Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b9d0e6d-1a14-3156-a952-88432bb46fb1.roa
File: 0b9d0e6d-1a14-3156-a952-88432bb46fb1.roa (raw, json)
Hash identifier: C7qYhAlrb5KB/q+fhDWKCQEhVb3oPem9g1bj0fK795w=
Subject key identifier: 30:C9:EC:1F:09:55:93:6D:9B:2B:A6:00:08:AD:9E:1A:C7:D8:DE:7A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CAB8CB5B825D237BBD88A0880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b9d0e6d-1a14-3156-a952-88432bb46fb1.roa
Signing time: Fri 21 Jan 2022 05:00:00 +0000
ROA not before: Fri 21 Jan 2022 05:00:00 +0000
ROA not after: Fri 25 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 159.209.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ab:8c:b5:b8:25:d2:37:bb:d8:8a:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 21 05:00:00 2022 GMT
Not After : Feb 25 05:00:00 2022 GMT
Subject: CN=c6e1b541-afe2-41ba-8319-fa773044b389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b8:ad:f1:b0:b6:87:e2:23:ee:ee:46:1e:94:
9f:a0:e3:04:e3:52:17:f8:a0:21:d2:65:66:25:ad:
2b:84:bc:fe:88:1c:c8:0c:c0:6e:fe:ba:c4:85:43:
27:71:dd:bc:a0:0e:53:8c:b4:aa:d4:ff:e6:2d:6c:
6f:c7:b9:8a:21:1f:cc:64:8a:bf:1a:90:87:9d:e7:
0c:2e:0d:85:00:e9:e9:a9:d7:87:ee:ce:61:09:8c:
cf:31:76:4d:49:95:2b:b3:6a:64:8d:17:77:67:f6:
22:02:39:f8:48:c9:cb:40:c5:0b:d8:0e:59:dc:40:
9f:a4:d4:d0:93:d4:8b:d6:6f:25:85:4b:fd:c5:3e:
2f:bc:45:e2:c1:a8:95:97:b7:4c:24:89:5e:36:2a:
5c:4f:ef:01:28:47:0a:62:7b:28:65:6a:61:c1:72:
f6:f2:34:c7:94:d4:ec:af:ee:94:92:e7:e8:71:d9:
9b:94:fe:cb:09:a0:82:e5:bf:5c:45:4e:82:1a:c3:
68:7b:65:67:88:34:22:40:33:71:46:da:8f:ba:76:
bf:f5:69:6a:1a:f3:78:02:9b:a9:7e:05:85:be:8c:
52:01:c2:0b:90:34:21:e4:70:19:a3:3e:af:dc:e6:
d0:1f:c9:ac:10:bf:2b:75:d5:46:5d:3e:e1:e6:5e:
64:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C9:EC:1F:09:55:93:6D:9B:2B:A6:00:08:AD:9E:1A:C7:D8:DE:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b9d0e6d-1a14-3156-a952-88432bb46fb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
159.209.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:ab:33:d2:be:fe:43:cb:b0:72:d3:3c:55:52:f7:3d:34:ba:
a2:62:7e:76:e6:5d:68:41:1f:c1:26:d5:0c:07:e9:f6:d5:6e:
ea:44:9f:c6:55:f0:bd:33:4c:87:c0:6a:d9:d5:23:28:13:4d:
14:83:24:92:d2:9b:4e:77:22:e2:a3:0a:4b:9f:ed:3c:8f:da:
a5:22:d6:f4:a5:f6:22:08:c7:c3:3b:80:ec:1d:11:d3:0f:3b:
ce:1c:94:7c:d5:a0:64:96:9e:34:60:d2:2e:9f:d5:16:6d:66:
f4:4d:55:0c:fe:15:31:bf:47:d4:c0:f1:2b:bb:9d:63:20:84:
f7:9a:9a:1c:71:2e:4f:8d:7f:15:67:c7:e4:51:86:d8:58:6e:
44:9e:1b:27:dd:61:d2:1e:5b:38:6d:e8:09:5f:59:1a:68:d8:
2a:49:7f:75:35:10:0b:58:90:86:59:be:35:d8:1a:65:d9:d4:
b4:c1:25:28:dd:5b:73:67:e9:df:c9:2b:d5:eb:11:48:5f:b5:
ef:14:ce:ee:8d:3e:b4:59:bd:12:74:14:e8:73:bb:65:01:2f:
f1:55:42:c3:7a:f8:79:fd:ac:73:b4:75:47:8e:1d:08:7a:8f:
0f:4f:23:d6:cd:b5:a3:66:41:76:28:fc:79:b2:18:61:cd:79:
c6:fd:97:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:57 2025 by rpki-client