Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/714664fb-37f5-3193-974d-9dbf69b6cd4f.roa
File: 714664fb-37f5-3193-974d-9dbf69b6cd4f.roa (raw, json)
Hash identifier: 8+jN58PXaNR0B4FA5h2EVkTRr7QKQ8G3LzznhqaALRc=
Subject key identifier: 29:EB:AE:7A:19:96:74:FE:77:C5:7D:50:08:EA:4E:64:00:4D:A7:B3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F59E0FB274A3403AA99F1D4C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/714664fb-37f5-3193-974d-9dbf69b6cd4f.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 156.7.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:59:e0:fb:27:4a:34:03:aa:99:f1:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=a2139a30-4a13-46a0-970b-d55b2ab71eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d9:69:ca:de:0b:62:3f:ef:21:a6:0a:f7:a1:
c9:22:47:d2:27:9d:04:8b:9d:6c:6e:d1:a3:20:9b:
c9:fe:9f:03:29:90:df:6d:57:7e:52:97:1c:d1:71:
b6:c3:a6:87:20:f0:c4:07:fc:6c:bb:b5:cb:d8:86:
e3:fe:9e:9b:95:45:f3:84:82:3e:aa:a1:43:ef:b0:
74:fc:ae:5f:1f:b6:f0:2a:2e:d7:7d:66:e8:06:bd:
7c:60:47:8b:27:1b:86:a7:9a:68:ee:66:d1:99:e5:
8e:23:04:ff:44:9e:46:25:49:9d:38:db:c5:a5:9f:
f1:3b:93:5a:8b:e3:ef:02:6d:46:79:31:2b:22:32:
ee:98:74:05:90:be:51:5c:66:89:65:79:71:3e:12:
13:e0:3f:87:de:00:a0:e7:51:a5:d4:30:52:25:d4:
b4:ef:3b:04:5d:95:dc:47:4c:24:18:82:d2:cc:11:
c0:2d:85:b0:24:54:6a:e6:4b:dd:79:51:2f:2e:d0:
6c:31:18:83:a0:81:63:8d:63:90:3f:35:e2:1f:31:
e6:79:37:4e:56:9e:7a:cc:de:99:17:ef:e5:b7:11:
84:f4:c1:4c:be:54:0a:41:19:17:97:3b:0b:94:7b:
5e:13:b8:36:92:87:d7:b1:41:fd:63:04:6d:db:7b:
19:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EB:AE:7A:19:96:74:FE:77:C5:7D:50:08:EA:4E:64:00:4D:A7:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/714664fb-37f5-3193-974d-9dbf69b6cd4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
156.7.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:83:01:03:fa:db:23:8b:9a:4b:94:78:cb:b2:3d:ab:4b:03:
42:e9:0b:10:ba:01:8d:db:41:fb:68:b1:38:6f:4d:b8:a8:bd:
ae:eb:48:2c:cf:34:ff:f9:81:cf:88:91:a3:da:3a:6d:f0:0b:
6c:58:1e:67:ff:27:a8:25:89:ab:86:d6:84:54:3e:6c:04:62:
d8:d9:98:dd:88:86:6e:49:d4:55:ca:fd:10:c4:48:65:b1:1f:
c4:43:27:da:78:30:2f:f5:cf:59:42:1b:f2:e5:c4:26:c6:56:
31:36:f5:e7:df:e5:f7:89:88:26:47:14:a7:b0:ae:cb:9c:9c:
96:37:2f:ff:38:20:3c:45:03:39:5d:f7:67:f7:cd:c3:22:f6:
6f:4a:49:7c:ca:60:c5:a6:2b:d3:c4:e6:30:7f:fd:04:51:57:
51:17:db:df:a4:f7:d0:d3:e2:17:c5:e9:5c:a7:73:07:a6:e7:
7a:fd:3f:95:65:e5:7f:e7:79:c3:ed:58:39:97:2b:bc:73:b3:
1c:1a:01:f7:dd:77:23:f6:e9:0c:03:f1:a5:31:04:1b:7b:ee:
44:eb:c1:97:29:b7:c5:61:ba:b1:32:52:3e:13:3a:33:53:83:
ff:3c:b2:ef:db:dc:d6:7a:17:09:1a:44:22:5e:be:04:21:53:
c6:86:e2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:43:03 2025 by rpki-client