Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1497e6d4-7f02-3e19-b01e-4a0a818752e8.roa
File: 1497e6d4-7f02-3e19-b01e-4a0a818752e8.roa (raw, json)
Hash identifier: HhPuNPIVTRom8k/DFVfTlpueDDOLbelVJiNTCETT0pY=
Subject key identifier: B8:AC:62:67:82:D2:4B:E9:BC:E0:F7:4A:DC:3E:2B:C9:07:2C:20:6C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B84CB6564EE7F1EDED9E6300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1497e6d4-7f02-3e19-b01e-4a0a818752e8.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 152.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b8:4c:b6:56:4e:e7:f1:ed:ed:9e:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=454cc86a-d2c3-4915-906f-e436152d3182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:1b:2d:44:b3:25:70:90:6f:19:19:4b:51:
22:1d:48:ab:ce:a2:a3:e7:77:51:e2:7a:0f:77:9b:
9a:48:87:37:d6:cf:a3:4f:96:1c:a0:ec:f2:27:8e:
79:5d:f7:ea:b4:95:7a:01:71:26:b9:22:1f:13:4e:
ee:13:f0:f2:56:ef:de:96:79:bc:47:4b:22:09:43:
c1:93:71:8f:7e:0d:e5:95:44:fe:f5:52:81:4a:83:
d3:22:8c:d0:1a:d1:43:01:49:f2:fc:ae:7c:42:fe:
f6:b1:51:ea:69:fe:9c:d6:1b:ec:83:b7:6f:fd:b9:
bd:1b:22:ad:42:37:3e:97:90:77:c9:ea:46:23:be:
c3:fe:42:0b:ef:60:85:d4:4f:07:f8:48:e5:c9:80:
92:7d:64:28:53:a0:bf:1f:e8:91:fb:ec:b1:c5:68:
88:8b:c6:ce:32:ca:69:5c:dd:cd:78:10:b0:ed:5e:
66:e3:9f:6f:ce:e3:e6:a7:41:6d:98:e6:4e:fb:36:
98:bb:56:e4:99:14:ba:b2:e6:24:9e:30:17:72:c8:
fa:8e:b9:a0:44:db:d0:fd:4d:de:76:e5:7d:22:1d:
e9:fa:6d:09:d5:32:30:da:de:eb:fc:08:4a:53:88:
0e:23:b1:ad:12:14:c3:c1:48:7f:29:86:0c:3d:88:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AC:62:67:82:D2:4B:E9:BC:E0:F7:4A:DC:3E:2B:C9:07:2C:20:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1497e6d4-7f02-3e19-b01e-4a0a818752e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:41:7b:e5:d6:ed:f7:e3:1a:73:2e:87:e9:45:c2:57:74:78:
ed:07:08:d1:ff:a1:91:74:56:96:e8:a4:78:ad:63:ab:51:94:
aa:59:66:d9:9b:68:3f:ee:b8:8b:08:98:c3:6c:50:9d:54:e2:
a3:ab:cd:82:d2:30:3c:ae:ca:5e:cf:17:a7:17:a7:7c:20:37:
aa:d8:6b:d2:2d:f7:57:9f:c0:26:62:fd:75:1b:d1:2a:46:d3:
40:80:75:f1:4c:1e:3f:f6:86:1b:df:ab:b8:b1:f8:ba:5d:31:
c8:12:0f:ff:94:56:49:2f:ce:19:be:1d:c6:e4:40:75:00:13:
da:00:a9:a8:d2:7e:e1:a4:df:12:e8:99:aa:bc:aa:66:be:1a:
db:dd:0f:ea:2b:41:ea:97:8d:be:c8:86:ac:93:39:70:68:c3:
9e:2a:a9:f8:06:f4:ab:45:d0:27:be:bf:49:f6:e6:08:91:77:
f4:0d:a9:ff:cc:57:8b:04:04:bc:fb:90:10:b0:b4:bb:5a:19:
70:cb:0f:db:84:54:d7:a6:f5:0e:e2:39:26:d7:44:30:df:66:
dc:6b:9a:fa:3f:42:c4:9f:df:45:b7:bc:f7:9b:26:e1:ae:5a:
3a:1b:32:2d:c2:02:93:99:12:65:f8:83:1e:03:39:67:1e:8e:
73:63:44:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:53:05 2025 by rpki-client