Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7d5c171e-64dc-3300-8c8a-29aad787d257.roa
File: 7d5c171e-64dc-3300-8c8a-29aad787d257.roa (raw, json)
Hash identifier: nLTXTgkkyEwtmGREarkThOgFeELwf+n/t8R9S++jKKQ=
Subject key identifier: 32:4C:E1:EE:41:C4:D2:0F:F1:2F:F5:D9:FF:D7:98:F5:55:6F:E5:EF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D59DC30D08AAFFCE797F21BC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7d5c171e-64dc-3300-8c8a-29aad787d257.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 47.255.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:dc:30:d0:8a:af:fc:e7:97:f2:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=1c51e79a-b038-4691-b047-ef304480c711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:34:52:dc:b2:1a:56:f4:66:55:69:f4:1d:85:
0b:73:68:fc:03:07:4a:7c:40:ce:ce:a2:60:92:f3:
6b:59:db:03:ae:48:76:51:69:0f:73:86:96:44:43:
ca:2d:9d:3a:9b:26:82:d1:0a:c3:24:8d:3f:c0:31:
a1:a9:c2:df:43:46:a3:ee:30:83:20:56:7f:26:a2:
1b:e2:51:cc:07:4b:67:84:2a:b4:83:fa:c0:be:d4:
b5:d6:0e:0a:51:d9:f2:88:ab:8d:cd:d3:7b:4c:ae:
00:a3:c1:ab:b8:54:0b:40:b2:6f:52:f8:5e:30:1f:
86:85:00:d8:fd:43:99:8a:e0:cc:1a:7c:ef:47:bc:
8e:7f:63:1c:cf:49:7e:84:c9:7c:75:6f:1e:9f:f2:
a1:e2:5f:5a:69:87:3a:e7:4e:15:51:48:3e:3b:82:
7f:05:e6:0d:a6:01:8b:9d:4c:74:21:d5:81:f9:24:
c4:fe:a9:09:36:c0:4c:44:1f:ae:de:b0:ec:55:eb:
a4:81:d2:10:41:10:7f:54:75:9c:c1:09:8f:53:d2:
1e:18:8c:06:87:49:c5:da:fc:55:4b:35:7f:5e:97:
a9:25:60:e4:1c:5b:d3:7a:68:2f:4a:1d:9f:d8:f1:
34:69:2f:c6:71:9c:d3:d1:fb:02:24:db:00:4d:98:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4C:E1:EE:41:C4:D2:0F:F1:2F:F5:D9:FF:D7:98:F5:55:6F:E5:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7d5c171e-64dc-3300-8c8a-29aad787d257.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
47.255.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:84:6c:aa:e6:53:6f:3b:ab:aa:0e:38:2d:5e:e2:85:75:21:
3c:df:f3:a8:95:00:a8:21:31:0e:09:ec:e3:48:24:38:00:c7:
03:c8:c1:c3:f1:8a:58:02:9d:f1:c4:a5:39:55:86:38:25:d0:
da:95:df:19:66:8f:b5:4e:5f:c4:d5:47:03:bd:a5:af:ff:9b:
e6:05:61:2a:a1:a6:de:02:2c:b3:a9:22:a9:cc:19:4f:35:d0:
64:8b:9a:bf:20:6d:92:ab:a2:60:2f:0a:9a:aa:43:c4:30:e3:
bf:aa:41:80:34:66:26:f9:b0:0d:e6:fb:3b:fb:fe:3a:67:cc:
2d:e8:32:c0:40:d2:4c:cf:a6:ef:c3:48:ec:ab:c5:b9:3f:35:
9a:a6:fb:5d:ca:40:09:98:e0:e7:de:7f:29:84:b6:d6:5c:34:
06:e5:99:31:fd:66:b6:91:8e:62:79:df:95:c9:cd:fa:8e:0f:
f2:de:e5:17:85:fd:6d:1b:ae:83:fd:32:96:e3:77:76:82:43:
35:40:92:ce:70:69:20:a7:41:44:6a:f8:13:eb:06:42:90:93:
ba:74:9e:77:aa:f9:86:16:b7:65:7f:28:32:ba:3a:b2:f5:6c:
dc:30:b3:9d:1f:79:48:da:27:d1:dc:a3:a6:35:66:c9:11:44:
e5:00:9d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:40:00 2025 by rpki-client