Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/291bd64b-786c-3154-ae78-22c3361c4127.roa
File: 291bd64b-786c-3154-ae78-22c3361c4127.roa (raw, json)
Hash identifier: XdCmzkHV1mrbvA50fNcR/1qDKu9KthJnnJX09XtiH6U=
Subject key identifier: 7A:C7:C7:51:CC:71:39:65:35:37:D3:C5:8F:B0:94:05:DC:98:F5:A8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DA9AF3A8FA57466E7CA1F3380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/291bd64b-786c-3154-ae78-22c3361c4127.roa
Signing time: Thu 21 Apr 2022 12:00:00 +0000
ROA not before: Thu 21 Apr 2022 12:00:00 +0000
ROA not after: Fri 27 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 153.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a9:af:3a:8f:a5:74:66:e7:ca:1f:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 21 12:00:00 2022 GMT
Not After : May 27 04:00:00 2022 GMT
Subject: CN=957c1bd7-5054-45ab-b445-0598e95173b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:90:54:0c:02:12:da:51:84:79:ec:e5:f5:
fe:68:bd:8a:e8:fd:ba:9d:37:4a:3c:42:3b:2e:dd:
01:37:cb:36:d5:6e:aa:bd:7a:71:74:b0:76:d5:d3:
c7:c2:e3:90:3f:f0:b2:e8:72:a2:f7:3a:ed:67:6b:
23:87:66:30:36:2c:02:c6:47:94:32:93:8d:b0:1d:
a7:af:e9:b4:14:ca:91:c7:32:7d:aa:5a:96:3f:6b:
9e:52:0a:87:f9:50:b7:32:e9:59:13:d1:fc:fc:f7:
e0:b3:a2:f7:32:d0:f1:d4:2c:f7:9a:ca:4f:21:58:
0c:f4:9a:ac:8e:4a:66:57:81:14:6d:c0:a3:cc:2a:
3f:14:28:df:4a:1c:ed:55:05:46:1b:4e:cb:b6:3b:
e4:1e:87:77:09:29:af:24:ff:36:b9:a3:c2:e4:b2:
19:06:26:50:40:62:0b:70:24:68:79:a4:2a:6f:08:
d1:07:f1:4a:3e:34:0f:3c:65:f7:be:33:0c:9a:56:
9b:80:50:b6:60:dd:ad:f6:4c:de:0f:43:f2:46:20:
87:d1:2b:4f:73:2d:7b:ff:b3:60:73:10:cd:67:93:
d4:14:9b:a3:45:57:3f:c7:16:f9:cc:37:09:e8:09:
c2:4c:2c:e1:e7:29:57:26:48:4e:a6:bc:02:e0:31:
39:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C7:C7:51:CC:71:39:65:35:37:D3:C5:8F:B0:94:05:DC:98:F5:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/291bd64b-786c-3154-ae78-22c3361c4127.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
153.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:21:c3:8a:b9:a9:6b:10:f6:85:63:24:ea:42:77:01:38:4d:
73:7a:6b:ed:ed:1c:7c:1a:41:6b:86:8e:c1:f1:a9:98:70:d1:
15:e9:f4:97:41:11:12:28:0d:e3:af:2d:09:43:29:7b:b3:e6:
56:d5:d5:4d:5c:20:d3:55:f6:87:18:92:3b:e5:fb:90:17:1c:
e0:25:eb:3c:62:39:56:14:f1:0c:8c:81:ab:99:fc:da:6a:ec:
74:bf:fe:80:23:19:15:54:09:c9:d8:cf:8e:2e:e4:cb:96:91:
11:6f:1f:b1:92:aa:d6:15:d1:28:79:87:64:93:bf:86:50:98:
eb:9f:4e:2b:2e:8a:a5:99:9f:60:d3:8c:2f:95:1b:59:58:d3:
bf:24:8d:5d:5c:d9:f7:9a:f3:da:6a:23:a8:45:a2:56:b9:db:
d8:1c:ec:31:ef:70:6d:8a:b2:d3:05:84:ca:a9:21:58:53:4c:
a4:a7:42:15:f4:81:88:4a:51:c9:c1:78:5c:4a:5a:da:4b:e0:
de:f6:5d:45:60:03:01:27:c9:18:4d:3c:d0:ca:45:19:01:6b:
20:64:9d:b0:74:a2:d3:73:29:c1:60:58:46:93:2e:c4:01:0b:
b2:c3:c4:2a:89:b3:88:9a:6a:d0:95:10:9b:15:ab:67:4e:13:
52:8d:e1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:11:00 2025 by rpki-client