Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/645d6699-e7a7-3d71-b6dd-1c635c137af5.roa
File: 645d6699-e7a7-3d71-b6dd-1c635c137af5.roa (raw, json)
Hash identifier: tJkNKDDd0+SdZc/SNz9oLsDWLtRPswrPYeDgijxHqlQ=
Subject key identifier: 3C:0A:DF:FE:E2:32:0D:B0:61:A7:00:49:7D:86:E0:E9:39:3A:D4:9B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583ED062CAC06D4CE6575EF36F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/645d6699-e7a7-3d71-b6dd-1c635c137af5.roa
Signing time: Fri 05 Aug 2022 12:00:00 +0000
ROA not before: Fri 05 Aug 2022 12:00:00 +0000
ROA not after: Sat 10 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 151.162.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:d0:62:ca:c0:6d:4c:e6:57:5e:f3:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 5 12:00:00 2022 GMT
Not After : Sep 10 04:00:00 2022 GMT
Subject: CN=14cfacb3-7e83-49a5-8cf6-ec1bf71af1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:9c:48:d2:06:f8:9e:91:3e:0b:a5:b3:25:
c8:35:36:1e:03:2d:a9:af:8d:27:ec:98:63:ef:8f:
ab:e6:da:77:b3:9b:e0:f4:4c:f9:2e:b9:b3:d3:94:
86:e2:45:37:fc:80:ab:65:9d:00:f0:20:fc:ab:15:
58:88:94:57:22:77:6d:02:d6:23:91:02:a1:55:7d:
f5:02:c6:6b:da:d5:06:87:d1:58:ad:e3:da:fe:c2:
d0:20:75:b9:4c:a5:22:d9:97:27:0d:dc:9c:dc:a9:
17:38:9b:a3:1a:c8:b7:d1:94:a8:10:94:0c:9c:cd:
99:10:6b:42:11:bc:31:6d:61:48:15:2a:d5:97:bf:
43:94:57:1e:46:9b:89:c6:29:66:1c:d6:03:28:61:
20:06:88:4d:a6:fd:ac:85:68:23:96:22:6b:84:3e:
d7:06:c3:ff:fc:c0:9e:b2:4c:62:81:05:9a:bd:3c:
a0:7e:e4:56:63:2d:cf:6e:2c:36:9f:6a:23:56:e8:
49:42:9c:b2:9b:27:d3:80:17:22:35:3a:9f:c5:d2:
77:12:f5:73:ac:1a:e8:db:a2:3b:0e:98:27:9c:de:
49:e7:13:11:da:e8:a0:75:c1:a4:84:48:92:6e:b0:
db:6b:a0:96:02:18:80:d0:b1:0d:60:81:c0:03:67:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0A:DF:FE:E2:32:0D:B0:61:A7:00:49:7D:86:E0:E9:39:3A:D4:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/645d6699-e7a7-3d71-b6dd-1c635c137af5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
151.162.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:e5:1f:57:57:25:94:29:44:c3:86:84:bd:d3:31:f1:c4:5c:
f6:0a:81:4b:94:ca:18:b2:30:83:a4:5e:f5:1c:5d:cd:17:40:
40:48:ce:01:b1:d5:d7:f6:51:9d:ec:ea:bb:c2:68:e8:01:2b:
19:45:3a:33:f4:ea:06:e9:58:44:8a:94:a0:20:d7:2d:4b:d6:
10:2b:53:6c:13:2f:87:cf:1b:e3:b6:87:f8:fe:f1:2e:e1:84:
5f:a4:6d:6f:9d:7e:28:4e:db:ea:5d:ca:3f:fb:9f:b0:77:19:
58:51:5b:d0:1e:28:2c:4c:35:3f:0f:76:ef:6a:7f:30:55:1d:
4d:97:d6:24:21:aa:d3:49:13:48:73:25:2e:dc:ee:5e:a2:54:
98:5b:24:d3:a4:7d:ea:39:1c:53:ec:5b:b6:75:11:37:12:91:
c5:94:48:15:a9:f8:6d:c0:43:7e:ec:9b:d7:04:dd:cc:b4:14:
aa:2e:7c:ae:ee:b6:99:3d:00:b4:d2:a4:c1:4b:aa:10:10:e4:
22:19:cf:08:37:86:0f:1b:89:6f:0d:87:78:8f:b9:5f:50:32:
ff:0f:fa:30:c6:c3:68:07:37:dc:0d:a4:04:78:ee:70:bf:85:
48:54:17:9f:8e:4a:b0:5c:57:78:24:9e:0a:15:1b:ff:90:48:
56:92:d5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:19 2025 by rpki-client