Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a3560c9-b21b-3ac3-88ab-73cc3e22bf1c.roa
File: 2a3560c9-b21b-3ac3-88ab-73cc3e22bf1c.roa (raw, json)
Hash identifier: vW5mICvjVjmQABxfanYD5dv4F52FaHLVlEiU6PPDeQ8=
Subject key identifier: CA:81:97:61:02:22:F3:D4:50:96:D4:8E:4B:19:5E:6E:3C:35:86:79
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B63C2967717C0F803575D080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a3560c9-b21b-3ac3-88ab-73cc3e22bf1c.roa
Signing time: Thu 26 Jan 2023 12:00:00 +0000
ROA not before: Thu 26 Jan 2023 12:00:00 +0000
ROA not after: Fri 03 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 192.39.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b6:3c:29:67:71:7c:0f:80:35:75:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 26 12:00:00 2023 GMT
Not After : Mar 3 05:00:00 2023 GMT
Subject: CN=2f8e98c0-4419-4e40-b81f-5cf00e00a6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:ff:20:1f:23:77:29:e4:99:77:0a:03:b4:
e2:49:84:5c:09:83:03:52:1c:09:99:18:70:8a:47:
c4:02:9e:b2:5c:fd:ff:94:f8:aa:10:86:4f:90:c3:
6e:84:ae:df:bf:57:33:dc:55:d8:35:9d:87:58:9e:
f6:e0:0b:f9:11:2d:cf:5a:72:45:6b:8f:e0:a1:04:
90:4d:d0:47:1f:c9:b3:bb:86:8e:1f:c2:08:9e:30:
9d:1c:37:13:9f:1b:04:6f:75:86:69:9c:09:2b:57:
89:3c:4d:70:ea:30:9a:1c:ac:b0:ce:81:92:70:0d:
5c:1b:71:e6:b7:fa:c4:f4:98:07:bf:38:94:45:56:
50:42:a5:22:b8:9c:c5:6e:0e:c2:e6:fe:29:49:3c:
9d:1e:98:63:9b:f7:8a:c0:66:2d:71:88:9a:d7:f1:
3e:2b:2f:cb:35:05:7e:d0:08:a9:39:d1:0d:d9:2c:
17:31:db:1a:87:d0:64:1f:4e:9a:d2:50:50:8f:56:
50:d7:e1:1b:d9:76:18:7e:b0:3c:f4:14:69:33:d7:
79:b4:e4:ff:a8:bc:0a:c0:a8:9f:ea:cb:b9:6b:c0:
08:c1:c8:ed:bb:e8:f5:47:41:a7:9f:2b:56:0a:36:
2c:42:eb:33:56:43:77:c0:89:63:0c:26:bb:bc:b1:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:81:97:61:02:22:F3:D4:50:96:D4:8E:4B:19:5E:6E:3C:35:86:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a3560c9-b21b-3ac3-88ab-73cc3e22bf1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
192.39.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:f5:79:3a:48:a7:2f:47:7b:66:8f:d8:c3:ca:20:a9:b3:1c:
a4:cf:fd:c7:bc:31:28:a2:0c:14:28:c3:e7:0b:3b:e9:89:b1:
dd:95:66:d0:c6:0f:20:20:c5:11:0c:16:0a:b8:1d:38:18:38:
0a:9d:c1:b1:6e:8d:a4:bc:58:cb:45:76:03:2a:40:78:8a:34:
bd:37:21:31:c8:22:5d:c7:db:11:77:54:e8:6c:26:ae:57:76:
8c:bd:84:00:92:6c:cb:4f:03:32:0a:55:f6:58:03:2c:3b:d8:
1a:45:11:45:19:e9:bd:70:4e:94:1e:94:44:e0:31:44:86:c7:
83:f1:12:32:f6:c6:94:77:e0:4d:30:96:6c:b8:f8:36:b3:01:
e8:0f:58:c4:0c:e0:24:09:73:c7:43:ba:20:9d:04:54:a3:33:
10:6f:95:c8:f8:c8:c0:e2:64:4b:15:00:45:30:ca:b2:e8:30:
3d:73:d5:7e:e8:4b:68:c9:e6:3a:f1:7d:26:8e:3d:9a:8f:84:
07:a7:28:e1:a1:bb:cc:39:fd:5f:f4:29:29:ab:6e:76:a7:c5:
db:60:dd:5d:7d:47:dc:00:c3:02:23:24:35:9b:e1:db:15:18:
be:e5:31:d4:0e:eb:55:9f:b8:c7:64:f8:a5:67:11:18:a7:33:
3a:fe:34:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:30:26 2025 by rpki-client