Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1de91f57-403f-3d6d-a04f-80253f482229.roa
File: 1de91f57-403f-3d6d-a04f-80253f482229.roa (raw, json)
Hash identifier: DKTD2VmmtO53LyxpkjLCZ45/cy3cuWJqJWOWhXjzjDs=
Subject key identifier: 82:CA:8D:3F:23:32:3E:A9:A4:20:CB:AC:AD:D9:37:04:A3:76:D7:A9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5074EC5C8FE0B2332EEEB500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1de91f57-403f-3d6d-a04f-80253f482229.roa
Signing time: Tue 20 Sep 2022 12:00:00 +0000
ROA not before: Tue 20 Sep 2022 12:00:00 +0000
ROA not after: Wed 26 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 152.155.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:50:74:ec:5c:8f:e0:b2:33:2e:ee:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 20 12:00:00 2022 GMT
Not After : Oct 26 04:00:00 2022 GMT
Subject: CN=00bec5a4-3c2d-4231-bc59-4bfe93564765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:96:84:64:98:e4:d2:26:9c:d7:b1:51:f1:
0d:36:d9:d1:0f:77:3a:60:ed:c3:3d:6a:1e:fd:5b:
11:fc:25:1a:08:5f:72:a9:b6:d7:2a:4b:f9:fd:92:
8b:c4:90:92:5a:f2:1d:94:b2:2e:b8:6f:a2:4b:b6:
b7:58:27:c4:2c:5a:d4:14:29:41:2c:c0:63:65:46:
27:27:67:b6:8e:08:48:4b:8c:b9:d7:d9:5d:7e:77:
5e:c7:c5:a0:0b:a2:0a:63:6c:21:84:91:41:39:5c:
a9:33:5d:79:14:10:95:fd:2c:ad:e8:83:fc:98:71:
04:42:d3:30:98:83:6b:2b:64:fa:e0:1a:97:57:c8:
dd:aa:b6:99:69:36:43:81:9d:7f:ad:21:61:81:48:
c2:12:64:f3:60:de:00:a8:0b:f4:0d:29:bf:2c:7c:
b8:e2:03:c5:7d:c9:20:e6:fa:86:ca:f7:7f:7b:72:
6f:bd:64:92:f0:b6:4e:71:b9:7d:95:35:89:d1:fe:
96:e1:e4:06:98:7f:c1:80:20:a8:e8:5f:b2:9d:6f:
15:c3:c7:91:b8:e2:5e:36:d9:45:93:24:be:17:83:
27:24:99:f3:89:26:21:81:de:4e:14:c9:91:a0:5b:
d3:47:de:50:67:fd:2c:e9:09:d6:3b:9d:6f:52:77:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CA:8D:3F:23:32:3E:A9:A4:20:CB:AC:AD:D9:37:04:A3:76:D7:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1de91f57-403f-3d6d-a04f-80253f482229.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.155.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:86:9e:78:ba:19:33:fa:ad:92:8e:3a:e7:32:3e:48:90:77:
8a:47:0b:89:7a:f7:74:e0:5d:bf:17:14:b7:82:7f:47:89:02:
7a:ad:92:e1:e6:71:40:42:64:0b:98:b6:59:71:f5:41:c3:71:
86:68:90:78:1f:a3:4e:db:88:7a:89:72:a3:de:29:aa:d5:94:
7b:4e:70:6f:81:a5:74:bd:1c:1b:4c:9c:8a:1f:4f:b1:c2:5f:
17:f5:3f:2c:2d:27:2b:cd:9d:9e:d2:90:1a:08:78:c5:74:40:
fa:84:7c:ee:0d:08:10:6a:d2:bd:51:ef:86:ef:cd:13:01:32:
00:bc:32:36:9c:9d:ee:a7:56:b8:4d:18:59:3a:3e:f3:d1:64:
2b:cb:9b:d2:fa:04:4a:24:c3:f7:b4:4b:41:1b:1f:0f:3e:10:
15:5a:f0:de:7b:a5:15:7e:90:b4:2c:4b:59:fb:2f:a0:7a:b7:
f9:01:90:ef:13:a4:b8:63:e6:cb:fa:3a:9d:85:10:e9:d0:d5:
9b:2d:3d:12:62:d2:4a:2e:46:49:04:34:69:45:0d:e5:7d:29:
f7:3c:0e:1e:c3:14:b9:40:73:19:86:2a:75:27:af:a8:1b:6e:
b2:46:a8:39:4c:b7:84:57:08:d0:c5:80:a2:83:db:96:5b:30:
53:d7:e7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:17 2025 by rpki-client