Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b916362-6d59-3fde-bcb7-c030e7ffd467.roa
File: 2b916362-6d59-3fde-bcb7-c030e7ffd467.roa (raw, json)
Hash identifier: P+P/kA/YqmmoXs4P16L1PzapUKDGPjZk1P+Lq1sHx7E=
Subject key identifier: 9A:D5:83:E6:67:4A:84:4E:EC:EA:0D:78:6F:13:33:AB:1F:63:3A:16
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F56FFF341330EE2B49917BD00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b916362-6d59-3fde-bcb7-c030e7ffd467.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 153.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:56:ff:f3:41:33:0e:e2:b4:99:17:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=ab04b6d8-5a06-4239-9f97-8a76f1fe965c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:05:9f:7e:fc:c5:5a:27:89:ee:7e:07:06:
23:8a:2c:20:74:8f:95:0f:dc:e9:3d:34:e4:cc:f4:
75:37:a7:75:fa:36:10:b6:17:47:08:2a:c9:37:a3:
ce:dd:f4:26:38:52:69:64:03:bb:5c:13:4a:a1:f4:
e7:cf:59:7a:fb:b0:91:37:44:fc:ef:ca:67:05:1b:
e4:d4:0f:99:a4:22:3a:d3:d5:ad:7c:2a:6f:59:87:
97:15:55:08:f3:19:88:a6:40:dc:ba:a1:d1:89:0c:
81:33:91:e6:ee:ab:67:a0:46:6b:6b:b4:6d:d4:9c:
06:07:3d:e7:33:7c:ac:95:75:2e:49:96:9f:e0:a9:
4a:ff:b5:d4:5f:56:f4:20:92:d8:7c:91:0b:19:1c:
a0:23:fc:20:d5:14:c6:c0:95:74:96:02:9d:24:f2:
de:4b:b4:95:47:26:25:49:79:89:9a:ef:e6:bd:38:
15:e4:15:f7:2e:bc:3c:07:82:94:ac:0c:8e:c6:7b:
ae:49:9e:ba:1a:aa:4a:f0:c4:fd:6c:20:70:3b:9c:
f3:fb:38:93:26:60:2e:39:ae:18:56:0f:f9:b3:ca:
32:69:18:ec:bf:d9:fb:3d:56:a3:6a:11:46:75:53:
91:97:a6:1a:54:8f:e9:07:a7:89:f4:c0:dc:50:55:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D5:83:E6:67:4A:84:4E:EC:EA:0D:78:6F:13:33:AB:1F:63:3A:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b916362-6d59-3fde-bcb7-c030e7ffd467.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
153.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:70:45:44:ad:2b:1e:be:61:06:5e:78:66:a6:f7:2b:92:95:
c2:f1:49:68:0d:af:b6:8b:99:fb:69:42:77:c8:10:88:4e:c3:
56:30:7a:b1:c0:f5:af:c3:a0:45:0c:91:6c:bc:d3:81:f9:72:
10:b3:0e:1a:45:23:0c:27:d7:db:05:91:0a:a9:a5:dd:37:b0:
f8:ac:8d:c2:5f:b4:b3:81:17:86:31:8d:1b:91:fc:6d:38:27:
df:0d:fd:5b:4d:3f:c0:3c:a1:2c:0a:c0:f3:8c:77:9c:ba:6e:
14:54:f2:25:03:fa:9b:b4:e1:71:47:99:86:cf:a6:2b:5a:e1:
39:99:a3:5a:e6:04:46:f4:85:69:7c:b6:e1:42:b8:f2:b0:de:
d6:39:af:d7:cc:31:42:c8:b6:4d:7b:49:ff:1d:e2:72:f0:46:
07:44:16:cb:72:3a:e8:cb:2a:63:4a:6d:8a:d0:b6:82:f2:18:
20:9c:fe:53:c7:ca:0b:4b:21:77:ce:6a:b0:3b:28:03:09:00:
5c:cf:79:97:41:3f:dc:7b:f4:44:34:09:05:ee:67:1a:75:f0:
0c:73:e1:a4:fa:7a:a2:1e:37:96:7c:7b:28:17:43:bd:66:f4:
b5:37:a3:40:54:71:e7:5d:73:2c:03:f9:04:75:cd:b6:0f:d5:
44:37:82:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:25:13 2025 by rpki-client