Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73b9888b-7df6-3190-8bf7-955a0cd6a983.roa
File: 73b9888b-7df6-3190-8bf7-955a0cd6a983.roa (raw, json)
Hash identifier: KYihyie3uKRTvfF35MRTYeX2+pFJGC2C66mKHhpYGcE=
Subject key identifier: 6F:F3:B0:92:9F:E9:E2:1A:4B:FE:9F:7A:45:43:C1:8F:0B:0D:C5:F0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E32AEB64417F4A38E14888380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73b9888b-7df6-3190-8bf7-955a0cd6a983.roa
Signing time: Thu 09 Jun 2022 12:00:00 +0000
ROA not before: Thu 09 Jun 2022 12:00:00 +0000
ROA not after: Fri 15 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 157.241.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:32:ae:b6:44:17:f4:a3:8e:14:88:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 9 12:00:00 2022 GMT
Not After : Jul 15 04:00:00 2022 GMT
Subject: CN=78ab1c28-55fb-4a06-b291-01fe65dc5456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:60:10:8b:13:5a:dc:75:5e:51:e8:09:33:bd:
73:7f:6e:81:85:e3:16:b9:b3:0b:e9:99:1b:6a:76:
5e:72:f0:3b:f9:62:a0:87:4a:46:a1:ed:46:c1:ec:
ed:1e:19:a6:c4:61:d1:07:86:88:34:b2:7e:59:16:
f4:50:40:59:62:64:ec:e2:d1:cf:f1:14:b0:41:66:
23:80:ec:42:c6:f1:12:8d:af:52:29:9b:21:96:fd:
b1:70:a9:d2:7b:48:a7:a3:5f:cf:de:32:7f:ad:aa:
a4:cf:ac:3a:e6:bf:64:4a:c9:6f:33:b6:98:4f:f8:
75:d0:8d:87:aa:a6:18:1a:94:af:4c:c8:5d:ca:4e:
a0:37:90:9e:e0:45:ea:4e:9b:18:c3:0d:8e:b8:54:
98:1f:d2:c2:ad:53:4c:be:e9:60:83:de:fe:19:bb:
2d:1e:52:9c:f0:02:f7:d4:03:ab:75:a5:c2:0b:32:
f4:6e:97:6e:85:3a:a0:b9:35:f9:a4:25:4c:d0:9e:
95:e3:66:24:28:f0:37:cf:24:d4:f2:73:c1:09:7f:
dc:b6:3d:54:4d:2b:78:b0:95:86:dc:ca:81:a7:82:
e1:34:40:01:3f:75:34:bf:db:f5:5d:aa:b7:d1:47:
ea:36:37:fe:63:6d:ac:fb:9d:d4:8c:f7:f9:23:24:
e8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F3:B0:92:9F:E9:E2:1A:4B:FE:9F:7A:45:43:C1:8F:0B:0D:C5:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73b9888b-7df6-3190-8bf7-955a0cd6a983.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
157.241.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:f6:03:09:ec:84:69:e2:e0:1c:7c:b3:cd:58:09:37:9c:36:
46:47:98:5f:3d:50:02:ff:81:81:36:22:39:d8:3d:6a:3a:0a:
c3:47:32:fa:17:6a:d7:8f:fa:8f:f9:eb:6e:4a:2a:07:2e:53:
1e:af:48:bd:01:06:12:9e:e1:48:5d:91:b4:89:0c:a3:f1:51:
d9:92:37:15:a8:f5:16:d7:11:76:49:4c:7b:0a:c1:1c:f1:d9:
d4:f5:d8:a1:35:1a:d6:9c:f1:b4:51:04:08:71:50:4e:82:70:
9e:4d:1c:a1:3c:c1:c5:49:7e:16:8f:77:9a:8e:6f:12:31:a3:
8c:00:99:27:bf:59:42:e3:54:36:7d:9a:19:bc:29:40:ee:2d:
29:a4:a7:85:a6:11:ff:c3:18:dd:07:78:6b:45:f9:2e:e3:ac:
8f:f6:5f:f9:60:c3:12:8f:17:07:59:d0:3f:40:a5:e0:74:93:
90:89:49:44:c8:ab:7e:bc:fd:83:2d:6f:90:56:73:a2:a2:83:
ed:70:8b:a3:2b:a6:e9:68:a9:fa:f3:d0:ed:16:4e:50:13:35:
11:ee:3f:ca:db:b2:81:58:3f:dd:56:d9:7a:07:44:38:f1:df:
9e:b2:e3:aa:cc:d7:b5:31:d0:4f:09:bb:6c:5d:7e:50:1b:48:
90:2b:93:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:56 2025 by rpki-client