Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c7274bc-cae4-3d21-a92a-cc0039444a7b.roa
File: 5c7274bc-cae4-3d21-a92a-cc0039444a7b.roa (raw, json)
Hash identifier: MMANqVzusYPgcmUaPYcfQ/amZbfpuQCGVnVumrzF3Iw=
Subject key identifier: D7:9E:E8:2A:64:8E:BF:9A:8F:D5:75:8D:33:D6:59:A1:8A:3F:9C:10
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCC40B95A203BC3407E288AC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c7274bc-cae4-3d21-a92a-cc0039444a7b.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 153.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cc:40:b9:5a:20:3b:c3:40:7e:28:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=b4b53900-e375-45d8-bd42-b3be056a1541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:f5:8b:a3:14:39:ba:c3:62:27:77:89:91:
b4:36:b0:e2:e6:64:ef:98:e2:a4:01:fd:92:ec:6c:
77:aa:13:29:b3:ea:af:35:cf:6e:5e:4d:4a:8e:3a:
95:4f:39:c5:e8:ee:15:24:16:75:a6:5c:ec:dd:e8:
7b:61:a8:c8:57:1f:9a:c3:3e:b5:a3:6e:a3:f6:c8:
06:32:8e:d0:2c:d8:e2:3d:30:6a:c2:63:d8:44:09:
4a:24:55:b8:d0:90:ee:41:a5:7b:14:d0:f5:39:d0:
2a:a4:83:6f:3b:88:5a:56:7b:3f:f1:a4:28:b3:42:
83:d6:1f:35:ee:01:45:18:02:47:b3:9e:81:84:ee:
e7:fb:4a:43:0b:fa:b8:2e:b3:1e:40:54:98:3b:50:
90:21:4a:00:a0:60:d2:0a:d6:60:0b:cf:2d:52:b2:
35:22:1b:91:cf:1f:93:1f:25:73:1a:9e:87:f6:16:
6e:af:3d:5f:f9:c6:47:90:21:a1:9b:6f:e4:d4:17:
8c:93:3b:b0:9d:27:0d:c1:5a:bd:1f:33:fd:7b:73:
d3:7a:b6:bb:26:42:51:bf:8e:f7:cc:aa:a6:80:c1:
d3:d3:fb:2c:15:ab:ba:02:fb:14:80:0f:58:0b:33:
73:54:2c:3f:61:14:fb:ae:35:7e:1d:b1:0b:13:e9:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9E:E8:2A:64:8E:BF:9A:8F:D5:75:8D:33:D6:59:A1:8A:3F:9C:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c7274bc-cae4-3d21-a92a-cc0039444a7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
153.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:20:d0:a0:d8:69:72:6d:26:d2:48:b1:aa:a7:af:3b:a4:aa:
b6:3c:25:e2:03:5e:43:58:40:79:33:78:c3:3c:db:19:91:a4:
6a:5f:6a:51:be:bc:f5:03:86:2f:b9:fa:52:56:c7:5a:79:24:
5a:c5:45:45:8e:2c:05:0d:9f:dc:e6:40:b9:a9:85:4b:f1:7d:
29:e2:72:3e:68:c1:e0:a2:bf:54:81:79:e6:0e:8f:f0:cf:c2:
cc:d0:6f:05:58:64:12:28:0c:dc:e8:ae:7e:80:e9:c4:0e:e3:
a4:26:ad:fe:a5:07:29:67:72:a0:6d:e2:41:84:24:75:80:c0:
fd:12:e0:09:ba:1d:99:55:13:5f:3f:ee:14:d3:3e:0a:3c:3d:
54:1e:a4:92:a5:1b:46:ca:b7:df:65:77:6d:a5:77:60:50:9a:
ad:82:db:2a:93:c9:43:08:9c:bd:d2:82:9f:3c:e1:49:03:d5:
3e:cf:c9:06:0c:20:a8:76:35:08:d5:ae:b8:a7:c6:55:08:8c:
6b:59:f8:5e:4d:d8:c3:7b:c0:5b:16:c2:4d:99:08:d0:72:56:
2b:97:66:72:b5:32:af:19:b3:aa:b9:cf:6c:bf:af:47:ee:04:
a2:60:20:c8:f0:d6:5b:27:6a:58:62:8b:6c:cd:9f:25:37:77:
8f:61:0d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:27:51 2025 by rpki-client