Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/360e40b4-0a5b-33de-9d91-7d783587467e.roa
File: 360e40b4-0a5b-33de-9d91-7d783587467e.roa (raw, json)
Hash identifier: wSikeH6GdP8ejpjXUTboOyT35Ed9V9Zvpnltr8iNUOg=
Subject key identifier: 74:96:52:76:7E:C4:ED:85:E5:5C:26:DF:C4:EE:A3:36:31:BA:84:EF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858408F8EC5C6B68C5E37BED10E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/360e40b4-0a5b-33de-9d91-7d783587467e.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 144.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8f:8e:c5:c6:b6:8c:5e:37:be:d1:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=e3259fda-88cc-4882-b693-311fd44d1ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f3:8d:77:28:9e:48:0a:b7:39:5a:26:b4:f4:
f1:9e:09:c9:d4:9f:64:5d:3b:26:61:50:5f:35:37:
5d:bb:cc:04:36:d0:db:b6:44:08:40:c9:35:60:53:
7f:24:f1:ed:d8:1f:68:e1:0d:53:8c:3a:64:68:1c:
5f:de:73:19:ed:01:20:51:f3:85:10:52:3a:59:f5:
0a:b5:c8:c1:07:cd:2a:61:7d:59:f9:b0:6b:9c:69:
4b:8f:09:89:74:66:4d:38:a7:63:85:60:27:98:d0:
43:ff:12:90:0f:9f:c5:c5:fa:c9:b5:2e:a8:c1:8c:
fd:b4:86:12:ce:c6:59:50:40:23:55:0c:9d:54:73:
58:46:e6:c2:d0:fc:9e:86:ac:80:10:6b:3d:2c:9c:
b9:67:80:75:62:b1:8e:ef:bb:04:4d:d1:be:c1:47:
47:10:e3:a7:af:46:90:bd:2d:6f:99:59:8c:3c:da:
8d:34:3c:53:03:50:4e:b1:a8:21:ed:7d:2f:8b:4b:
95:1d:3d:d8:5f:7f:9c:18:55:77:11:6e:44:51:d7:
d6:e6:f0:39:60:bd:fb:f1:f3:5a:c5:d6:1a:40:03:
43:b6:7d:13:84:80:6f:28:d6:01:51:28:34:7f:50:
f4:2c:3e:19:59:14:b7:9f:04:ba:8c:46:0b:4d:88:
8f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:96:52:76:7E:C4:ED:85:E5:5C:26:DF:C4:EE:A3:36:31:BA:84:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/360e40b4-0a5b-33de-9d91-7d783587467e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:08:20:bd:62:e5:fa:ad:da:a8:70:b2:7b:7a:bd:e3:2b:de:
e1:b6:9d:96:16:66:b1:65:78:50:80:1e:46:2a:19:7f:1d:02:
61:94:f8:7c:ed:97:6a:b2:9f:26:13:5a:32:4d:4b:0a:56:1c:
0f:0c:a1:8d:d9:fb:9d:f0:aa:d6:ea:39:4b:9d:be:05:24:4b:
22:09:ca:95:d6:70:30:c4:86:22:40:8f:db:34:1b:3a:3d:15:
d7:45:60:4e:4e:83:5c:2a:99:51:7c:b5:cd:ef:07:5d:7e:4c:
93:7d:91:ae:77:9e:dd:8d:b9:dd:71:a8:9c:b3:cf:01:09:5a:
32:ad:c1:73:5a:a2:f7:11:61:12:aa:71:66:4e:84:e2:12:2a:
88:62:19:91:e2:80:02:ef:f5:cb:21:e8:6c:d0:48:c9:77:be:
ef:bf:98:d9:30:ad:65:f1:43:f7:fd:ec:94:75:26:6b:f6:e5:
7b:e5:47:01:2d:7e:77:b5:5c:fd:f9:c6:9d:d5:47:fe:65:87:
d3:93:13:61:72:a7:46:6d:cf:10:6d:f7:a3:d1:98:ae:96:5d:
e1:c1:38:ce:98:41:80:8a:9c:49:52:0c:83:ca:4b:32:79:5a:
6a:3c:39:d4:02:22:8d:c9:41:c8:ba:af:5f:dc:97:71:c1:ac:
a8:af:5f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:23 2025 by rpki-client