Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/75e998b2-c48c-35ed-b351-fb2ff3133ca6.roa
File: 75e998b2-c48c-35ed-b351-fb2ff3133ca6.roa (raw, json)
Hash identifier: NecXdPCL95pY6+1CSCnIKL2O3X1iaWecAmcqEpRjwsY=
Subject key identifier: 88:C3:EE:0C:1D:43:92:7F:02:9E:66:7F:6A:89:39:A2:9F:B2:E4:71
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1E625062775F76C7245D5700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/75e998b2-c48c-35ed-b351-fb2ff3133ca6.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 144.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1e:62:50:62:77:5f:76:c7:24:5d:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=6b412426-d54f-4c3a-9f6b-74b9bbd5c98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bf:88:5b:cf:66:80:99:24:d7:b3:63:61:b1:
f2:06:8e:4f:ea:80:a8:1d:df:71:fc:9e:a0:d5:07:
a8:58:e8:c7:f4:60:b5:60:c5:17:c2:ee:45:ff:b8:
3d:7a:10:48:64:e2:e9:de:52:1d:8b:69:e3:56:9d:
26:94:5d:1a:db:d0:00:2f:72:04:a7:4c:db:78:88:
ea:3c:3e:87:41:2b:6c:b1:0f:d7:df:ab:48:de:59:
7b:91:57:14:75:62:e2:23:0f:18:db:10:dd:0e:80:
ea:92:ad:70:87:dc:b6:46:5a:19:f6:5d:55:5c:78:
cc:73:64:00:57:b3:01:d8:72:c2:8d:8d:2b:46:16:
6d:7c:47:2d:ef:9b:a1:d9:4b:78:75:5b:fc:0b:22:
42:a7:6a:2f:5c:54:87:ae:89:22:a9:12:33:f7:40:
a6:43:fe:4d:11:a7:85:be:98:1f:37:3a:97:a2:d6:
78:2c:1d:ab:65:f9:3a:2b:dd:86:83:fe:a2:bd:e9:
41:97:7e:ea:cb:84:ba:76:d3:2d:90:c6:04:ca:6f:
35:63:a6:ce:9b:cd:68:d5:f1:c5:8b:61:11:e6:54:
c6:7e:9c:dc:be:46:2e:58:41:47:98:db:82:ca:07:
16:cd:bb:b5:f5:46:6a:06:cf:20:33:55:7c:7d:77:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C3:EE:0C:1D:43:92:7F:02:9E:66:7F:6A:89:39:A2:9F:B2:E4:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/75e998b2-c48c-35ed-b351-fb2ff3133ca6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:da:5a:39:e8:46:70:47:e3:80:e4:e6:2d:20:2c:d6:d5:87:
dd:85:73:b8:16:56:e0:32:67:e4:70:6c:d5:2a:fc:3a:7c:3f:
6c:a6:de:fa:f1:f0:1e:4a:d8:4d:d6:bb:f1:16:9f:cf:21:6c:
63:db:65:7c:ad:66:39:2f:d3:40:fc:b8:bb:b0:47:17:4c:74:
78:97:64:34:b4:6c:32:53:3e:4c:84:1f:a4:7a:cf:11:b2:59:
a3:7c:e3:10:54:ed:a8:a3:d6:9d:08:1b:78:6f:ec:37:28:e6:
7d:64:5a:1d:a1:71:7d:09:5d:88:4e:2c:29:dc:ec:d6:73:bf:
d1:37:a7:98:12:e6:d9:3f:24:f5:b6:d6:f8:91:16:10:79:7c:
4f:33:a7:da:70:31:1d:f5:f5:4b:77:45:ae:d2:f9:f0:6f:b4:
9e:4d:06:2d:95:4a:fa:5b:11:6a:bd:ce:b1:2e:b3:dd:2c:eb:
64:53:3b:59:44:87:7a:96:9f:50:52:6f:fc:57:25:68:09:53:
46:cf:90:14:04:48:1b:7f:04:ed:bd:b4:06:8e:9f:97:83:63:
6b:02:bb:cd:66:32:15:98:97:58:2e:06:42:3c:f3:ce:b0:f1:
6a:05:39:b2:fb:17:29:f2:fc:99:a9:47:5a:31:1f:92:ad:f4:
61:0b:f3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:05:37 2025 by rpki-client