Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1a883905-c24c-34c7-abe8-5d6aae88355b.roa
File: 1a883905-c24c-34c7-abe8-5d6aae88355b.roa (raw, json)
Hash identifier: HZdCQQijoHI9Yg6pQRJq2Ya21UkJbRpg4PsETjwdN44=
Subject key identifier: CE:26:EA:F9:2D:77:09:84:E5:48:C2:06:45:E1:2B:43:57:C4:3A:95
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D81D14D0B5A07CA4E67A2AA40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1a883905-c24c-34c7-abe8-5d6aae88355b.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 152.25.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:d1:4d:0b:5a:07:ca:4e:67:a2:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=521924f6-d343-412a-96e5-46a173785be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:5d:45:77:f4:e3:9a:14:54:a1:0c:2c:8e:
f5:85:19:ca:60:ca:8a:07:51:98:85:a5:fb:2b:f6:
24:d1:b0:b2:7f:de:e8:50:25:91:fc:f3:b7:bf:ed:
d6:ba:90:f4:42:e7:53:e8:09:e1:c5:00:7b:24:67:
49:42:74:64:e8:68:76:64:6e:42:4e:5f:8c:43:a3:
15:a4:ba:10:47:2b:a9:ce:6a:dc:28:f0:c3:c0:e8:
12:d6:af:46:70:e0:d5:08:6f:7d:c8:64:5e:14:2d:
5e:0f:0b:b8:cb:ab:2f:5e:5c:48:01:e0:5a:b8:38:
cc:6a:ad:c5:8f:0a:33:bb:33:02:7f:aa:bc:d0:0e:
09:83:8f:d7:97:2e:01:cc:e3:d5:1c:84:e9:03:e5:
3d:46:83:a0:ca:66:cc:73:d8:2d:fe:9f:9f:ad:e0:
b8:be:19:2d:a1:32:98:c5:7f:89:07:ef:5c:80:2c:
1d:0c:e9:6c:1c:25:a0:62:75:33:b1:83:e0:85:62:
e8:c6:55:e6:10:0f:49:96:3d:80:16:96:c6:19:a0:
42:e6:7d:65:45:40:19:ec:0e:71:ee:b4:d3:4b:f3:
46:d8:fb:11:f1:8b:5a:1a:d6:2c:07:e0:ae:5e:54:
9b:97:30:36:cb:01:c2:62:08:c8:a3:c2:aa:00:21:
d2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:26:EA:F9:2D:77:09:84:E5:48:C2:06:45:E1:2B:43:57:C4:3A:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1a883905-c24c-34c7-abe8-5d6aae88355b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.25.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:f6:09:2a:7d:ae:d6:4e:73:58:18:b1:e2:f8:71:0c:04:c5:
c9:c7:3d:33:6f:fa:f3:d0:e5:4c:e2:04:cb:0e:3d:4a:ff:c9:
b8:13:60:40:6c:cb:44:6d:7d:e7:5d:75:51:72:92:25:1d:4b:
08:41:0f:46:fa:dc:3b:53:d7:0b:dd:23:17:8d:4f:1e:a4:9b:
7e:40:d4:6f:ab:d6:c0:d6:c0:e4:30:07:51:a3:e8:b7:71:3d:
dc:6f:18:37:3f:57:80:35:4b:ec:36:f7:58:b0:19:2a:ad:4b:
bf:8a:6a:5e:ec:4a:76:ec:2a:09:e5:dc:a3:05:43:a1:6b:7d:
a4:2f:16:62:b3:61:e5:a6:41:1b:6c:26:eb:70:f1:18:92:13:
14:45:e9:33:e9:85:b5:04:56:c2:64:15:87:11:b2:db:c5:62:
c8:2a:b4:9d:19:0a:3d:82:b2:f8:ac:af:d2:36:ea:48:64:66:
8e:fb:13:ca:26:74:88:a1:f7:ec:d0:0c:18:75:e7:63:44:8d:
e8:24:74:70:11:3f:7c:b3:bc:a5:ab:ac:19:9c:5e:3b:9c:44:
98:86:06:f4:17:bc:fa:15:18:57:d7:b7:3e:35:28:f6:b0:f2:
c6:ba:40:0b:d2:e1:0e:f1:06:6c:c7:d0:5a:64:3a:ca:6d:8e:
89:39:63:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:35:33 2025 by rpki-client