Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/77283c3c-1b06-3d87-8817-b5617ed917c8.roa
File: 77283c3c-1b06-3d87-8817-b5617ed917c8.roa (raw, json)
Hash identifier: BG9XV9bCr2FK6IHhhkg9VM5vPKowrcSf6HnSJyp828U=
Subject key identifier: F2:28:10:90:CB:6B:AA:C8:08:48:D3:7C:D7:5B:5D:55:D8:30:EF:C1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F4D2BEC81A3DD1B61A9A6A900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/77283c3c-1b06-3d87-8817-b5617ed917c8.roa
Signing time: Mon 19 Sep 2022 12:00:00 +0000
ROA not before: Mon 19 Sep 2022 12:00:00 +0000
ROA not after: Tue 25 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 138.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:4d:2b:ec:81:a3:dd:1b:61:a9:a6:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 19 12:00:00 2022 GMT
Not After : Oct 25 04:00:00 2022 GMT
Subject: CN=39baf8bf-0cec-4b47-ba19-9916c858e58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:75:e5:63:94:ce:6d:2c:62:70:0a:3a:ba:4d:
6e:be:19:42:40:bd:1e:40:55:24:2f:4a:41:b9:f4:
c1:0f:5c:1d:af:8d:75:3d:ad:a2:04:46:ed:fe:c0:
f0:f4:f5:21:3d:04:01:77:fc:1f:51:74:35:cf:f1:
aa:d8:d0:15:fc:cb:4f:30:a0:49:02:bf:88:df:d1:
35:90:fc:f7:52:e8:eb:0d:9e:41:07:4b:57:15:cf:
d2:17:35:28:bf:e5:59:bb:b1:1e:d9:28:57:f0:39:
0d:56:95:65:ff:78:d8:1f:98:10:dd:51:0e:96:b1:
6d:fd:c2:e7:21:2a:83:d7:2a:8a:82:fb:dd:42:ff:
30:ea:a8:b8:aa:03:ab:75:c2:45:ff:09:62:87:86:
97:cf:5e:a4:81:c7:16:2d:b0:6f:01:5f:8e:e0:3b:
5e:2a:61:cf:b4:3c:23:2e:22:96:2d:cc:d8:01:06:
5f:a3:7c:51:84:96:23:38:67:74:8e:fb:67:75:0c:
87:f7:a0:87:3d:75:57:67:dd:d1:b4:99:4f:de:14:
ee:0f:6a:0d:68:07:35:1b:d9:9a:a6:69:88:eb:7e:
95:af:0a:2f:de:b9:e7:00:cf:6f:d4:38:71:b2:0a:
71:00:29:fc:bf:df:6f:14:77:1d:6d:56:f8:60:ea:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:28:10:90:CB:6B:AA:C8:08:48:D3:7C:D7:5B:5D:55:D8:30:EF:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/77283c3c-1b06-3d87-8817-b5617ed917c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
138.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:fd:c2:76:c2:55:12:ed:a7:9b:d1:bb:95:55:cf:d6:f0:d5:
69:19:a5:d7:db:38:b1:62:6f:21:c6:d4:db:5a:54:80:0b:cd:
18:1a:7e:a9:ba:e0:21:05:cf:2e:82:ab:db:dd:eb:c7:18:61:
20:b3:65:66:18:6a:c7:96:66:d3:a8:ee:a7:eb:fa:48:d5:e6:
9d:f5:3f:70:10:82:cf:8d:de:27:4d:7a:d1:a8:08:af:a2:82:
11:f1:50:2c:f2:8b:1b:f6:de:b7:ee:5d:7b:53:2b:12:70:c9:
67:f3:b4:ae:b1:c0:ec:cf:74:38:cc:54:da:62:93:8a:0f:c2:
35:94:3f:57:40:ee:07:b8:10:aa:c1:36:2c:6e:90:46:a5:70:
70:36:10:d1:9e:4c:c8:5c:3a:67:5c:8a:a1:9f:90:48:fa:6c:
de:05:a8:2e:a7:9c:1f:65:41:14:5d:37:4e:42:4d:ea:ec:7d:
86:52:be:d6:3c:cb:1b:46:dd:86:2a:3e:85:a0:af:d9:7b:9d:
b3:9a:ae:f2:4e:23:79:20:df:18:3e:57:71:45:8a:9e:98:53:
02:f6:34:d0:c8:95:77:da:f8:2c:fa:81:4e:16:10:56:03:bc:
fb:c6:9b:1c:e3:62:07:93:f6:56:4d:6e:f6:de:7f:b3:e5:69:
0d:52:9f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:13 2025 by rpki-client