Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34a7291e-acde-3178-bb92-05d7de3fb0ed.roa
File: 34a7291e-acde-3178-bb92-05d7de3fb0ed.roa (raw, json)
Hash identifier: xelbUa5gRVUXnxdNc+Vrr6gmdLkGm4TyxhU1KgOi8t8=
Subject key identifier: 8C:17:77:26:B4:21:52:68:14:47:13:10:3D:FC:1C:BB:A0:3D:93:62
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E33D8565CAE52BC84A6E66A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34a7291e-acde-3178-bb92-05d7de3fb0ed.roa
Signing time: Fri 10 Jun 2022 12:00:00 +0000
ROA not before: Fri 10 Jun 2022 12:00:00 +0000
ROA not after: Sat 16 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 156.64.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:33:d8:56:5c:ae:52:bc:84:a6:e6:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 10 12:00:00 2022 GMT
Not After : Jul 16 04:00:00 2022 GMT
Subject: CN=13d26690-acf7-466c-bf07-dec44aabe9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b4:32:71:64:f2:b4:35:b6:e2:f3:ae:d9:06:
e3:e2:e6:87:d6:b6:e9:63:75:bb:c8:c1:ad:c3:c3:
c0:ba:59:a1:e3:9b:54:f8:b6:7e:d9:7c:e0:db:ba:
1f:29:73:62:e2:15:ce:c9:88:81:c8:fe:58:ec:bc:
45:d4:34:31:b1:cf:ee:1b:8e:d5:06:b1:0f:30:00:
7f:98:7f:25:84:51:57:4e:f0:de:c2:9f:81:f5:93:
75:22:62:ea:69:58:b4:ec:92:57:c6:e3:45:fe:90:
ee:1b:b8:e3:ec:5b:9f:d6:02:0f:60:03:9d:71:f2:
03:05:b2:88:90:d8:54:42:f8:39:68:a8:79:01:15:
4d:5d:e4:4b:f0:65:60:a0:07:f9:eb:2f:ab:92:2b:
ba:22:52:d8:a1:83:1f:10:37:a8:e0:29:fd:bf:1f:
2b:d9:af:5d:ac:5a:c3:68:59:da:84:07:65:15:f5:
c2:a6:76:e2:92:b0:9a:0a:6f:29:50:c2:07:b7:63:
71:76:07:fc:28:13:d8:6d:01:8d:81:fa:bc:8e:d8:
35:c5:04:47:94:28:e9:65:b9:79:ff:62:49:01:0f:
6d:7f:a0:90:15:6f:6e:af:0f:33:12:77:04:35:04:
0b:a9:c8:70:a2:56:99:dd:5e:86:4b:ab:6b:5d:32:
9a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:17:77:26:B4:21:52:68:14:47:13:10:3D:FC:1C:BB:A0:3D:93:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34a7291e-acde-3178-bb92-05d7de3fb0ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
156.64.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:c3:af:ab:10:08:13:5b:af:aa:4f:e3:4f:9e:48:4a:62:81:
e1:c6:84:9a:dd:5c:84:2e:d2:e2:b5:8f:22:c3:a8:65:ee:6b:
d2:cc:14:12:7e:2d:3e:9c:bf:1d:e1:d2:2a:3a:83:28:b3:64:
e0:94:56:5b:f9:3e:ee:59:df:0d:fa:23:6c:47:d2:d5:eb:cc:
b0:e3:5e:9a:93:2d:25:96:80:0c:24:3d:ae:3b:aa:61:22:40:
37:2b:3c:82:28:8b:f8:08:32:24:0e:e4:02:c9:2e:32:44:36:
f9:40:e2:a3:04:c9:cd:7d:12:8d:5a:d8:ff:3b:86:a2:7f:5d:
5a:87:a1:0b:09:87:19:d0:ef:bb:1c:02:f6:ff:e6:63:15:c6:
54:6c:1e:86:f3:f2:69:20:71:0d:f7:b0:b0:d2:00:3b:ab:e4:
8f:1e:d2:33:09:aa:72:b4:ee:b8:24:49:2d:01:b2:7b:0c:57:
b8:b8:e0:ea:3a:95:fd:c7:cc:65:ce:96:20:2b:69:b8:04:5b:
7d:66:82:0d:1e:e5:46:58:f8:53:86:7d:84:b6:d2:31:31:1d:
98:f2:88:34:06:4f:d3:d3:a7:4c:3b:48:d0:58:04:df:74:cb:
1b:4f:67:6c:b5:a4:b6:d1:cf:45:d0:c3:ee:4e:00:ed:da:fc:
4e:f0:f3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:32:31 2025 by rpki-client