Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f3f5209-c16b-35d5-b1b3-2f0889926395.roa
File: 4f3f5209-c16b-35d5-b1b3-2f0889926395.roa (raw, json)
Hash identifier: lJ7wmvz3C7qCGy6fNJOOn/ol+0gxkNdItrFeyZERGBE=
Subject key identifier: E2:34:82:A6:86:16:E8:FD:DE:09:81:A0:D0:6B:AE:06:CC:59:A8:13
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7D80C4D50A77854E58E57A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f3f5209-c16b-35d5-b1b3-2f0889926395.roa
Signing time: Thu 06 Oct 2022 12:00:00 +0000
ROA not before: Thu 06 Oct 2022 12:00:00 +0000
ROA not after: Fri 11 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 192.39.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7d:80:c4:d5:0a:77:85:4e:58:e5:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 6 12:00:00 2022 GMT
Not After : Nov 11 05:00:00 2022 GMT
Subject: CN=0f75a834-5be3-4aa2-989f-2f09b437233e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:d1:5a:ae:fe:c6:7e:89:3f:1b:0a:f0:4a:
b9:d0:d7:22:ef:6d:4b:4c:a7:9b:a5:20:79:6d:7b:
53:c4:8d:ad:73:15:08:dd:c9:48:c8:1f:ac:20:5d:
aa:b2:0b:43:53:19:b5:51:f7:d3:4e:94:48:96:87:
f3:22:c8:93:70:6b:20:ab:86:d6:72:5d:06:53:4a:
36:1e:4b:69:7a:31:0a:11:3e:87:a9:af:f6:c7:97:
89:fb:66:ce:0b:bd:00:22:f0:d0:d7:fe:1e:d1:7f:
f9:f0:4a:43:02:02:60:aa:58:ea:3b:01:be:0a:f2:
e9:cf:90:45:90:05:4f:12:ee:f6:46:83:8c:2d:e1:
a4:5c:72:8f:c3:1b:4e:9c:4d:d7:61:ca:54:22:2d:
65:93:f1:94:fa:bd:52:f2:6d:ca:13:b6:9a:e6:89:
f2:9e:ec:f8:c0:6e:56:20:c0:e6:c5:c3:08:5b:40:
51:96:0a:6b:31:12:70:d5:6a:e4:90:a1:93:0b:e9:
41:7b:7c:32:5a:63:c6:28:a3:ff:c0:e4:79:ff:fe:
6f:92:65:16:2d:0a:fd:37:9a:09:5f:14:6f:02:62:
19:2c:4b:ef:89:d7:cc:3b:3a:8a:90:51:92:5e:c8:
17:60:54:f9:31:c3:da:89:02:88:92:71:81:86:61:
ce:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:34:82:A6:86:16:E8:FD:DE:09:81:A0:D0:6B:AE:06:CC:59:A8:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f3f5209-c16b-35d5-b1b3-2f0889926395.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
192.39.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:fc:8d:b9:9c:a6:f4:18:a3:c8:66:4e:9f:2a:3b:14:e4:77:
27:b2:54:d5:58:5b:3b:54:bf:d9:76:4c:7f:46:57:6c:d3:62:
f1:c9:d1:f6:ba:66:c7:a4:de:51:fa:6b:da:78:ee:c6:a9:32:
4e:4e:18:16:74:d1:72:ef:2b:93:fc:16:48:09:c9:0d:c8:f2:
24:08:80:f1:15:ba:54:c8:0d:47:de:4d:c4:db:f0:8f:86:9d:
e8:80:82:b2:f6:ac:e7:51:2b:2b:dc:71:27:4a:34:f8:ba:17:
ff:cd:1c:13:65:27:2f:31:c1:a7:7e:00:17:c0:12:09:a0:7d:
7c:7e:1b:a5:42:b1:bd:09:6d:35:23:b5:11:63:9f:17:ff:19:
49:cf:09:25:88:ed:ff:09:95:52:61:72:1b:13:b6:99:8b:a0:
f1:76:5f:26:31:d9:70:03:52:e9:27:10:1e:0f:3e:e1:e7:37:
b9:ac:c4:79:f2:25:54:e1:41:50:6b:0a:ed:b2:c3:b6:f4:75:
29:9e:11:69:c8:47:c7:2e:19:50:56:2b:b8:b9:26:98:73:db:
b4:21:a9:4d:df:e3:c4:5b:37:fe:81:f7:1f:b9:8e:fd:e1:88:
15:9f:f7:66:6b:de:58:84:6d:78:ac:e6:8c:49:e2:5f:b1:aa:
36:38:46:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:40:44 2025 by rpki-client