Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/52410dcf-03b9-3217-8c0a-0eaa40453f4b.roa
File: 52410dcf-03b9-3217-8c0a-0eaa40453f4b.roa (raw, json)
Hash identifier: Tpdvu0DtpC5zMjTtw8Jx7C5W9I6D1sIXsWry+GmMrXI=
Subject key identifier: FC:6F:D5:F5:76:CA:63:2C:E5:90:6E:C4:A7:2C:AB:D3:CA:27:F3:95
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1767883CE699D9BFF3F77FC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/52410dcf-03b9-3217-8c0a-0eaa40453f4b.roa
Signing time: Tue 31 May 2022 12:00:00 +0000
ROA not before: Tue 31 May 2022 12:00:00 +0000
ROA not after: Wed 06 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 158.221.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:17:67:88:3c:e6:99:d9:bf:f3:f7:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 31 12:00:00 2022 GMT
Not After : Jul 6 04:00:00 2022 GMT
Subject: CN=b1d37bf5-950b-454b-ba69-9df208e6e431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c1:1c:ea:f1:1a:17:1d:ba:f2:51:24:fb:be:
2a:96:0c:cc:8d:01:7c:7f:04:6c:12:cc:d4:27:74:
d7:94:2f:ae:19:6b:99:53:34:12:a1:30:75:ce:e8:
e1:74:d5:e1:b1:0c:33:9c:16:01:c6:f2:65:f2:5f:
7a:60:c8:d5:30:97:1b:e8:d3:29:ae:3b:f7:17:8d:
7d:65:70:ea:7f:fe:29:60:75:98:d1:d6:15:92:20:
8a:9c:a7:1e:81:fa:ae:1d:93:d4:e4:5f:c3:e8:31:
22:2a:d8:8d:26:07:38:66:75:09:a2:72:7a:04:de:
b2:ab:d1:2b:09:85:39:e9:f7:23:fb:90:63:06:c1:
17:c1:ae:51:92:18:99:e6:b3:f1:6f:88:a5:e7:c8:
fd:66:54:9d:4c:28:cf:23:5a:02:34:ed:78:16:45:
2f:60:d5:44:9c:ab:88:eb:b0:96:47:2a:d4:18:72:
b2:35:74:3e:2c:46:8b:5b:7e:56:0c:d1:b4:de:1c:
a9:3f:f1:50:9a:c0:51:1c:c2:27:0a:d0:17:e9:e5:
74:1e:e7:5d:3e:e1:5d:14:39:22:15:d4:72:38:1b:
d2:4b:79:21:ec:32:f4:62:5f:88:d2:f0:a2:27:9f:
0e:c2:d0:06:a3:73:da:7a:92:6f:08:35:8c:e9:6b:
90:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6F:D5:F5:76:CA:63:2C:E5:90:6E:C4:A7:2C:AB:D3:CA:27:F3:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/52410dcf-03b9-3217-8c0a-0eaa40453f4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
158.221.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:a9:e2:15:81:28:0e:57:dd:03:73:9d:a6:0b:fd:d6:c2:26:
c1:ec:24:ff:01:ed:01:0a:d4:0f:48:e1:60:24:3a:b6:48:f8:
cf:a0:2b:08:1e:f2:f8:b5:08:33:ca:8e:ea:be:70:5b:b7:50:
40:66:36:ea:46:93:da:2e:5b:52:37:03:b5:dc:fa:39:82:ee:
bf:e6:e7:18:18:8e:3a:6a:e3:4e:fe:5e:44:8f:8e:6b:5e:5c:
fb:e9:4b:65:82:25:3c:3b:a1:b8:9d:46:58:b2:7e:43:a8:4b:
51:00:8c:39:a6:e5:02:53:d3:b7:a0:0f:6a:da:46:76:c7:b0:
ad:f5:37:ec:7f:f8:45:c4:ea:b0:3e:f7:e7:69:13:fd:58:4b:
ee:fe:a3:c7:78:6f:dc:ff:a6:02:b5:06:ea:d0:05:4f:5d:db:
4a:45:55:18:ff:6e:9b:21:1b:7d:d6:76:ae:69:81:02:57:a9:
e9:6b:15:50:2b:c4:8d:a4:c7:78:bd:b2:d6:a9:a9:6a:e0:be:
15:90:fd:70:4b:3b:87:b6:d6:5c:e2:77:47:89:9d:6c:e2:2e:
9d:f9:83:1b:c1:b9:ff:2e:19:43:3e:d7:bd:50:db:73:51:d0:
3c:11:be:de:05:47:e6:c5:43:7a:36:99:56:22:53:af:8b:bb:
18:30:ab:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:45:11 2025 by rpki-client