Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fc2a093-694e-35f6-8da8-f9e643eb27a2.roa
File: 0fc2a093-694e-35f6-8da8-f9e643eb27a2.roa (raw, json)
Hash identifier: z3TqTHHnD6iKufA3WnWMEzWW7HdI/Tmrn2TnohLo4d8=
Subject key identifier: 45:EE:6B:F5:90:66:5C:0C:34:04:85:06:2A:EE:11:68:E5:4C:61:6A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F306916C8AE5D2269E7455180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fc2a093-694e-35f6-8da8-f9e643eb27a2.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 144.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:30:69:16:c8:ae:5d:22:69:e7:45:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=5987c545-ab90-4217-929d-ffb0d59f77c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:c3:83:73:e7:0f:50:97:a9:5c:83:1a:82:
a9:a4:5f:57:2a:f9:ea:3c:40:3f:d2:58:30:32:91:
ec:b2:d9:5a:7a:09:b8:02:c6:1b:59:67:d2:a1:33:
f5:4f:c2:04:b5:39:25:b4:9b:7b:f8:e3:5f:31:4d:
05:81:8f:b3:6e:87:ff:b5:c9:91:f6:aa:f6:95:bd:
a9:a5:2b:7a:8c:42:80:59:bd:bf:fc:6d:bc:bb:13:
17:e2:ee:c0:d3:32:a4:56:f5:39:5f:d9:ce:e5:ab:
63:cc:b7:f7:e1:f7:22:f1:52:9c:5b:80:68:c3:1e:
a4:86:67:2a:c4:0c:40:e1:a2:43:2f:f4:4b:4c:cc:
03:00:3a:7a:f4:c8:ec:1f:50:98:41:2e:d1:23:b7:
8e:fa:cf:be:9f:15:eb:b4:a7:3b:72:bd:74:44:f0:
22:27:1f:c5:b0:a8:83:d8:a5:26:be:71:16:b9:d2:
ea:1e:e6:f6:f7:15:18:42:53:6c:7f:fa:3c:cb:b0:
33:61:6f:a4:f5:cb:2b:a0:85:9a:29:f5:1f:4b:92:
94:f3:fb:68:7e:aa:4b:0b:0a:b6:ce:7e:8b:d2:7f:
f3:b5:ad:bd:c5:fb:0e:e2:ac:42:b0:98:1e:ea:b6:
11:98:ed:bd:48:88:94:5a:ea:68:11:e0:07:49:e9:
66:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EE:6B:F5:90:66:5C:0C:34:04:85:06:2A:EE:11:68:E5:4C:61:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fc2a093-694e-35f6-8da8-f9e643eb27a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:c5:c1:a1:b1:0c:3d:f3:54:e1:5a:1d:2b:70:8f:00:7b:99:
f5:e4:89:45:f3:07:dd:cd:1a:96:40:24:46:d2:12:db:ac:40:
e8:03:b3:97:7a:2c:cc:49:97:06:7d:a5:dd:02:e1:63:04:e3:
76:40:e1:b1:7c:2a:7c:91:8a:0b:97:32:5b:f1:ba:94:da:89:
87:eb:26:5c:9d:88:61:62:ab:f3:3b:36:f0:9f:6c:7a:96:4c:
5f:b4:76:f2:48:1b:b0:a9:85:ad:8b:40:9c:2a:1d:a8:c9:2f:
64:09:ea:30:dc:ae:0b:20:3e:65:7e:08:24:9a:19:08:af:f5:
fe:2f:fc:ba:8d:42:6c:ed:bf:69:7a:22:81:78:07:69:d5:33:
2f:a9:a7:ba:53:49:91:65:96:5d:83:e5:74:f0:f2:ca:73:0b:
cd:da:f1:54:ea:8c:9c:06:51:65:95:ef:21:df:0c:6b:bd:7e:
4a:03:2b:25:01:6f:70:a4:f7:b8:cb:5c:42:18:97:34:23:39:
5b:61:47:c1:ae:de:6b:04:a5:54:57:2b:49:6d:37:8e:76:63:
89:3a:8c:09:13:b4:29:6f:12:43:aa:5c:b5:d6:76:c1:79:7e:
85:5e:ae:12:42:b5:aa:bf:a2:2b:14:3d:1d:1e:6c:22:4e:d0:
62:a4:2f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:37 2025 by rpki-client