Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2d13fff8-51c3-3672-8482-d67e5ccc4a9d.roa
File: 2d13fff8-51c3-3672-8482-d67e5ccc4a9d.roa (raw, json)
Hash identifier: Piz/gH0JB/LqPcfARg+zRhxfLai2/EzD6y8lPEpmXaw=
Subject key identifier: 45:A3:7D:C5:38:35:26:FE:BE:E9:54:30:5F:B3:D9:C0:8E:14:90:E8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D81C1C9829D6F5D7462F7CC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2d13fff8-51c3-3672-8482-d67e5ccc4a9d.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 152.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:c1:c9:82:9d:6f:5d:74:62:f7:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=6a1574a6-aca1-4709-8ecf-22faa04bad2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:b6:cf:cf:ee:10:1f:34:52:d8:44:c6:dc:
9a:18:b7:c3:c8:6d:37:2c:70:90:94:2f:0d:c6:3d:
09:b6:f1:56:e0:c1:93:82:71:ee:10:f5:e0:f5:fc:
f1:3a:d0:bf:15:45:23:06:4f:b1:bb:c6:db:b0:eb:
dd:64:ed:bf:e3:0c:63:74:33:ec:c6:e3:da:a0:cb:
68:aa:5e:b2:9b:24:1e:0e:76:1f:46:c7:66:a6:fd:
5b:6b:95:4e:6c:f8:b8:88:ba:b2:12:86:83:93:60:
cf:5c:f6:3e:82:50:60:6b:92:02:2d:53:0a:c8:52:
2a:01:77:47:cb:3b:88:01:01:86:99:08:f5:b9:bc:
ea:f4:e7:91:93:8d:a9:7f:94:0d:32:d7:2d:ab:06:
49:78:f4:f1:62:5f:2f:34:28:cb:da:7e:83:c5:d3:
49:03:80:ed:23:1a:eb:fe:aa:d1:57:b6:a7:a2:19:
e9:38:af:5f:44:b9:ba:f3:05:9b:55:e8:13:a3:5e:
30:0d:81:20:57:fc:4f:2d:aa:04:64:37:9c:9f:ba:
82:d6:85:c4:21:9f:bd:34:16:57:a1:de:c9:11:e7:
c0:6b:67:dd:75:0b:e3:fd:f3:99:f0:c2:98:5e:a5:
a7:9a:30:6e:71:a2:96:53:88:ca:45:6b:95:ad:cc:
f7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A3:7D:C5:38:35:26:FE:BE:E9:54:30:5F:B3:D9:C0:8E:14:90:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2d13fff8-51c3-3672-8482-d67e5ccc4a9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:2e:f4:4a:db:6f:0e:ec:60:0f:56:df:f4:a9:f8:9d:05:35:
0c:a8:1c:aa:50:03:72:ac:1a:7d:a0:4b:78:d7:08:a2:46:29:
6a:ae:0f:32:69:80:81:91:a0:4e:01:1f:b8:21:b4:ff:94:73:
69:e8:8b:2a:ef:82:ae:19:f6:bd:66:af:2e:77:64:40:ce:b2:
3b:e1:ec:61:e6:cf:cd:3a:1f:7a:9c:6a:43:d1:a7:1e:82:15:
76:dd:b5:99:69:eb:df:64:88:b3:80:2d:ca:b4:37:d1:22:69:
08:73:63:e6:de:b8:c1:bc:91:0d:fa:c1:a5:cb:92:f3:a4:ea:
62:e4:a6:ac:e8:b8:15:ec:db:04:88:47:ef:65:ec:1c:e8:cc:
b9:c4:1d:66:78:cc:73:90:ab:cb:3e:cf:2b:a7:97:ff:78:d6:
79:e5:c4:43:25:a2:1e:8a:dd:be:c9:69:a7:f6:3f:56:b1:2f:
82:88:5a:2a:b3:9c:14:a8:4a:0b:72:68:9c:0f:25:89:34:e9:
87:e2:65:bb:3c:ba:04:5d:4e:ff:9b:35:b5:e2:26:99:1a:a1:
3e:d8:33:d3:e6:6a:7c:f2:e6:2c:91:0e:80:16:85:13:7e:7b:
99:cb:c6:b5:14:fc:57:fa:0f:68:da:78:46:98:d2:2f:f4:24:
7b:90:a1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:19:58 2025 by rpki-client