Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b87efb5-5a5b-3261-bb0c-ba60927af82a.roa
File: 2b87efb5-5a5b-3261-bb0c-ba60927af82a.roa (raw, json)
Hash identifier: 5PvkvaAsoajwQPt5NMluy2ZoUy9nkljVwADBa6tSdNo=
Subject key identifier: 24:E3:E2:F6:11:88:99:8D:14:A4:3F:94:51:A3:29:A1:E8:36:5B:42
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EFEEA2E39BDBEB0F6E04F3D40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b87efb5-5a5b-3261-bb0c-ba60927af82a.roa
Signing time: Mon 22 Aug 2022 12:00:00 +0000
ROA not before: Mon 22 Aug 2022 12:00:00 +0000
ROA not after: Tue 27 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 138.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:fe:ea:2e:39:bd:be:b0:f6:e0:4f:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 22 12:00:00 2022 GMT
Not After : Sep 27 04:00:00 2022 GMT
Subject: CN=086859c0-0713-4285-8688-c9e07e2ae36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:21:9f:29:fe:45:4c:65:68:6f:87:7d:8d:
f0:0b:3c:e6:3f:dc:c4:25:b6:d0:a7:c1:25:22:6c:
b8:cf:c6:43:6b:32:81:41:ca:c2:70:fb:1e:cb:ea:
66:b8:5c:69:5d:07:10:18:14:a4:25:9e:b4:21:b5:
8f:77:85:ec:86:ce:ca:11:f5:d8:6b:8d:63:79:fb:
1e:b3:12:46:80:e9:2d:39:cc:4a:96:73:bd:46:8e:
f0:95:c4:ea:a8:11:04:ae:ff:49:26:0a:1c:b3:b5:
59:06:09:4f:48:c4:5e:13:81:15:34:78:aa:ba:ac:
0e:11:f7:ed:eb:57:92:79:cc:0e:88:04:ce:81:bf:
8b:73:f9:e1:c9:9a:30:a6:95:a3:44:d6:a9:1b:fb:
27:ec:d2:ec:e4:cb:8c:e1:6d:0a:ad:54:2e:ee:ae:
d5:e9:93:39:cd:94:d7:be:a5:4c:a0:91:11:f9:73:
4f:3a:a1:9a:71:f0:0a:d0:cd:28:c1:56:cf:da:91:
8d:18:c1:b7:e2:85:c9:66:68:20:13:00:30:23:f6:
fc:e2:36:fe:1f:fd:7b:a3:2e:5d:d9:c3:bb:ea:28:
f0:be:53:22:1d:e9:03:25:dd:f9:fb:df:04:5e:0d:
c8:f8:25:5d:dd:21:ab:be:62:ec:c8:71:b4:98:a5:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E3:E2:F6:11:88:99:8D:14:A4:3F:94:51:A3:29:A1:E8:36:5B:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b87efb5-5a5b-3261-bb0c-ba60927af82a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
138.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:a2:eb:7f:a8:37:23:e7:9a:9e:e1:51:a0:cf:60:33:e8:76:
31:c8:d2:13:8c:e7:7b:8f:5a:39:31:58:7a:ff:77:68:01:e0:
e7:83:e9:1c:60:4f:db:55:fe:20:44:19:03:b2:42:bb:81:0f:
79:58:41:c5:03:d3:4c:05:d2:e5:b2:c8:56:2b:e2:53:bb:d2:
93:53:6a:35:e5:f9:35:f7:cc:fb:69:3b:59:da:5d:dc:3d:d0:
cb:b9:11:02:03:4d:f2:a3:0f:48:3e:1d:b3:44:07:75:f9:87:
09:9e:86:ad:25:41:a1:86:05:ed:77:37:0b:ba:d0:75:27:2a:
81:14:f0:dc:8e:7d:fc:7d:03:71:7c:e6:7a:d6:09:20:3a:ec:
31:8d:f3:b9:17:86:ec:b8:de:8d:7b:21:a5:67:51:77:20:16:
b3:3c:fc:90:37:fd:90:60:8d:bf:a5:d9:ef:07:df:be:06:4e:
14:5e:0e:14:a4:7d:cf:df:c6:aa:2e:de:2c:0a:ce:11:88:25:
81:fd:21:4c:a7:29:5f:9d:ce:d8:a9:42:ec:a9:05:e9:55:9a:
3a:bd:af:23:1c:d7:c7:aa:ea:56:ab:a2:28:bb:f9:90:ec:88:
bf:d1:af:d1:83:9d:be:fa:d2:0d:e6:f2:f5:03:8f:eb:25:14:
e7:c3:35:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:04:29 2025 by rpki-client