Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/146efc97-851d-377f-a824-0c2f8d0023f5.roa
File: 146efc97-851d-377f-a824-0c2f8d0023f5.roa (raw, json)
Hash identifier: 6isAM1iOe4kT47MA586F1T1QFpvmDxbk9ar3kLine8A=
Subject key identifier: BC:57:DC:04:9B:4E:43:C1:33:BE:FB:0E:0E:D7:70:94:9A:23:0C:00
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F56B5866BECD73864A0225C05
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/146efc97-851d-377f-a824-0c2f8d0023f5.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 137.114.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:56:b5:86:6b:ec:d7:38:64:a0:22:5c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=2d2f23be-ba81-4dea-af03-b72ce604c9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:83:0c:07:25:5f:4c:29:38:d4:7e:a8:e1:b8:
89:b8:46:d9:c0:26:de:48:e9:1b:21:c5:cf:ca:e3:
01:33:1c:ed:f1:9b:3b:e0:7d:ac:7a:bd:9e:48:3f:
e2:95:64:95:20:a1:67:ec:ab:e5:57:76:9e:d4:f8:
06:56:7f:93:28:e5:e5:5c:10:eb:db:fb:9a:43:d2:
0d:1c:a3:a6:68:e4:13:a6:49:cd:13:54:04:d1:33:
88:f3:16:1c:d0:bc:c1:97:14:05:ad:a2:b6:e6:98:
0a:82:da:37:a5:df:75:1a:e2:a2:97:0a:29:a4:6c:
f2:46:3e:d6:b2:24:b3:ba:15:1e:69:55:0f:f9:b0:
99:3c:69:25:96:c1:91:97:db:62:50:8f:3e:c3:a0:
3e:5f:16:2a:c4:9e:1b:6c:c1:2e:92:c0:c1:d2:9b:
a4:3a:fa:d9:f9:30:54:1b:04:bd:52:3f:71:de:46:
d8:b9:89:9b:19:3a:84:c5:47:2a:41:57:38:43:67:
b5:51:73:da:e5:08:ca:b8:1d:5a:f8:67:69:00:2e:
b7:f1:9a:85:ee:d0:55:97:74:32:9c:56:a4:b8:55:
10:3a:d1:d7:4e:6e:c4:92:00:67:2c:75:f7:06:ea:
b5:04:63:03:88:45:dd:c3:c3:6c:d5:7e:18:53:95:
ef:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:57:DC:04:9B:4E:43:C1:33:BE:FB:0E:0E:D7:70:94:9A:23:0C:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/146efc97-851d-377f-a824-0c2f8d0023f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
137.114.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:d6:9e:b6:88:51:fd:ff:4f:3e:c6:b8:a6:26:6e:ba:98:7e:
e9:ca:60:a8:6b:40:bb:61:2b:11:d7:f4:4a:33:14:34:6b:2b:
91:84:80:b0:7a:04:12:d1:b6:1b:5d:de:0a:88:1c:a4:e5:85:
a7:c9:6d:f0:0e:5a:76:0e:a9:8b:4c:c4:11:74:1d:8d:d9:af:
06:28:41:8a:ea:bb:cf:d8:a0:1b:80:cd:d3:b6:b6:d8:5a:56:
25:97:ed:9d:fb:ad:93:b1:98:f7:30:37:ef:73:bf:8c:47:7b:
fe:3e:b0:c1:03:7a:4e:c7:ee:d7:7a:17:ac:9b:e9:7e:77:40:
87:ba:88:9c:13:b5:d0:e8:9d:73:be:f9:cf:29:b5:32:a5:d1:
52:2c:42:2f:53:3f:e2:0b:56:3d:c3:af:0d:fb:b7:c8:10:88:
4e:fb:cf:e0:e9:46:39:c2:87:65:d0:09:48:ea:3f:13:04:80:
0e:0e:2c:79:ec:27:0d:be:bd:aa:5f:00:4d:ac:b0:d7:05:ab:
16:c7:02:ce:1c:25:05:74:23:36:6e:4a:0f:b8:97:c2:0c:05:
97:d3:2f:78:1a:15:26:13:88:02:0b:b7:d6:bd:a6:c8:49:18:
bc:47:b3:bc:1e:e1:20:5f:72:84:e5:04:53:db:7c:1b:12:db:
13:69:f1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:25:15 2025 by rpki-client