Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/28137583-82cf-3c5d-9df3-4d84bff457fd.roa
File: 28137583-82cf-3c5d-9df3-4d84bff457fd.roa (raw, json)
Hash identifier: rBCoYhFPmoKvbswe9fggmGCEEziGu2/Kjb6vqA06LtM=
Subject key identifier: C2:70:73:CD:03:19:39:07:4E:76:29:89:57:7B:12:17:3D:D6:F0:D5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DBE97A56F19B024D9EA7D28A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/28137583-82cf-3c5d-9df3-4d84bff457fd.roa
Signing time: Fri 29 Apr 2022 12:00:00 +0000
ROA not before: Fri 29 Apr 2022 12:00:00 +0000
ROA not after: Sat 04 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 151.162.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:be:97:a5:6f:19:b0:24:d9:ea:7d:28:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 29 12:00:00 2022 GMT
Not After : Jun 4 04:00:00 2022 GMT
Subject: CN=cd252f0f-61d8-4706-945a-5947d930fcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1b:ff:b4:8e:1e:fc:8c:d6:d6:03:80:dd:f6:
56:37:3e:84:33:df:16:f8:43:46:45:2a:5b:d6:96:
6e:61:6d:70:36:74:b2:c2:3d:2c:d4:a8:83:c5:18:
bb:4d:03:89:4c:d2:47:01:49:0f:e2:f9:d7:9f:d3:
54:26:fb:93:7b:ca:db:c5:05:61:1d:99:c6:fe:41:
fa:da:6c:2f:ca:03:cb:59:48:1a:55:1f:54:0a:7e:
ce:8e:4e:0f:20:01:09:c6:3b:20:02:02:96:81:9e:
78:2e:16:5a:bb:5d:b4:ff:58:cc:f3:f5:d3:24:ff:
3c:e0:00:47:b3:10:81:13:60:cb:dc:c6:0b:a0:a2:
9b:29:7a:8f:18:76:94:7a:54:7c:22:2e:ae:9e:8a:
4d:a4:b8:48:bd:7a:3b:5f:7c:82:b5:d0:52:43:de:
4e:dd:93:8f:3e:a2:31:1e:c8:63:a7:c8:6d:2c:48:
fb:44:a5:10:99:db:4a:96:81:4c:61:70:1f:61:70:
83:25:a7:de:5e:c8:55:67:80:d4:05:7a:12:3c:87:
46:75:5c:88:50:9a:fa:e3:3d:64:46:80:5a:52:28:
f7:c5:57:74:9f:51:a5:93:4e:93:80:e2:c3:82:37:
a1:0b:75:88:75:ab:cb:34:d0:d2:af:6e:62:5a:e8:
6b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:70:73:CD:03:19:39:07:4E:76:29:89:57:7B:12:17:3D:D6:F0:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/28137583-82cf-3c5d-9df3-4d84bff457fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
151.162.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:fe:be:48:77:1c:43:df:e6:f4:c5:7d:8e:d7:3b:f2:19:f3:
a4:29:55:32:2f:c5:b8:0b:32:18:e7:58:7a:4f:1e:9a:a8:bb:
85:40:fe:f0:da:f9:b0:75:d4:0b:e0:85:0a:14:f1:8a:0b:0a:
0b:10:fb:c3:e3:9e:61:6d:e8:8b:4e:e3:8b:d0:67:6a:68:b7:
db:62:ff:95:d1:13:20:00:48:90:88:65:30:5d:b8:ef:df:95:
2f:c9:17:8e:c7:05:48:56:12:eb:eb:81:c1:b1:8c:6c:32:9d:
6c:34:ff:c8:1d:1c:d0:d6:20:d8:80:fe:78:1c:00:cc:1a:58:
f4:4d:a4:ab:cd:b9:8e:e8:de:fe:41:6d:b2:3c:3e:ae:4b:d5:
95:95:41:a5:a2:fe:61:56:5b:42:b5:7e:e0:66:f5:9c:dd:68:
08:33:9e:45:39:b8:d1:dc:26:67:c8:3c:47:21:b3:5f:1c:7b:
3b:98:e7:60:77:4a:1c:86:8f:c4:c8:41:21:36:5e:d3:55:c0:
49:80:0e:0f:28:c9:51:40:f4:dd:d8:3f:50:8e:0f:86:3d:e1:
92:4c:b2:55:00:f5:d6:c2:c4:4e:6f:ac:77:e4:9a:bf:7b:8e:
60:65:5f:c5:f6:ba:7c:5c:ef:4e:95:ec:d5:68:67:f0:55:2c:
20:95:2f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:02:35 2025 by rpki-client