Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3e39ebd2-0af1-3ceb-8b1c-e6d15f76bf1d.roa
File: 3e39ebd2-0af1-3ceb-8b1c-e6d15f76bf1d.roa (raw, json)
Hash identifier: NNeJvOaEucDHB2N6qNXard4UWIRJopNdmDtjllYXsU8=
Subject key identifier: 4D:3F:4C:D5:B9:72:A0:1B:97:33:D9:50:99:B7:8B:05:89:30:69:4E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF31AEE7E0D677B0C2A037740
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3e39ebd2-0af1-3ceb-8b1c-e6d15f76bf1d.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 144.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f3:1a:ee:7e:0d:67:7b:0c:2a:03:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=95b92a87-be0d-4b62-9336-5044c0aa9230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:e5:cb:be:f3:c0:ea:00:5b:90:6c:43:b1:
0e:42:07:75:8b:aa:90:0b:2e:ce:1d:7b:a4:50:a7:
9b:a6:f4:94:8a:b2:f5:9d:9a:b5:dc:da:b3:0a:fd:
c4:b6:80:7b:d0:4b:28:ca:7d:1a:9f:4e:75:72:1e:
81:ae:88:ba:83:0d:0d:e7:35:f3:82:ae:75:83:bb:
7e:d4:ef:a4:e5:59:19:c5:2d:65:e8:ab:64:69:77:
87:bd:49:a1:ae:cc:68:4a:9c:f7:fe:40:e9:9b:3e:
a3:eb:26:f1:f1:c4:7e:d1:da:0f:06:4f:c0:e9:fc:
df:a8:09:8c:3c:d8:b4:d8:4c:8b:a0:ae:80:f5:ce:
87:68:c2:15:17:05:d2:a7:96:04:5d:79:28:76:af:
4d:6b:a8:57:84:99:b9:2c:c3:d1:51:81:fd:93:eb:
1d:a2:f2:9a:b4:ae:3c:f4:ea:2d:d0:fd:a0:1e:5f:
cc:c7:4b:52:a9:98:0d:d9:8d:e9:d9:a0:55:32:97:
bb:e4:cc:98:bf:ae:3d:0b:36:b3:8a:bf:05:5a:08:
bd:ce:c7:c5:dd:e8:2f:4c:a8:09:7f:bf:bd:a0:4f:
65:31:4d:f3:35:09:96:ac:b0:c5:39:ca:3e:6a:68:
c3:e9:8e:f2:0c:e2:91:76:33:3d:ec:bf:39:21:4a:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3F:4C:D5:B9:72:A0:1B:97:33:D9:50:99:B7:8B:05:89:30:69:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3e39ebd2-0af1-3ceb-8b1c-e6d15f76bf1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:0e:b0:5f:ca:fd:91:31:18:b8:1f:4f:45:f4:59:0d:2f:7c:
4e:74:de:81:ad:cf:31:da:29:7d:1b:70:93:db:e1:c3:cc:3d:
3d:1e:81:6f:3e:ed:a0:eb:54:0b:87:c8:b0:0e:03:6e:26:4e:
87:8a:5c:77:ea:a8:3e:e9:71:4c:15:6f:86:3d:c3:13:c7:c9:
a5:43:16:a2:9d:b2:eb:9f:71:94:4e:33:78:6b:68:f2:95:8b:
0b:f4:30:34:80:63:8d:53:1e:3d:5b:3a:cc:96:4c:60:cc:6c:
9b:46:87:6a:3f:2c:f9:28:48:fb:83:8a:77:d9:31:21:1d:5b:
ed:65:67:a6:5d:1c:13:af:a5:04:fe:c7:76:6f:f7:a0:99:46:
a0:f2:4b:6f:f2:e6:36:ab:2c:99:4a:6f:52:ef:42:70:98:39:
2b:ae:7d:6f:53:f2:9f:27:eb:ab:4c:66:a8:a8:a3:60:08:f8:
54:47:8b:04:da:dd:ec:e8:a0:d3:27:4b:57:be:e1:79:65:ff:
a2:cb:a1:0b:41:93:98:71:0e:5d:1b:2f:26:e2:4e:02:c8:01:
28:f5:de:a2:5f:fb:15:ff:25:22:fb:e5:44:17:95:42:98:61:
a3:e8:9f:d2:76:8f:1f:0b:25:87:6d:18:3e:3b:39:06:fa:d8:
e2:63:27:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:31:53 2025 by rpki-client