Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7728d58c-52aa-32de-ba9f-d31bcaeff4f7.roa
File: 7728d58c-52aa-32de-ba9f-d31bcaeff4f7.roa (raw, json)
Hash identifier: FN2bu/okTYrEx3SVfft04VV9oBCmPGW2GxQNi1YSIYs=
Subject key identifier: 86:3F:06:5D:19:98:2A:5B:90:C0:E3:63:EE:8C:D5:05:76:A1:00:05
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409014F29FDCC1E861EBAD3100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7728d58c-52aa-32de-ba9f-d31bcaeff4f7.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 152.25.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:90:14:f2:9f:dc:c1:e8:61:eb:ad:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=10999d85-8a19-444a-9e8e-9d2cb4b3d3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1a:3c:4d:80:d2:28:f8:50:36:15:e7:fb:13:
e8:f1:0a:a8:3a:26:44:bd:56:0e:8c:bc:20:5c:9e:
70:4f:7d:4e:99:56:38:74:bd:b0:4c:ee:de:e6:5f:
ad:8b:17:fc:84:4a:78:ed:c3:c4:ff:c6:75:ad:e9:
1e:f0:86:75:7d:1d:c2:22:e5:a0:df:c9:ed:ad:7b:
f0:89:66:d2:46:00:ec:9c:c2:92:e5:c2:97:c8:18:
f8:33:1d:2f:33:84:5c:de:e0:7b:f2:8b:36:d0:3a:
27:b2:5b:2e:3a:fb:95:53:f2:95:5d:a8:e3:a0:20:
c6:d0:b5:2a:9f:ff:ab:10:09:af:01:92:f5:2a:8a:
e0:b9:1f:27:98:85:b5:8a:f4:f2:21:ec:56:60:88:
84:a2:16:d3:cc:ee:6e:de:00:ee:e7:18:54:55:71:
40:a5:6e:3b:ce:46:8f:74:78:58:95:71:ba:22:e8:
05:b2:ce:cf:8a:bc:55:5a:4e:49:8e:c8:d1:a5:d6:
56:5e:60:86:99:f2:77:e1:66:0f:5c:b7:92:f1:f0:
96:99:33:de:77:ff:18:12:6a:b6:7e:73:d5:ae:14:
22:da:c1:37:24:d1:41:b9:1e:9a:44:e1:9a:b7:49:
e9:e0:22:2a:43:3d:ea:ff:5b:11:85:6f:95:57:c8:
9e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3F:06:5D:19:98:2A:5B:90:C0:E3:63:EE:8C:D5:05:76:A1:00:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7728d58c-52aa-32de-ba9f-d31bcaeff4f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.25.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:d5:9e:83:05:d1:ca:9a:bd:4f:bb:78:98:49:d1:f4:81:ef:
cf:a1:09:f3:02:a2:de:00:f1:f4:a6:08:a8:69:b2:a2:1d:48:
b0:57:f7:e1:3a:4f:97:93:b5:87:e9:5b:71:04:16:e3:10:87:
77:de:fd:2d:ae:39:0a:f0:ba:d3:42:b1:1c:fc:e0:34:ba:7a:
22:a1:2a:38:7c:7a:00:90:57:15:b9:62:3a:9f:a4:c4:95:40:
16:b1:f6:93:d6:32:08:99:33:7b:6c:3c:9e:73:bd:98:ba:a9:
7c:52:31:81:26:d0:af:33:16:d7:81:94:d7:72:4a:7e:dd:33:
33:7d:ae:1a:ee:8f:28:fc:f3:f4:fa:16:27:58:61:e2:41:07:
75:9b:06:1e:87:f8:67:2a:ad:11:c4:be:8a:31:23:9d:88:a0:
e3:41:87:d1:25:ae:30:fc:b0:ef:46:13:0d:5f:06:fc:75:66:
3a:e1:28:7d:6f:ba:81:22:1f:e6:4c:f1:98:8f:0d:3a:1e:d7:
f2:05:a8:7a:bb:d3:2a:dd:02:40:89:dd:72:4a:d8:ed:cb:1d:
d1:40:fd:f9:3d:6c:6d:3c:06:7a:4f:d9:35:6e:e7:a9:c1:c2:
d1:bc:bd:58:f2:34:a1:cf:0a:e1:b0:e7:19:ee:4f:b6:0e:4e:
c3:a3:17:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:39:30 2025 by rpki-client