Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5253a7bf-0d68-3f43-a3d8-794fa93f4a97.roa
File: 5253a7bf-0d68-3f43-a3d8-794fa93f4a97.roa (raw, json)
Hash identifier: rJ3GGIIuN2jIuI0BYpryQMr99+ZPSIhyJSAumJgMeMk=
Subject key identifier: 21:A4:36:BC:91:30:90:EA:EB:05:DA:3F:55:AA:24:1B:31:85:77:3E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840896C31B86E54372D7E098800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5253a7bf-0d68-3f43-a3d8-794fa93f4a97.roa
Signing time: Tue 10 Jan 2023 12:00:00 +0000
ROA not before: Tue 10 Jan 2023 12:00:00 +0000
ROA not after: Wed 15 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 152.155.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:89:6c:31:b8:6e:54:37:2d:7e:09:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 10 12:00:00 2023 GMT
Not After : Feb 15 05:00:00 2023 GMT
Subject: CN=c2e6e8bb-7e06-4711-b3dc-50dfb475e948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:e1:df:00:15:53:e6:eb:d0:5d:da:36:63:
a9:16:48:91:a8:7f:9e:60:ed:ed:7e:a7:75:19:8b:
01:b4:6b:2f:49:e7:83:20:1b:32:60:0a:c0:2b:1e:
90:ff:99:e1:53:fb:87:7c:47:fd:f3:a7:43:9c:01:
f9:16:fe:86:03:82:ad:53:54:46:06:20:24:83:4d:
37:9d:5c:a4:1d:2a:01:16:5f:bf:82:60:db:15:98:
5a:22:a2:4c:c3:8b:2e:67:96:82:f1:4d:0f:be:bf:
13:4c:96:40:77:d1:49:de:fe:b7:d1:b2:db:56:16:
a6:8b:be:14:da:7e:67:f7:88:65:62:fc:6d:0f:06:
c9:66:29:88:99:ed:e0:75:79:09:8f:25:28:3b:49:
da:b3:12:50:73:2c:8a:9e:7b:f2:25:f2:c0:8d:65:
a9:dc:89:ea:14:7c:d4:bf:22:8f:98:92:4c:f0:b3:
4c:f5:5e:be:79:37:7d:41:0e:a7:38:f4:e9:f5:df:
01:1a:8c:ca:f7:64:87:ae:a7:1e:ce:46:26:29:4f:
8c:7b:c3:37:6f:8e:e3:45:28:6d:0f:04:2d:3e:83:
88:d5:81:35:65:91:9b:f4:45:03:42:cf:9f:aa:77:
62:fc:67:75:68:90:f7:c3:6b:17:d0:7c:3e:30:1f:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A4:36:BC:91:30:90:EA:EB:05:DA:3F:55:AA:24:1B:31:85:77:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5253a7bf-0d68-3f43-a3d8-794fa93f4a97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.155.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:d1:a5:78:1b:4c:43:fc:68:fa:65:42:c9:62:e8:5e:f4:6d:
35:b8:a1:a4:42:6e:af:93:0f:91:92:58:16:2e:6b:ff:9e:a1:
b6:63:2c:44:78:b5:74:5b:cb:cb:ed:ed:48:c3:46:cf:87:04:
33:1b:19:29:68:32:55:f8:83:f5:13:2e:db:c0:8c:6a:25:66:
b9:f9:73:53:ae:34:ad:89:73:01:48:98:87:41:58:19:a2:a1:
92:71:76:66:65:71:d2:36:35:fb:4d:ef:cf:0a:67:99:aa:b8:
3e:b6:0a:b5:13:81:ad:51:39:cc:fc:07:93:c2:eb:99:88:26:
98:c2:de:03:cc:f3:9d:b6:b1:a5:31:42:99:7f:c3:b2:e3:9e:
72:1e:17:81:19:71:dd:de:f3:9f:d8:7c:83:6a:82:9c:29:4e:
e2:7f:ca:cb:fd:99:61:21:4c:af:bd:12:95:58:74:fc:82:b3:
0a:f8:45:88:55:81:37:0c:f9:b9:f3:56:a7:a8:cc:f3:21:70:
45:46:90:49:0e:43:db:4e:28:70:15:9d:ea:9f:7e:e0:1d:66:
f0:72:06:37:db:37:40:7b:7c:8e:7d:30:cb:cd:9c:c0:6e:54:
6c:0f:58:ae:c4:b6:05:32:2b:5c:76:d6:89:31:73:54:1d:32:
6c:97:10:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:59 2025 by rpki-client