Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/48facc89-6a99-37f5-ada9-a35f2f6acf24.roa
File: 48facc89-6a99-37f5-ada9-a35f2f6acf24.roa (raw, json)
Hash identifier: T3/hbhDb6yG8AObppA0X4I1Chh+Kp6Mpw8C70IWcrsM=
Subject key identifier: E5:1F:1A:EA:50:24:9A:92:AD:E3:0B:19:F6:67:AC:4F:70:47:6E:28
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DCFE56C850349DF4DE0097B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/48facc89-6a99-37f5-ada9-a35f2f6acf24.roa
Signing time: Thu 05 May 2022 12:00:00 +0000
ROA not before: Thu 05 May 2022 12:00:00 +0000
ROA not after: Fri 10 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 192.39.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cf:e5:6c:85:03:49:df:4d:e0:09:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 5 12:00:00 2022 GMT
Not After : Jun 10 04:00:00 2022 GMT
Subject: CN=743a5ba4-212f-4c30-9aa5-ec8370b01e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2b:db:46:e2:e6:6e:8f:fa:34:93:3a:ee:16:
37:46:5a:bd:44:d2:bf:cf:e2:03:42:dc:26:dc:b1:
22:ee:ca:7a:06:50:41:f0:8a:61:68:08:68:7c:25:
3d:c6:b8:6f:11:82:f3:2d:e4:43:9c:30:4c:df:27:
df:b8:ef:62:d4:89:a2:05:09:bf:d5:73:04:64:ba:
96:4c:a4:74:88:f1:9e:a9:69:05:8a:89:cd:bc:47:
85:b0:4c:ee:4d:10:57:f5:55:0f:24:7f:e5:d0:e2:
a4:8e:87:7e:78:41:5d:5b:31:2a:1e:c9:de:ac:ae:
25:f7:29:02:cc:2d:00:0b:aa:3a:f8:06:0c:62:4a:
e0:fd:7e:0f:4a:80:dd:24:08:81:ba:fe:82:c6:57:
ef:36:c4:4a:ec:b7:bf:fa:62:41:22:07:37:f3:41:
a5:d2:0e:2f:18:14:ac:de:eb:84:0f:37:d2:12:db:
5a:59:c9:9e:ff:54:3e:f0:7d:c9:3b:c3:c7:53:2b:
ce:7c:89:28:0d:13:fa:af:6a:e7:39:12:e5:b5:05:
b7:a7:71:31:98:db:2d:99:93:56:b6:a6:74:18:b5:
06:24:1e:1f:bb:b1:d7:5d:0a:33:d7:57:f9:33:0a:
f4:b4:fe:f7:15:85:af:7d:9f:63:39:f4:70:02:22:
61:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1F:1A:EA:50:24:9A:92:AD:E3:0B:19:F6:67:AC:4F:70:47:6E:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/48facc89-6a99-37f5-ada9-a35f2f6acf24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
192.39.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:fb:4c:ec:14:a8:c8:cf:1c:d3:7a:de:d6:3c:99:52:55:bd:
7e:27:41:8b:a0:6d:78:35:67:ea:a6:98:c4:8c:8b:65:3e:14:
e9:a9:d5:57:7c:9f:f1:c3:4d:9f:a3:2d:44:37:2a:5b:71:d0:
52:b3:90:60:3b:67:76:37:5e:fd:e9:ae:37:ae:08:ff:67:4e:
44:e3:3f:40:0e:35:ab:65:66:d3:6d:a3:63:c6:72:dc:3a:4f:
9d:0c:54:37:79:a9:a7:c7:f4:bf:0a:4c:84:49:1f:40:20:a2:
68:e6:bd:33:1a:62:8c:f3:29:16:c5:63:57:79:8f:80:eb:1f:
62:0d:cc:c7:56:73:cd:8c:ae:7e:64:0b:24:df:e9:36:cd:f5:
24:e7:de:64:aa:3e:2c:3a:0b:7c:9e:3f:74:6c:b1:1c:f3:f6:
de:37:e0:94:fc:b4:48:6e:8b:dd:a5:bb:b7:4d:c4:80:55:3a:
0f:cd:39:7f:fc:41:e5:af:a8:3f:1e:7d:74:14:41:e9:9c:ca:
92:af:62:f0:b5:28:f9:d9:cf:82:f3:17:bb:a6:34:e9:fb:65:
69:ff:24:14:d1:72:55:62:e4:29:a5:db:b5:70:45:36:e9:f6:
30:bc:02:19:c4:54:b1:6f:69:88:b8:dd:3e:2b:36:2c:c4:4c:
21:e5:87:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:20:00 2025 by rpki-client