Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3128e86f-249b-3e9b-9ae4-c625fcbbdf12.roa
File: 3128e86f-249b-3e9b-9ae4-c625fcbbdf12.roa (raw, json)
Hash identifier: KBsOiDSmvTNnxjudIUVnL9cIfUFRK4XUXKcuooC+jRw=
Subject key identifier: D0:00:DC:11:87:2D:DD:59:99:80:C3:15:41:B7:65:6C:8E:87:70:6B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583ECF22DCFE37F36FD98FCF1000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3128e86f-249b-3e9b-9ae4-c625fcbbdf12.roa
Signing time: Fri 05 Aug 2022 12:00:00 +0000
ROA not before: Fri 05 Aug 2022 12:00:00 +0000
ROA not after: Sat 10 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 151.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:cf:22:dc:fe:37:f3:6f:d9:8f:cf:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 5 12:00:00 2022 GMT
Not After : Sep 10 04:00:00 2022 GMT
Subject: CN=29d5a3a2-2c35-431d-ba58-02059a438ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:20:b3:c6:70:4f:c0:69:1b:82:50:76:94:
f0:ac:50:ec:3a:6e:f3:0a:57:17:e1:7a:c1:6c:36:
7f:38:1b:15:24:06:3d:87:5b:2d:c5:59:e4:fa:18:
a9:44:fa:fd:e3:c8:9d:01:4d:ed:ce:7f:45:d3:58:
cf:ae:3a:a1:13:9b:02:ae:44:15:53:f0:b6:ba:16:
ac:44:74:3a:66:23:c0:e4:d2:fa:d6:17:e3:1c:d1:
4b:c8:75:a2:7a:2f:5d:a2:c9:7d:d0:e7:8e:d7:6f:
91:be:91:2f:5d:4e:f2:47:f0:9b:f6:5d:04:da:95:
b4:70:41:e7:22:4f:a5:bb:06:00:ba:f5:00:51:b2:
32:09:1e:9d:f8:5a:f1:b8:a2:25:cb:73:85:19:e3:
16:bb:bb:92:dd:a8:28:0d:d0:c4:ab:11:ed:03:07:
f1:ed:c0:02:1c:c4:af:54:65:7b:7b:2c:e9:dd:23:
18:4c:d0:d2:e7:b8:eb:59:ad:f8:eb:dd:2e:b2:a4:
d4:cc:ca:11:7e:1b:5e:2b:51:43:a9:b2:fa:fe:09:
df:db:63:e4:9f:90:3f:c4:d7:ad:af:99:41:9d:d4:
39:50:dc:c5:d9:4e:35:d1:08:89:13:3f:c8:84:44:
49:dd:dd:f4:60:48:91:aa:59:e7:97:8e:c2:ce:ed:
38:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:00:DC:11:87:2D:DD:59:99:80:C3:15:41:B7:65:6C:8E:87:70:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3128e86f-249b-3e9b-9ae4-c625fcbbdf12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
151.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:a8:e2:38:2d:f1:7a:3a:f3:3e:e7:d1:62:5b:18:96:6e:4b:
22:1a:c7:cb:fe:e5:fc:19:6f:1f:8b:1c:95:b3:af:35:37:2e:
36:ad:69:85:72:7e:b5:ef:cd:29:a8:82:8b:bb:a7:12:d2:82:
6b:bb:66:30:f6:f0:19:47:d5:85:63:32:26:4c:fa:71:a1:98:
1e:49:71:b3:28:d8:ce:8f:85:fd:24:5b:b0:0d:21:07:a7:99:
a7:b2:f1:87:53:b5:21:62:20:c5:eb:a4:75:d7:b4:9c:0c:1b:
9f:dc:fd:e0:d5:aa:14:54:6f:90:6b:57:07:c9:99:d8:d8:81:
53:46:14:87:45:10:d0:3d:a0:37:e7:43:78:23:7d:9d:6f:c1:
97:a5:7f:2f:5d:19:e3:b6:31:5f:4e:db:e7:f4:b3:1d:5e:41:
e8:1a:43:e3:6f:6c:1b:d4:6f:67:ff:15:0a:80:72:9b:0d:b3:
fe:bc:e0:14:cf:03:fd:e7:b5:1a:94:89:f5:18:90:77:89:fd:
a1:3a:6a:34:b0:55:d3:8c:0c:ec:e4:63:70:68:97:fd:be:79:
f2:00:0a:ba:cc:8b:d5:7f:85:2a:63:59:e1:85:67:d3:ee:4c:
f0:36:e5:9e:1b:f7:a8:12:bd:e2:fd:d8:8c:02:92:64:b0:fe:
66:e0:47:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:28:56 2025 by rpki-client