Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3d541be1-c34f-3bce-b696-217f41e266ff.roa
File: 3d541be1-c34f-3bce-b696-217f41e266ff.roa (raw, json)
Hash identifier: /aMBp7n+CDaU0lXbX06ni7XLwvdq7h2EkGQrZtra4uo=
Subject key identifier: 66:C3:17:B8:75:28:7A:35:49:3C:E3:09:F4:68:BD:08:4B:14:E7:76
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBE4027853F3EF3F2E109DF20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3d541be1-c34f-3bce-b696-217f41e266ff.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 152.25.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:be:40:27:85:3f:3e:f3:f2:e1:09:df:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=d5c2eae9-de25-41ae-bb58-0327c3075eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:1d:56:86:63:48:8d:98:1a:93:ae:96:d8:
fc:f6:f0:a9:30:fe:32:3b:33:ad:3c:89:51:52:8e:
81:f9:e6:bf:b1:0c:0f:0c:1c:c2:0c:cb:b8:25:ec:
b7:d1:c5:bd:5c:ee:f5:6d:96:2f:df:99:42:10:4e:
dd:a2:f8:dd:fc:dd:d6:b5:72:0c:2a:b2:94:69:74:
61:e5:63:3b:6e:64:ad:67:38:27:f6:92:75:ec:55:
2e:17:4b:d7:df:19:95:4c:f8:43:8e:c2:0d:38:9c:
a6:79:b9:fe:d5:e5:08:a1:1d:4d:20:cc:4f:18:f6:
ce:4b:38:5a:68:6e:35:e3:01:15:cd:3e:c6:ae:02:
3f:fa:3f:bb:30:0a:ba:52:59:3e:eb:7a:a0:2f:1f:
b8:7e:fb:00:7d:11:04:00:5d:ea:41:e2:f8:16:b5:
14:b1:9a:c2:5b:42:76:73:9f:b1:95:2e:b9:aa:cb:
85:be:78:1a:96:97:f0:95:74:f1:09:78:30:f4:6a:
6e:2f:9b:e6:39:6d:f7:51:e4:90:b6:52:a0:39:20:
22:48:bb:3e:30:21:88:0a:b0:d0:66:c9:cd:9c:6b:
84:2d:bc:4c:4e:c8:16:c4:ba:72:e6:8f:c3:ac:10:
25:36:e1:61:52:e0:74:cd:92:33:10:6c:71:c8:a7:
7f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C3:17:B8:75:28:7A:35:49:3C:E3:09:F4:68:BD:08:4B:14:E7:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3d541be1-c34f-3bce-b696-217f41e266ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.25.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:10:c4:bb:76:80:04:7c:05:a6:d5:a7:ee:f0:f5:6b:da:19:
f5:d2:c8:99:6d:66:87:0b:6a:13:23:80:b3:a0:45:3b:58:e4:
ca:07:f8:8f:02:00:7a:5f:b9:3d:a1:4c:a4:d4:1f:f3:45:be:
6b:b3:0a:85:bf:7d:e6:f4:fd:f4:86:2b:2e:9f:b3:72:fa:41:
4e:08:8e:ac:5e:ee:a3:41:37:6e:1e:b1:64:f8:8e:5b:06:d6:
99:7e:68:31:ea:52:75:18:ae:29:bc:8b:0d:6c:19:88:79:36:
c6:11:6b:c3:9c:95:48:fc:8c:af:c4:1b:4d:f4:76:3f:05:b5:
bb:ec:ec:fe:a1:41:e5:38:e3:86:78:f2:7c:bb:c7:2e:2f:cd:
95:e2:9d:1a:c3:2c:ca:d9:c3:98:6d:b8:47:6c:4d:88:07:0a:
8d:6d:88:39:44:72:d1:1f:26:16:08:4a:c6:e3:ce:60:b7:aa:
e3:59:ff:de:4c:87:9b:56:1c:26:c4:ee:51:66:f5:c7:70:22:
2f:da:43:35:20:be:d9:44:1d:80:b4:75:36:77:6a:43:21:bc:
16:e6:0c:b8:cf:08:c3:0c:6f:87:9c:a1:31:b6:27:0f:62:76:
f3:e6:30:1d:89:fc:a9:77:d9:3b:13:e3:dc:44:2e:e3:8c:c2:
e3:87:30:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:15 2025 by rpki-client