Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c3adb0e-65dd-3e5b-acc0-d619b33fee6f.roa
File: 2c3adb0e-65dd-3e5b-acc0-d619b33fee6f.roa (raw, json)
Hash identifier: L15PoJoX4/tsiJ/Romg7CdcXB+08f8qHAXnxA+GSQco=
Subject key identifier: C9:D6:71:B2:EB:FE:8D:82:48:0C:BE:5E:A6:CB:96:E1:B5:01:2B:C0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD0120845503FE0C5A6173D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c3adb0e-65dd-3e5b-acc0-d619b33fee6f.roa
Signing time: Thu 05 May 2022 12:00:00 +0000
ROA not before: Thu 05 May 2022 12:00:00 +0000
ROA not after: Fri 10 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 143.204.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d0:12:08:45:50:3f:e0:c5:a6:17:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 5 12:00:00 2022 GMT
Not After : Jun 10 04:00:00 2022 GMT
Subject: CN=ad21a2ff-fe25-4d7a-b67f-bf64872363f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:36:27:9d:0c:3d:fa:a2:b9:98:0c:1d:5c:
d8:49:32:80:4e:fe:04:b1:75:6b:aa:da:8d:33:e9:
bb:a9:61:27:ef:d9:7b:86:ae:91:6d:cc:86:f4:8d:
7e:fe:8f:b9:b6:bb:52:f2:80:c1:7c:6e:9a:aa:cd:
86:80:b5:6a:0e:69:4b:e7:e5:66:f6:8e:45:d2:2c:
47:1c:5c:2f:ba:53:ea:28:bf:45:a1:f9:83:ac:ad:
31:8e:d5:22:31:cb:31:45:40:54:dc:93:d9:41:36:
85:25:6e:b5:20:25:8a:52:cf:fd:07:c3:6c:b6:3b:
a1:a2:40:07:8f:41:e1:cb:84:79:18:ce:12:c8:39:
3d:6c:42:d8:e0:90:8b:cf:fc:77:82:31:bf:95:b8:
90:d6:39:3b:81:19:1f:29:ee:b3:5e:61:4a:2b:e5:
b9:62:3a:bc:29:28:b2:84:16:d0:f3:8b:51:29:41:
03:34:c1:43:e4:6a:0c:0d:ec:b1:1a:2e:c5:a5:cc:
94:d9:f5:8f:05:74:31:78:a7:ae:d4:fe:ae:31:16:
4a:d0:3d:7e:01:92:3a:af:cd:5a:0c:51:ce:7f:a1:
ef:54:c0:a2:54:53:70:c2:41:9b:4c:8b:34:4a:6a:
5a:f5:3b:f3:28:e5:eb:e5:f4:70:c7:09:a6:da:a5:
ee:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D6:71:B2:EB:FE:8D:82:48:0C:BE:5E:A6:CB:96:E1:B5:01:2B:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c3adb0e-65dd-3e5b-acc0-d619b33fee6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
143.204.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:f7:47:06:2b:24:e5:2a:c8:b5:18:4b:6f:96:31:a0:f6:82:
b1:8a:48:f5:dc:5e:68:05:ee:8a:ce:95:57:bd:2c:de:2d:ce:
f6:ed:83:4d:f4:b2:67:1f:e7:f3:b5:fe:76:af:fe:29:35:4a:
82:3a:60:b9:11:b4:e5:32:cb:c8:bd:b1:a6:35:5b:4a:6d:89:
58:83:94:10:63:09:f8:c9:73:07:e3:78:b3:69:49:2c:f7:eb:
f1:25:10:52:4a:d5:21:33:aa:00:08:72:21:60:94:d0:92:7b:
be:de:d7:40:36:70:d4:a0:34:7e:4c:48:d1:c9:73:01:12:4d:
d8:19:ff:37:51:8f:e2:b9:bb:d1:17:29:78:a5:21:b0:75:b7:
af:05:03:46:e9:18:52:98:fc:d4:a4:ab:e3:c5:bf:f8:ff:35:
85:6f:08:6c:5b:a1:f5:a2:1c:11:27:e8:53:98:c9:74:52:04:
eb:4e:9a:bc:9e:2d:38:ec:3b:e8:64:ce:df:b9:c7:97:75:92:
d9:35:04:13:8a:03:2f:a4:e9:18:d9:14:64:3b:8b:d5:36:05:
4e:2b:60:f6:52:96:eb:dc:34:32:6c:2a:38:2d:1c:d9:23:b6:
6b:53:b6:6a:eb:7d:a0:01:a8:50:27:77:ee:1a:60:e0:c6:e0:
93:df:e0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:33:22 2025 by rpki-client