Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/667c9a0c-757d-3600-a94b-f24e42403258.roa
File: 667c9a0c-757d-3600-a94b-f24e42403258.roa (raw, json)
Hash identifier: a5BV/ptK3iudhXUY7CJFsAsZhiUuIY0ZVWXuY13NXOY=
Subject key identifier: 9A:AF:5E:24:1B:49:A4:89:66:7A:32:5B:A4:0B:8E:FB:66:1C:4C:70
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD67EFD00B7165E35E31DB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/667c9a0c-757d-3600-a94b-f24e42403258.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 47.255.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:67:ef:d0:0b:71:65:e3:5e:31:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=826fbd19-4eea-47bb-be78-87c1735c0dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:bc:d9:fa:99:0a:b8:f4:89:1b:13:fe:91:
ee:00:33:1a:62:6a:e3:83:59:3e:bd:08:3e:43:32:
c4:f8:ca:d6:b9:be:2c:64:34:69:35:3d:79:ed:44:
3e:a9:ba:a6:73:b9:f0:18:2b:d2:70:85:6d:08:ef:
1d:58:ba:1b:d5:df:17:8e:3a:77:6b:38:9d:1e:6e:
16:ac:a6:29:5f:3c:8c:7c:90:e3:6f:5c:c9:46:86:
8b:bb:33:61:dd:76:0d:d5:70:97:b9:d6:5c:85:da:
04:1a:1f:f6:8e:b2:ac:11:92:00:99:59:e6:53:76:
08:f8:59:01:1f:39:b8:0e:5a:79:69:26:ba:14:bd:
e5:86:43:7b:61:12:68:b9:f3:ee:07:85:a2:64:66:
f7:38:84:1a:20:bc:7d:d2:b7:32:77:4a:06:aa:03:
66:d3:89:36:95:e5:c0:14:2f:f3:a2:ad:ab:af:d7:
26:ea:35:63:8d:33:54:90:f8:bc:27:d3:2a:ac:a9:
1a:a6:8a:3f:9e:2e:2a:6e:fd:6e:d3:49:d0:e5:58:
72:29:ba:80:0f:51:bb:0f:e1:76:b2:47:c6:d4:51:
9c:76:b0:9c:0d:6a:77:fd:dd:74:8b:df:69:70:b2:
d5:d3:f5:cc:2b:46:df:8e:e9:70:e5:a0:a3:65:a8:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AF:5E:24:1B:49:A4:89:66:7A:32:5B:A4:0B:8E:FB:66:1C:4C:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/667c9a0c-757d-3600-a94b-f24e42403258.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
47.255.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:da:78:c1:21:6c:88:70:8f:d7:00:b2:e6:72:ad:a4:e5:a2:
45:af:ce:56:3d:9d:22:22:95:d5:79:2c:15:c1:a4:ac:8c:84:
84:c8:e9:61:bc:74:5e:11:09:db:c6:76:74:fe:78:f8:36:92:
25:4c:cc:4d:ad:6b:f0:ea:8f:e6:77:c7:9f:a2:e2:d0:a3:92:
ec:1d:10:36:a4:d9:aa:10:68:7f:66:71:63:23:19:3e:91:11:
14:7b:26:88:6b:28:a5:b3:1c:6c:e6:83:da:a2:46:e1:e0:d8:
96:3f:90:eb:7b:de:d4:c8:3c:b3:a1:65:60:9a:68:c7:20:77:
4d:3b:b0:f8:db:3a:f4:8c:da:7c:1a:dd:f8:d3:5c:67:8a:e6:
f3:a1:13:c7:5b:42:b6:d9:60:e8:7f:0d:c6:7c:49:d1:89:8a:
9e:31:54:95:91:98:ff:d9:57:4d:8e:bf:4f:7a:e4:c6:17:9f:
91:85:d4:6b:bd:d6:d6:6f:88:38:ef:32:51:24:25:cf:c6:98:
eb:04:be:67:52:69:5c:81:8d:64:86:ec:d3:98:2e:ec:04:70:
9a:a6:4c:68:f6:33:b8:52:d9:f2:c9:58:fa:49:e6:eb:bc:2c:
ed:f0:f3:35:d6:34:ec:29:fe:a1:d1:f4:df:14:57:47:0b:ac:
01:96:a4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:38:16 2025 by rpki-client