Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/59707ab3-a6e3-308b-8de5-a97d485e0e4e.roa
File: 59707ab3-a6e3-308b-8de5-a97d485e0e4e.roa (raw, json)
Hash identifier: /li/L5moisgv70+oKcEDzL4w/maGvh+t1FA7FN15dNw=
Subject key identifier: 0C:75:FD:65:06:77:3E:CF:8E:4B:3F:FC:D1:76:37:82:B8:E7:9D:A7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF3A86C9A56BBD593547CBB00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/59707ab3-a6e3-308b-8de5-a97d485e0e4e.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 47.10.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f3:a8:6c:9a:56:bb:d5:93:54:7c:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=01528439-8983-4433-842e-3a84c7b64f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:74:9f:6b:8a:e5:ce:14:26:5d:3a:12:53:
12:ad:f6:46:0a:93:5f:06:20:05:3b:66:c8:30:6a:
cb:ef:fa:45:5c:07:19:5a:60:14:7b:0f:6a:1c:90:
dc:b6:ac:df:e1:06:e9:a2:45:53:da:8f:17:1b:41:
20:91:2c:10:57:04:1a:89:33:1c:97:cf:96:b3:06:
13:be:e1:fa:3f:33:b7:cb:84:0e:48:34:f4:28:db:
e6:3a:d8:e2:46:63:3b:2b:5c:b2:bc:1b:e4:ee:ef:
f8:d2:7f:3d:6f:19:01:90:d3:4a:3d:49:6d:82:5a:
e0:23:0c:e3:e3:65:07:bd:95:68:e9:a1:83:54:08:
32:e8:59:71:89:2b:02:c4:10:6a:c6:ac:c8:80:37:
80:7e:3c:e9:5f:14:2a:74:e8:ef:60:3a:17:40:3a:
95:5b:55:34:a5:8a:1e:b3:6f:18:1f:8d:61:87:47:
d9:26:da:52:4c:30:ea:75:57:41:b0:ac:38:07:09:
a5:ab:c1:97:99:70:28:26:58:a6:1b:bc:5c:85:37:
6c:ca:58:09:30:57:c7:09:2e:d5:4d:b6:ee:17:e8:
d3:c5:51:dd:5c:4b:f3:3c:22:db:ab:13:35:55:81:
56:f3:2d:62:28:ef:e3:10:1d:94:d8:19:d7:8f:c3:
85:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:75:FD:65:06:77:3E:CF:8E:4B:3F:FC:D1:76:37:82:B8:E7:9D:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/59707ab3-a6e3-308b-8de5-a97d485e0e4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
47.10.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:28:2b:17:4e:08:59:79:9d:21:bf:c0:da:1b:c6:2d:d2:a2:
74:50:c9:6e:ad:fb:75:53:93:d5:77:04:84:12:83:4f:4a:35:
8a:73:9a:76:86:2a:8b:86:62:90:c0:b7:2e:04:ea:0e:12:b2:
00:74:99:e2:78:66:1e:ec:be:fa:0c:b6:bc:07:02:5d:16:ad:
fd:d1:7e:bb:d2:4c:6a:ea:e3:65:e6:e9:40:e8:fb:04:5c:59:
e6:19:75:f1:7e:f1:88:fe:e7:84:ee:f7:a8:9b:c2:9a:59:c6:
13:8d:f0:0d:76:e1:fe:a3:ac:e8:34:58:f6:4d:da:29:73:81:
7a:34:42:a5:3b:da:8c:58:97:ac:c6:6d:7e:4e:86:ad:1e:26:
83:5b:3d:a5:da:56:b5:e8:02:fd:31:33:e6:6a:ca:38:ee:c1:
d4:25:88:af:42:71:2d:ed:92:56:aa:53:78:49:2f:72:e2:34:
b6:99:0e:64:a7:34:c8:c4:fe:8c:8f:e0:69:4c:ee:dc:e7:bf:
f7:9c:22:73:d3:88:f7:6f:55:34:56:ba:6e:50:ab:bd:5e:34:
5b:16:ed:9b:3d:9f:50:8e:3e:81:a7:7c:13:9d:59:c7:4e:d8:
b1:4c:76:44:f2:b9:77:62:6e:89:94:f5:98:e5:5a:55:de:1b:
5e:27:f5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:18:15 2025 by rpki-client