e1:8a:85:a9:64:b8:ec:ab:88:2e:72:1a:69:99:86:
7e:5c:c0:f0:85:d5:04:f8:3f:72:1a:51:ae:66:93:a8:78:27:
85:15:0f:d4:17:01:40:43:b5:e3:19:70:68:7a:13:03:59:e2:
9c:fa:8b:7e:d8:a3:97:68:87:5d:29:a1:a8:b0:78:3d:50:7c:
0b:c5:7d:84:0e:a2:2e:72:03:71:ae:75:0c:1f:67:fb:96:d6:
08:42:5d:c5:a7:05:3f:29:57:6c:f9:a4:a0:91:22:18:11:a2:
9e:3b:1e:f3:1b:a8:f6:ea:a9:fc:6b:45:ad:26:cc:5a:86:38:
e1:2b:04:38:ab:28:da:6c:47:80:c4:e3:86:ee:83:da:f0:31:
ba:c3:06:9f:d2:b3:6d:be:91:77:8c:47:6f:1e:5e:50:d0:33:
f0:96:5e:16:1f:4d:51:d4:cc:f1:ce:f5:ac:14:d7:b5:b1:ff:
1b:14:80:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:51 2025 by rpki-client