Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43ce43f5-ecb0-343f-87be-5636f964154e.roa
File: 43ce43f5-ecb0-343f-87be-5636f964154e.roa (raw, json)
Hash identifier: CX+jVfs+wnmBs4E57qIuk5jca4nrTR4vUf2drlmXHKw=
Subject key identifier: 46:89:F1:7D:EA:8F:C3:93:AB:61:F9:DB:DC:44:7A:EA:51:76:48:C2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E945D2C738F8FAFB95AB2E500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43ce43f5-ecb0-343f-87be-5636f964154e.roa
Signing time: Thu 14 Jul 2022 12:00:00 +0000
ROA not before: Thu 14 Jul 2022 12:00:00 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 153.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:94:5d:2c:73:8f:8f:af:b9:5a:b2:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 14 12:00:00 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=70242235-a9c8-41d7-b1c2-03581fa2dede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:e9:7e:05:d4:91:ae:38:fe:7c:23:5a:26:
10:03:d3:19:c9:8c:ce:2f:8b:79:4b:c0:3a:f3:cd:
ce:76:19:db:c7:d5:7f:6c:e8:97:55:74:27:f9:34:
55:7f:32:8a:27:82:50:7a:a6:2b:9d:34:f6:aa:f1:
08:f6:19:54:2d:7d:dd:a7:e1:2b:84:86:03:27:8b:
80:bf:99:42:de:29:1b:15:44:43:1e:6d:bc:5f:41:
c1:56:6b:ae:05:83:08:90:9d:52:e0:e3:00:c3:19:
73:a6:d4:e0:48:56:0b:f2:ca:c0:a5:14:14:41:b8:
40:a7:19:5e:41:de:b0:f6:2d:f1:de:02:c1:28:88:
00:15:aa:35:21:f6:bd:8b:29:c4:09:e7:77:04:a7:
a1:23:19:60:c1:1e:8c:56:69:db:df:6e:e7:24:e1:
d4:a3:dc:13:54:ea:29:0b:6d:e1:ad:45:4d:f9:0e:
8e:e5:a4:a2:bd:d2:53:3f:23:2b:b3:f5:1f:eb:6c:
37:2e:c4:0c:2e:0f:3b:ac:66:74:99:bc:ef:28:1f:
ac:56:49:65:36:18:02:84:49:6c:b3:f7:3b:81:93:
fe:7e:9a:f5:f1:5e:88:57:61:90:52:3f:79:8f:8a:
ed:e4:e0:0c:c8:8e:99:51:09:e3:b9:84:0e:d1:e8:
37:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:89:F1:7D:EA:8F:C3:93:AB:61:F9:DB:DC:44:7A:EA:51:76:48:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43ce43f5-ecb0-343f-87be-5636f964154e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
153.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:93:97:27:c2:6d:4d:1a:3d:24:a7:23:cc:f5:81:5b:48:eb:
35:3a:dc:53:ec:cc:68:b5:9b:ea:73:21:18:4e:81:da:af:54:
c7:85:52:cb:8d:0b:d8:23:27:c9:19:3d:cf:61:ec:54:da:d8:
06:9b:e0:36:7e:05:a9:6d:c4:06:d2:fa:d6:24:21:d9:f0:78:
07:dc:18:e4:80:7e:1a:b3:b2:06:4d:ca:b0:f6:a0:b2:5c:d9:
da:32:55:0a:af:ee:f1:28:0c:db:43:92:c3:39:59:b9:36:ee:
4c:d7:76:96:e3:8d:b7:23:9e:1b:11:a2:a8:e8:29:41:11:85:
a8:82:e8:ab:31:78:21:27:5f:4f:6e:af:10:a7:1e:63:f8:77:
0d:1b:38:d0:5c:66:0e:8c:48:d2:f9:31:ca:6d:9b:86:14:ad:
8e:56:b7:54:23:36:bf:80:e6:0f:73:54:f7:07:38:d6:4c:db:
88:6b:e6:02:76:6e:dc:64:86:9c:bb:f8:13:74:72:87:65:0c:
59:97:59:92:da:47:b5:a7:04:fe:2c:2c:39:8e:fa:28:b0:f1:
32:77:e1:04:bc:ba:42:10:ec:23:09:91:06:56:83:19:49:58:
6b:12:aa:39:dc:96:c1:0b:02:8e:10:a4:77:49:47:27:db:4a:
e1:24:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:13:14 2025 by rpki-client