Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b82788d-bbb3-368d-a580-40b889ac7808.roa
File: 1b82788d-bbb3-368d-a580-40b889ac7808.roa (raw, json)
Hash identifier: lPjnQKsUshj9VIBWGs7vluriOVvXwq+PrLPq/AEvnmc=
Subject key identifier: 63:CC:B9:42:14:D7:C9:94:F2:8E:8B:BF:4B:BD:9A:E5:EA:FF:CB:D2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D338F582B92B3CD7626DBAC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b82788d-bbb3-368d-a580-40b889ac7808.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 144.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:8f:58:2b:92:b3:cd:76:26:db:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=785f9c56-a327-4889-86fc-f0a25bdde87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:8e:5a:55:60:ca:60:41:c4:db:de:df:2c:
16:b7:12:fc:b6:cd:74:0d:09:70:3e:d9:f3:57:96:
f7:fd:73:0b:b7:ee:5b:ae:86:9d:ae:23:ee:7a:9f:
89:a7:06:2f:5f:fa:70:d7:40:e5:98:98:b3:80:2a:
15:5a:8f:5e:39:53:30:e2:9d:ad:37:30:84:7c:ec:
4a:5c:57:76:07:d7:cc:e6:68:5a:78:b2:73:42:85:
51:45:f2:0e:ee:58:5d:da:c9:4c:95:b0:97:d0:ee:
3c:97:40:12:65:f1:9f:a2:20:e5:bf:b1:56:cc:40:
a0:45:6f:51:e6:42:10:0e:4c:0d:4a:7d:e4:d1:f7:
b3:4f:e4:09:cb:92:8f:a5:b0:4c:ad:7f:d5:fa:70:
9f:36:6b:1c:d9:75:e3:e8:23:33:1d:82:75:e2:7f:
95:f2:88:69:46:a8:22:cb:34:35:14:d1:c6:13:20:
38:72:72:d9:0d:4e:16:4c:30:10:64:82:4b:4b:8b:
19:ad:56:ba:81:32:a8:91:59:5f:85:57:61:a0:1e:
13:fd:b0:4d:91:5b:46:3b:49:55:6b:ac:f7:c0:2c:
8e:5b:05:f9:26:73:f3:05:13:65:07:1d:94:db:e8:
93:34:56:cc:5d:97:10:18:eb:6c:b8:dd:1d:0b:20:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CC:B9:42:14:D7:C9:94:F2:8E:8B:BF:4B:BD:9A:E5:EA:FF:CB:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b82788d-bbb3-368d-a580-40b889ac7808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:8b:e1:f3:aa:c7:54:5a:92:ed:a6:4f:0f:ce:15:b6:0d:b8:
30:55:2a:bf:57:5f:3c:af:0c:75:e0:2e:19:27:2c:7b:3c:7e:
84:5d:c0:f0:66:d1:ea:b3:60:5a:32:61:34:ae:ed:77:92:55:
7a:ac:6f:1c:fd:08:2d:f6:e1:09:a4:92:1f:e8:17:13:68:e1:
7b:f3:35:2c:78:6e:27:c6:4d:f9:13:ef:e4:25:03:ed:aa:c7:
06:4c:94:5c:e1:28:12:7e:10:28:9e:94:f5:b6:22:49:de:72:
1a:90:94:91:92:11:ae:c1:34:1b:94:9c:54:42:7f:2e:18:69:
73:96:c0:03:cc:ee:cf:d9:97:29:82:1d:c1:20:9e:aa:2f:24:
23:bb:7f:3b:55:a5:e9:f0:77:71:0f:d1:57:87:41:1d:bf:55:
44:b7:13:a3:a2:17:b5:09:18:ea:77:01:5c:df:bf:e1:dd:c4:
cd:61:7d:ac:27:d1:d9:7c:7c:6c:d1:0b:fb:6e:60:3a:b5:76:
9c:8b:b7:86:f7:4e:cb:83:62:8e:32:df:9f:a1:41:ca:da:63:
19:c6:9f:06:eb:1e:f1:f8:2f:29:dd:ac:f5:d6:ce:6d:36:ac:
d6:46:6b:63:ec:68:d7:8e:d0:ac:44:44:f4:85:72:16:1f:34:
b4:c9:6c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:12:52 2025 by rpki-client