Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4bb85538-6fd9-3bc3-8982-cf1ca129ca18.roa
File: 4bb85538-6fd9-3bc3-8982-cf1ca129ca18.roa (raw, json)
Hash identifier: pbf/Jftg2rEeL47jJBJoYlP1uKa1GcSvao8S570hAKo=
Subject key identifier: F5:FC:40:26:A3:2A:15:6A:B5:D0:37:35:3B:E4:1B:5A:AA:F2:10:4B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B0893B160836809F6E489F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4bb85538-6fd9-3bc3-8982-cf1ca129ca18.roa
Signing time: Tue 24 Jan 2023 12:00:00 +0000
ROA not before: Tue 24 Jan 2023 12:00:00 +0000
ROA not after: Wed 01 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 152.155.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b0:89:3b:16:08:36:80:9f:6e:48:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 24 12:00:00 2023 GMT
Not After : Mar 1 05:00:00 2023 GMT
Subject: CN=59f60543-a9ca-46b2-9dc8-c65f2cedee5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1e:79:60:0a:dc:23:b1:14:7a:b9:99:67:08:
7b:50:dc:42:71:ef:32:9a:17:6c:36:8a:39:7a:d7:
7a:12:5d:f9:cc:ba:4a:ca:19:96:7e:d4:61:ac:79:
f8:0b:eb:a8:df:9e:f0:f4:a5:72:ce:d2:92:1a:65:
a0:b6:8c:e3:b2:df:0b:74:c9:84:3f:bc:0b:c4:4e:
05:16:88:a9:84:75:f9:5c:3f:69:73:07:a6:39:21:
1c:95:61:e7:8a:d1:d8:e5:6b:60:0f:94:be:0c:54:
f3:ea:a7:92:b7:98:29:7a:60:09:0d:62:f1:28:ff:
7e:42:d7:05:9d:a4:bd:b3:8c:94:6d:83:3d:af:ef:
5d:9b:e8:a3:c8:27:44:09:ab:1c:7c:6e:7c:74:1e:
3e:e7:57:13:70:d6:53:db:47:45:00:a3:ad:c7:cf:
9a:14:a2:34:fa:9d:83:19:b8:73:16:79:17:cf:f0:
4e:9d:f0:d2:cb:cc:1e:5f:e0:47:f7:24:7a:cb:36:
3b:39:c3:a7:3e:d9:87:7e:c4:65:6a:da:60:2c:f6:
5e:6e:65:57:74:be:f6:18:d0:29:79:00:28:a5:88:
bd:0f:fb:fa:a9:9e:d2:0c:ed:3c:9c:c2:e1:86:62:
9b:df:19:d7:bb:c4:ad:fc:ef:c4:6d:47:97:34:2e:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FC:40:26:A3:2A:15:6A:B5:D0:37:35:3B:E4:1B:5A:AA:F2:10:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4bb85538-6fd9-3bc3-8982-cf1ca129ca18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.155.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:65:b6:e5:7f:a9:18:6c:46:69:98:5f:fc:f3:74:2d:b1:b4:
8b:8c:68:19:be:73:99:7c:12:54:1d:01:b4:82:b9:90:0f:33:
0f:c8:c8:99:5d:ea:3e:90:68:76:ea:fc:38:c3:6b:22:e8:e0:
58:cf:f1:12:46:21:e4:bd:a0:a6:3b:bd:e0:ec:ba:af:f9:20:
68:3e:3e:b5:25:95:40:05:12:cd:36:7a:c3:48:3b:7d:e8:d0:
b2:5e:da:87:6b:27:a6:31:75:b6:86:6a:6b:6f:51:d5:c8:44:
a5:12:43:6c:42:d5:d8:9c:c4:2a:8b:cb:0e:d1:a1:ea:57:44:
04:de:34:c4:45:2b:0d:da:57:f9:de:a9:ec:70:98:e1:22:e6:
d3:b5:a9:14:a8:1b:5a:00:ea:18:0d:07:53:95:32:25:ce:31:
17:2d:fc:ce:d1:f4:18:ab:a4:80:da:20:b7:46:25:5c:dd:a1:
e7:4f:f5:8b:8e:2a:ba:3a:f8:f5:1c:2f:01:64:2b:3d:db:2f:
18:47:48:db:a8:8d:99:e4:e1:73:35:13:57:33:fc:03:77:7f:
d8:1a:5e:71:a4:ef:73:da:73:dc:c4:b2:d1:b9:23:a3:78:ac:
0f:73:69:f8:de:8b:e0:cd:0f:96:1a:15:d9:fe:10:73:7f:96:
da:a4:74:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:41:45 2025 by rpki-client