Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/79c2213d-b094-3a3a-9cba-8f9c696d967f.roa
File: 79c2213d-b094-3a3a-9cba-8f9c696d967f.roa (raw, json)
Hash identifier: 4Ziw1EVYUNsbXSFtKuDQl9LhTMeQasZTjLLDxS/Xe4Y=
Subject key identifier: D2:32:8A:FC:29:99:C9:AD:A7:9B:23:E3:E5:17:B8:10:97:2F:48:B8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6540DB21838278C3E2628500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/79c2213d-b094-3a3a-9cba-8f9c696d967f.roa
Signing time: Tue 28 Jun 2022 12:00:00 +0000
ROA not before: Tue 28 Jun 2022 12:00:00 +0000
ROA not after: Wed 03 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 152.155.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:65:40:db:21:83:82:78:c3:e2:62:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 28 12:00:00 2022 GMT
Not After : Aug 3 04:00:00 2022 GMT
Subject: CN=fa3e49e9-f092-4c76-b720-424aab63f87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3c:2b:ba:ef:43:d1:42:96:27:5e:3b:21:7e:
7c:dc:ad:0a:55:59:e9:0d:85:ef:24:41:e7:09:27:
84:c1:63:eb:46:2f:25:f0:ee:b9:e0:36:85:fb:20:
a1:63:40:02:93:a4:24:f2:e0:89:ad:11:ec:eb:5b:
ed:2e:ea:da:68:28:05:49:e3:27:dd:6c:28:a6:13:
ef:9c:74:ab:aa:f5:ba:99:b7:57:43:41:bd:59:68:
41:19:f5:27:29:b6:44:ea:0b:4d:ec:92:1d:43:52:
94:6c:4a:cd:d2:cd:e1:6e:65:21:07:1d:0b:b0:9d:
37:3b:8d:35:45:9f:11:72:d6:40:f3:c5:8c:ae:e2:
24:39:5e:bf:ba:6a:fa:5c:b7:06:91:ae:74:f2:7c:
fd:7c:cb:5b:36:5f:92:84:01:cd:fc:b7:a2:1f:74:
9a:81:c2:62:c4:b0:d3:46:6b:7a:94:2a:09:2e:ad:
68:85:00:da:43:2f:7d:af:65:56:40:9c:34:80:1a:
6e:d4:02:43:09:2e:c9:0c:2d:95:db:5c:d9:80:6d:
1b:34:ff:b3:87:ee:e0:d2:e5:7d:37:9e:70:50:2e:
c1:46:54:1c:97:c3:4d:a2:c9:75:9e:f1:36:3c:72:
8b:be:ce:38:4b:8f:93:6c:0c:2b:b2:d2:d4:58:c0:
06:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:32:8A:FC:29:99:C9:AD:A7:9B:23:E3:E5:17:B8:10:97:2F:48:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/79c2213d-b094-3a3a-9cba-8f9c696d967f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.155.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:4b:9b:2e:d9:f2:66:97:81:bf:fe:88:25:02:d8:e8:8f:70:
2c:9b:f6:89:c7:6b:d4:c4:07:83:a0:b2:b4:44:6a:bb:76:78:
11:2c:a8:d5:9d:9e:16:fd:89:b4:06:2c:7d:1e:30:e0:84:fc:
c8:90:5a:4f:ca:8d:47:55:5d:ea:64:7a:0d:65:70:cc:ee:8b:
17:49:67:dc:3f:a2:66:ae:9b:2b:68:d7:a1:95:31:0f:ef:bb:
cc:24:e2:d3:c2:1f:99:d9:c4:30:cd:05:16:a2:a5:12:23:e3:
3e:71:4a:4b:e1:a2:03:ff:43:58:40:04:a3:7f:3e:0b:7f:ed:
f1:7f:ea:3a:a4:72:8f:4d:2d:d0:48:f2:f0:99:e2:cf:ad:61:
d8:af:6f:39:7e:28:01:eb:6c:47:16:57:e3:7a:a3:25:3e:d8:
66:ac:61:4f:11:6b:40:d6:44:96:76:96:b9:45:cc:37:1b:cc:
68:4b:8f:52:4f:49:eb:64:f2:76:8e:5b:d3:2a:ae:48:40:27:
53:e4:03:0d:2c:37:41:77:71:a3:83:3b:6d:5e:21:22:22:1b:
53:ec:10:e1:a2:35:7a:c9:35:98:88:43:2a:01:bc:b2:b7:36:
86:3f:22:a7:ee:78:64:f2:56:47:5c:1e:84:b9:c4:94:1a:ee:
03:02:2d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:20:14 2025 by rpki-client