Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5697569b-756d-38e3-9aec-7dbcf078db69.roa
File: 5697569b-756d-38e3-9aec-7dbcf078db69.roa (raw, json)
Hash identifier: AFB7BDLRhDMeC4GApvVzxuZZxKWu1Sy/IA/68PNHb6g=
Subject key identifier: 8C:65:B5:90:B5:75:B2:47:2D:6A:E8:8C:87:69:A1:1A:AE:45:2D:BE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F8288DCE75A0E9B36E1065B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5697569b-756d-38e3-9aec-7dbcf078db69.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 141.139.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:82:88:dc:e7:5a:0e:9b:36:e1:06:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=33c81c57-fcb2-4834-a224-a9a2041befd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:03:e3:d3:f7:4a:f9:6d:b2:56:fe:4c:d5:
e3:97:c4:5c:66:8e:d2:d5:4c:4d:2e:c3:c9:1f:f3:
8a:7d:6c:43:6d:89:48:16:22:49:d2:aa:f0:5c:da:
90:1a:a0:0f:38:d2:41:79:81:46:28:ec:cd:e1:e1:
30:94:26:93:53:22:20:4c:59:49:a9:fb:38:a8:38:
4d:cc:cc:cf:85:72:dc:98:cc:f6:2b:1a:5b:f9:a6:
be:94:31:09:29:3b:19:ff:cc:5c:77:2d:e4:76:90:
08:59:d1:63:0b:a8:d9:d9:64:28:90:fd:17:60:81:
3e:53:96:cd:3c:fc:fb:5b:e3:34:71:de:04:a3:48:
1a:69:76:84:9e:67:6d:6a:9e:50:63:12:37:13:ca:
ca:fa:75:b9:a6:99:ee:ff:20:82:bc:42:93:c0:2f:
a9:27:73:7f:d8:5c:40:01:dc:68:89:6f:e2:41:a9:
e8:25:a7:1f:f3:98:89:2c:3f:d7:6e:ea:f6:6e:b6:
cd:20:5b:15:08:b3:68:1f:3d:8b:6e:4e:2b:24:fb:
88:dc:e5:06:ed:fc:bb:18:b8:73:40:c8:67:82:86:
d6:d5:a0:da:63:7b:02:7e:5e:b2:58:44:be:35:d2:
e7:f2:39:4d:5b:ae:d5:e6:80:ba:40:c2:f2:d9:85:
c8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:65:B5:90:B5:75:B2:47:2D:6A:E8:8C:87:69:A1:1A:AE:45:2D:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5697569b-756d-38e3-9aec-7dbcf078db69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.139.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:29:01:a0:df:e5:4b:fd:1f:fc:61:bf:17:f0:e5:64:14:06:
84:df:fc:d8:69:c5:4d:8b:17:4c:be:d4:fc:43:b5:88:c6:af:
da:f0:7c:4c:8c:33:7f:e0:a1:82:0a:d5:21:b1:b5:90:a6:25:
2a:7b:53:41:2f:37:aa:40:0c:76:44:fe:f0:02:08:63:c4:98:
2d:47:4a:93:ab:90:96:5e:40:22:a2:04:af:aa:bf:fc:f3:06:
8f:95:47:80:cc:0a:ea:a6:f7:94:8a:d3:f6:bc:b9:53:c8:9b:
14:af:4f:d3:9d:fd:39:15:82:ae:11:ad:b2:41:91:d2:c6:85:
38:c6:9a:1c:50:a1:64:4a:21:07:55:e9:1d:2f:93:da:3e:b5:
b4:88:34:81:72:14:37:49:19:ee:21:cb:61:95:41:6d:d6:c7:
17:f8:4e:e3:3e:d7:c4:80:fd:f6:71:7a:8d:a8:69:8d:50:ed:
6f:69:40:49:ca:60:02:ed:bd:03:1b:08:e2:08:f6:f8:7b:ef:
5b:bf:53:0b:a2:15:6b:62:b5:32:da:67:1c:db:25:fb:7e:ea:
b6:f7:b2:14:e9:ad:15:83:61:67:be:11:8f:44:40:ee:27:26:
fa:c4:2b:fe:69:8b:ca:d3:24:88:a4:2e:54:4c:2c:f2:0c:12:
9d:8f:55:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:46:49 2025 by rpki-client