Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6a42aea3-7e75-3ac5-9742-4bf7378ccef6.roa
File: 6a42aea3-7e75-3ac5-9742-4bf7378ccef6.roa (raw, json)
Hash identifier: wygVDrrP6XFBZ22xchY/DkyuCp9RDX85/qvqwUAsJVc=
Subject key identifier: 2E:F5:66:6C:13:F5:C7:C1:3F:C0:E6:F9:DE:91:71:EE:39:72:4F:B3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FC31F0FD91F578CCB87FFB2C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6a42aea3-7e75-3ac5-9742-4bf7378ccef6.roa
Signing time: Mon 31 Oct 2022 12:00:00 +0000
ROA not before: Mon 31 Oct 2022 12:00:00 +0000
ROA not after: Tue 06 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 138.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c3:1f:0f:d9:1f:57:8c:cb:87:ff:b2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 31 12:00:00 2022 GMT
Not After : Dec 6 05:00:00 2022 GMT
Subject: CN=31d4c416-525e-407f-9f57-9bf1b2070ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:aa:d7:e9:1b:91:d7:df:36:4d:46:f8:d5:21:
d0:14:c1:88:24:2f:b2:9a:6c:8a:79:44:5f:4d:5d:
f1:d3:02:47:c8:4b:fe:64:4e:6f:68:b6:c0:58:ae:
f1:0a:a2:b9:16:e1:f7:88:02:fc:a2:bf:4c:41:6e:
70:48:ff:d4:be:64:54:4d:e4:fc:ad:89:dd:4e:01:
db:9b:74:77:3b:ad:9c:84:6e:7a:0e:7e:02:ae:a6:
42:83:98:a0:a7:bf:02:b4:b4:2c:97:90:81:d5:67:
e1:a6:f5:38:9f:10:9b:ee:3a:e6:53:8d:5b:7e:96:
c8:03:f4:96:0a:0d:0d:b5:84:f8:07:3c:12:dc:3e:
f0:a7:8f:d3:d8:d8:d1:5f:c5:fe:5a:b5:07:92:4b:
71:1a:16:62:b0:e4:11:96:08:61:a0:90:df:da:ed:
e3:d4:85:ab:e1:e8:e5:d4:2c:a8:5f:b8:c0:fd:ae:
69:a7:4b:19:00:fb:c9:f3:d4:c2:2f:9c:5e:ad:e7:
d4:61:cc:44:d9:e8:99:f6:b6:a7:db:74:68:63:b4:
65:3c:50:e8:12:33:d7:07:18:57:44:6a:c4:24:09:
62:36:99:b0:aa:12:1f:90:fb:de:38:16:2f:ab:6d:
65:5b:1a:88:e9:e7:ca:5d:c9:2b:b6:ae:5a:5d:7a:
8a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F5:66:6C:13:F5:C7:C1:3F:C0:E6:F9:DE:91:71:EE:39:72:4F:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6a42aea3-7e75-3ac5-9742-4bf7378ccef6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
138.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:c2:7c:ae:98:d9:0e:da:5e:4b:bc:21:d7:36:93:f7:95:5e:
1c:32:6c:12:30:b1:27:3e:ef:b5:b9:79:d4:76:c4:69:5b:95:
82:b1:d0:09:bc:38:18:45:8d:a4:2d:66:f8:1c:f7:06:b0:23:
d4:3e:cf:e5:93:44:69:d2:00:7f:27:fa:87:ec:25:be:20:e7:
4c:67:c2:a5:4a:76:a5:c8:dc:08:7d:38:c0:6b:e6:e2:e2:c4:
1a:19:f6:7b:02:85:4e:d5:e3:e0:14:af:8c:16:6e:3a:13:78:
cb:07:83:c1:e5:52:b8:5c:58:67:04:61:94:63:0a:d8:fb:4e:
f9:d6:3d:fd:81:e0:95:c7:e2:d8:ff:fc:dc:0b:d7:dc:0a:0a:
eb:6f:63:b6:59:3d:8d:25:5c:b5:99:0d:8b:d6:59:81:a8:9d:
a1:b5:60:09:09:70:e5:ed:31:0e:e6:d4:e5:94:74:d2:e2:ae:
15:08:36:9f:a4:ec:c9:f1:3d:f7:45:1d:ca:87:1e:dc:b0:fb:
e9:93:4d:ce:c4:cd:b2:04:5b:35:1f:f7:28:93:4f:8d:57:22:
e8:3c:bc:1e:d0:d5:81:d2:b7:a5:f5:32:fc:c9:ae:6e:a0:96:
82:78:a1:82:43:00:0f:72:38:1e:d2:75:df:d6:cb:31:09:65:
c9:77:20:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:43:49 2025 by rpki-client