Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73af2340-2dfc-3b22-a2f6-3b615a1ab966.roa
File: 73af2340-2dfc-3b22-a2f6-3b615a1ab966.roa (raw, json)
Hash identifier: bLQ+1x9xPWygRP6SCTrmJ9mxb04gqdItKcFGfhInUlM=
Subject key identifier: A9:8B:59:7C:E9:7E:F6:D0:D4:F5:8E:15:AC:A6:30:8A:7C:05:88:22
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E93B950130A0BD48419B99900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73af2340-2dfc-3b22-a2f6-3b615a1ab966.roa
Signing time: Thu 14 Jul 2022 12:00:00 +0000
ROA not before: Thu 14 Jul 2022 12:00:00 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 144.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:93:b9:50:13:0a:0b:d4:84:19:b9:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 14 12:00:00 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=cad1a56e-87bc-416f-9d88-a550cff7a359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:07:e0:9c:12:02:cb:f9:9f:60:17:70:ca:96:
ea:08:72:56:29:82:e5:bc:6c:97:27:b9:20:cb:15:
a8:c1:8b:99:df:f2:1d:14:9e:2c:e1:fe:6b:3d:dc:
c4:42:24:36:99:e7:ec:45:55:7c:12:ae:c6:99:83:
59:b0:3a:3d:d1:e5:a8:18:2e:44:db:bb:2f:bd:09:
a2:80:b5:f8:20:36:6d:4b:2b:07:89:35:e7:4b:87:
52:32:1c:a0:4c:a5:99:fa:75:65:ce:6e:b5:bd:6d:
46:f4:93:b1:3a:46:ec:a2:3b:e2:70:99:ce:31:ee:
9b:b1:b5:1b:11:1c:f8:76:d3:b4:aa:bc:5f:3f:0e:
20:bc:1a:59:76:d7:7d:55:fd:93:56:e0:8d:22:39:
15:00:23:5f:ef:db:77:e6:85:e0:3b:73:d9:3d:3a:
de:d4:d4:49:36:bc:79:92:d3:f7:fc:af:f5:bf:57:
52:80:7a:a9:bb:8f:9a:3d:36:08:06:96:3d:91:7d:
0b:a0:d7:df:ee:14:52:00:da:46:d9:66:d6:e4:7a:
94:f0:48:b2:ed:e6:96:37:28:2b:6e:b4:37:bb:8f:
e2:76:fc:40:97:08:23:52:7d:6d:cd:fc:f7:7c:a1:
db:1e:a6:fb:60:48:61:79:46:c8:ce:78:08:6a:c1:
bd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8B:59:7C:E9:7E:F6:D0:D4:F5:8E:15:AC:A6:30:8A:7C:05:88:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73af2340-2dfc-3b22-a2f6-3b615a1ab966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:bb:98:96:25:39:06:cd:e3:71:d9:86:55:92:0a:ae:34:8f:
8c:76:eb:a5:39:9e:6b:6e:f4:06:ea:26:88:e5:e0:3f:98:ac:
64:dd:02:26:84:6d:06:d3:8b:7c:19:c4:b8:5a:c2:68:00:5d:
b0:bf:b1:b8:17:2e:9a:10:ee:4c:5e:14:99:52:dc:79:76:7d:
96:fc:77:b0:da:43:4f:a1:5e:1f:c5:a1:2e:af:88:80:90:aa:
76:5d:01:52:42:e0:3d:4d:e0:ad:79:37:e6:d6:2c:36:9d:5c:
d9:44:99:0a:f1:ba:46:5a:74:8e:75:12:d1:c8:0a:86:5e:41:
b3:47:96:e9:be:c3:0b:70:82:1b:44:88:2c:6b:58:df:8d:0e:
e5:8c:ca:f4:f8:77:d4:70:3a:43:08:44:85:77:7a:cb:30:45:
f8:ae:58:8c:8e:0f:6a:20:32:d4:c3:cf:ad:90:99:ca:2c:a8:
5b:2b:c9:af:42:39:31:8f:e9:36:a8:d2:f7:61:d6:12:49:74:
b9:af:27:d5:c4:3b:f2:60:06:5d:34:8e:85:bf:41:0c:1a:66:
95:49:1a:03:1f:3d:9e:69:a5:a4:c0:ec:12:1b:5e:da:81:99:
45:0e:8f:14:86:45:28:8e:78:3a:2e:b3:15:e9:77:7d:ed:0e:
34:f9:3c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:38:54 2025 by rpki-client