Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5f29a401-e124-31be-ac23-d9e2fe0ca92e.roa
File: 5f29a401-e124-31be-ac23-d9e2fe0ca92e.roa (raw, json)
Hash identifier: V/TvlgmTwBzT4LrpyUzLUATIMz84OUWUNL4gaLqpGPo=
Subject key identifier: 61:BB:B3:F0:90:02:3E:53:7E:D4:76:E4:BE:48:48:C0:DC:D3:5B:88
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F80F68FA4BF622E41390074C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5f29a401-e124-31be-ac23-d9e2fe0ca92e.roa
Signing time: Fri 07 Oct 2022 12:00:00 +0000
ROA not before: Fri 07 Oct 2022 12:00:00 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 156.7.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:80:f6:8f:a4:bf:62:2e:41:39:00:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 7 12:00:00 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=765f4b23-29d8-42e4-bd4c-9275ddb20ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cf:09:af:8d:dd:b1:d8:fe:48:e4:02:c0:52:
df:13:c4:7d:f6:48:e5:30:16:cc:a6:05:4c:84:42:
5c:7f:a3:bf:23:77:c1:0b:fb:12:45:a5:7c:bf:9c:
b1:51:ab:ef:43:10:ff:f4:6d:b8:93:38:a9:71:21:
46:27:bd:60:f8:75:e5:1b:da:c4:98:b0:18:f6:90:
36:1f:b4:08:68:75:7d:72:c2:87:14:63:a6:4f:e9:
cd:f9:a3:f6:52:ad:5a:83:bd:12:13:74:8a:56:de:
74:83:59:de:d5:e4:b6:45:50:bc:88:7a:78:43:21:
11:af:fa:9f:a4:27:4b:11:ea:65:d3:48:40:8f:54:
4a:d7:90:43:68:78:bf:c3:9a:64:b9:50:c2:d3:03:
dd:75:2f:c3:64:da:5f:36:06:fb:30:08:7b:3e:a9:
64:46:d8:1c:bc:e6:9a:6b:f3:03:1b:9b:37:ef:50:
12:79:8f:79:a3:32:72:9a:fa:cd:0c:d8:fa:1d:6b:
83:d1:5a:90:c0:8a:5f:40:a0:f6:22:1f:20:c3:a8:
70:00:18:d7:ed:f4:fc:64:3d:3c:c8:e9:28:2e:73:
98:e7:85:b2:ae:5a:ba:4b:cc:99:04:63:43:4b:d3:
bd:03:e5:d9:5d:7d:cc:ca:0c:ab:1d:66:eb:1b:06:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BB:B3:F0:90:02:3E:53:7E:D4:76:E4:BE:48:48:C0:DC:D3:5B:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5f29a401-e124-31be-ac23-d9e2fe0ca92e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
156.7.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:47:bc:ed:04:ef:81:f9:fb:54:f4:f4:e4:b3:9f:3c:b2:06:
88:9a:4a:da:e8:43:99:de:8a:0e:4e:a6:26:51:5e:38:21:ca:
8b:0d:f9:77:18:ba:12:48:66:49:a6:96:c6:63:f2:c8:cc:54:
9d:6e:79:58:07:dd:a8:0c:99:65:0d:26:35:b3:2b:09:a6:f0:
4f:3e:76:8e:0e:6f:9e:d0:11:0f:a1:77:58:e4:85:54:7e:b7:
92:0c:9b:7c:ff:a6:af:4f:95:20:31:9e:8c:46:f7:9a:76:c1:
34:3a:5b:8e:ca:30:c8:f7:d9:98:80:2e:5c:7c:3d:06:2b:51:
2e:aa:49:a5:f6:68:58:be:d5:3c:26:a9:e5:6f:ee:83:fc:c0:
94:04:22:ee:ac:b6:fa:ba:69:0c:25:dc:8e:b5:0c:20:28:4f:
63:5e:fd:34:45:ad:dc:ed:37:f0:c4:42:42:6c:2b:08:57:c4:
b0:d2:2a:86:37:83:2e:f3:38:54:5c:02:e6:71:99:c9:12:e8:
a1:d0:24:80:46:4c:aa:63:71:79:6c:f0:16:0c:03:2c:37:a6:
91:e4:83:6d:64:e5:72:86:93:2d:cc:f1:17:56:5a:ca:88:fb:
74:33:fd:d3:db:6e:e9:21:10:f4:fd:e4:53:16:93:46:7a:32:
47:0f:d1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:53:49 2025 by rpki-client