Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/50f59eb7-64a5-35e5-a2bb-b380250dc8cc.roa
File: 50f59eb7-64a5-35e5-a2bb-b380250dc8cc.roa (raw, json)
Hash identifier: yXHljxP6LS3ewH3swWgdSGnNEBGyv4+YyrkDMNK3/t0=
Subject key identifier: B3:9C:63:E7:1A:A7:F0:12:F1:64:DB:49:65:78:DA:67:81:96:33:E2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBB11D459A32A741CBCDA96C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/50f59eb7-64a5-35e5-a2bb-b380250dc8cc.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 144.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bb:11:d4:59:a3:2a:74:1c:bc:da:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=9632603f-6250-4352-b97b-13646995610e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:3a:03:19:0b:d4:84:31:ae:73:10:1a:f2:
52:b2:e3:6d:2b:16:f3:a0:f1:60:2e:50:1d:24:1f:
e0:07:e6:0b:de:6c:5c:95:2b:58:2c:ee:4f:84:74:
b0:54:4b:90:90:28:c9:17:a8:76:a7:a7:0c:c6:b8:
e3:4a:db:9b:ff:e9:20:22:f4:46:aa:7a:a1:22:fa:
54:1a:e8:54:b6:a2:97:02:3b:d5:ee:f4:f3:00:c0:
7b:96:bf:2d:c0:d4:1f:3d:ef:25:2c:68:88:c6:62:
18:bc:48:cc:f8:7f:ed:45:8c:da:a0:4b:8d:d2:7c:
7e:84:24:1b:24:85:ed:b8:59:e2:97:5c:95:ae:cc:
ae:b3:a1:ac:8d:ad:ec:78:33:23:a3:08:4c:3d:03:
36:ef:5b:0f:9b:18:e6:24:b4:ad:a7:1e:8b:2a:b0:
41:26:fa:d8:8b:4f:12:2b:a0:c0:21:da:19:e6:e6:
7d:25:3d:fc:03:d3:5f:e6:f8:81:52:be:88:fa:04:
90:be:76:bd:d8:5e:9b:b8:bf:6a:70:29:fa:cc:f5:
14:ca:02:03:27:60:e3:17:7f:f0:b5:fe:3e:b5:a6:
46:67:d0:9c:ad:a6:b6:b4:36:d7:82:b4:b5:a9:4d:
43:37:ef:8b:16:06:cb:53:eb:65:0b:f5:b6:c4:60:
12:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9C:63:E7:1A:A7:F0:12:F1:64:DB:49:65:78:DA:67:81:96:33:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/50f59eb7-64a5-35e5-a2bb-b380250dc8cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:f0:1f:0a:87:8d:d2:d5:89:22:d8:d2:b4:c6:69:8e:8d:74:
f8:08:e2:32:3b:61:8b:29:ec:31:69:c5:ea:67:d7:92:86:a5:
f0:7c:d6:05:17:85:09:15:4e:c1:e4:04:29:42:4f:0a:50:1f:
3d:08:a6:5e:1c:18:d7:f2:9d:ad:58:a4:1c:d0:18:c2:b1:8c:
1d:79:8d:03:62:fb:01:d3:52:73:3f:a8:98:c7:21:15:fb:68:
96:9c:d4:b2:db:e3:ea:73:54:d4:50:04:7d:d2:bc:ff:a3:03:
ba:cf:6d:e2:4d:88:97:8a:87:e5:5f:8f:80:2d:32:69:ae:bc:
5d:82:0a:58:8f:96:7c:fb:38:ce:5f:f1:e0:a7:dc:32:71:31:
77:b6:85:70:45:ff:7f:36:ca:a1:1b:bf:3e:93:02:09:44:ba:
a0:2f:ea:02:aa:5b:cf:1f:e8:7e:4e:4b:fc:40:5a:f3:2b:74:
64:21:7b:34:47:da:14:73:40:78:ea:bd:a7:61:ee:03:ad:86:
d4:dd:6a:5d:4b:da:32:23:dc:61:1d:91:aa:4b:fe:aa:98:5c:
1d:d3:28:28:9d:b6:23:cd:08:b7:ed:37:13:bc:c8:80:4a:33:
32:eb:82:5b:bd:2c:00:06:4b:ec:98:b8:9b:7f:41:76:27:cb:
b7:fa:62:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:08:24 2025 by rpki-client