Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3be1f2c1-5177-344d-bbc3-a9174c0764e4.roa
File: 3be1f2c1-5177-344d-bbc3-a9174c0764e4.roa (raw, json)
Hash identifier: 6gitBu34D3woZW50+Unej34MgQavDtEvuy6GzFHvcp0=
Subject key identifier: 0D:FD:53:1C:87:FC:11:A7:D7:A9:02:4E:66:53:E1:44:F2:2A:1A:EC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858402F6B12215A18E58E376D5500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3be1f2c1-5177-344d-bbc3-a9174c0764e4.roa
Signing time: Fri 09 Dec 2022 12:00:00 +0000
ROA not before: Fri 09 Dec 2022 12:00:00 +0000
ROA not after: Sat 14 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 157.241.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2f:6b:12:21:5a:18:e5:8e:37:6d:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 9 12:00:00 2022 GMT
Not After : Jan 14 05:00:00 2023 GMT
Subject: CN=7bef5ab2-ae26-48d5-acbe-779ad14c9b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:cc:31:63:6b:e2:a2:a9:36:aa:87:fb:91:
72:75:74:01:66:9d:c7:96:63:9d:d4:dc:bf:f1:74:
7f:43:75:29:56:97:a4:45:8c:a0:26:2f:6c:42:fd:
2f:46:3e:97:b1:fe:c1:c3:de:29:2e:4a:ee:67:9c:
30:aa:c7:2d:50:8b:0e:47:33:6a:c8:06:2c:aa:9c:
56:17:a1:b2:bf:ac:1d:f7:45:85:11:10:ac:c8:16:
f1:cb:41:61:25:12:a4:81:ab:8b:98:bb:64:b9:55:
1a:aa:49:51:26:21:b5:52:16:7d:5d:79:c8:ab:56:
9a:10:83:0b:82:d6:9d:bb:30:82:df:2e:5a:76:7b:
19:d1:09:20:f5:51:35:43:d6:90:c4:d5:60:9b:64:
48:3a:1a:14:ba:76:53:b1:1d:42:d1:f5:4f:7a:08:
13:0c:0d:a2:16:04:93:df:40:1b:44:8c:6a:ea:80:
04:f8:ae:02:24:10:ed:e9:d1:21:27:67:eb:3f:4c:
c1:aa:4c:8d:29:0d:95:5f:70:93:31:0e:0d:b9:ab:
04:48:e9:6f:49:66:63:e5:c9:96:77:21:b7:17:5f:
c7:6f:de:5d:f2:61:12:5c:fd:69:21:1d:6f:e6:f3:
64:3d:1c:99:4d:0f:60:71:62:e2:6a:8a:e7:a3:57:
de:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FD:53:1C:87:FC:11:A7:D7:A9:02:4E:66:53:E1:44:F2:2A:1A:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3be1f2c1-5177-344d-bbc3-a9174c0764e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
157.241.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:b7:7b:03:52:b4:d2:70:f4:f9:2a:c0:17:7d:3b:fe:c2:d8:
b8:17:7e:01:0f:cc:12:1a:37:c3:33:ef:52:9e:81:ac:1c:3d:
55:8c:a7:41:bb:71:4b:39:38:86:81:36:06:dc:dc:bf:84:f1:
05:df:ef:ad:b8:bc:9c:bc:10:58:d4:f1:5b:40:7e:71:23:a5:
90:2c:4b:28:83:88:4c:87:df:28:23:7e:94:85:0f:8c:dc:bf:
fb:07:ab:fa:16:bc:ce:f2:97:a8:21:dc:2c:11:6e:b7:66:e1:
8f:5e:46:bd:d8:3a:d9:3c:92:48:0d:55:cf:d9:51:d4:34:64:
fe:5c:77:12:74:ac:06:9e:0a:ef:4f:e8:58:4a:06:30:a0:bf:
0d:8a:bb:8e:79:ca:15:76:07:40:08:84:99:1f:a5:2c:0b:53:
c9:ef:85:95:a5:00:98:85:e5:9b:46:07:95:13:2c:15:0c:09:
1b:f4:cd:ab:d3:4b:f8:bf:fa:ec:07:c9:b1:9b:93:a0:4c:aa:
43:23:61:b4:5a:95:24:57:eb:c2:29:d8:87:16:ae:6d:5c:1e:
d7:ad:28:1d:47:22:40:a9:66:8a:18:d4:ee:69:14:4c:54:58:
3a:b3:51:1c:6e:3f:c7:bf:02:36:34:28:03:19:5b:ed:9a:8c:
02:91:b5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:25:06 2025 by rpki-client