Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7d9fc0a3-6b36-3141-a8a6-92f7ff51ef85.roa
File: 7d9fc0a3-6b36-3141-a8a6-92f7ff51ef85.roa (raw, json)
Hash identifier: YqvpfPAYDX1m31Du5+4LHHSYR7r5AUwFCwfVsrjMZnc=
Subject key identifier: 9F:1E:CB:47:48:58:CE:35:E6:F4:17:09:C0:2F:4C:C4:E7:D4:96:EB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBB7A621174D04663B2418D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7d9fc0a3-6b36-3141-a8a6-92f7ff51ef85.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 153.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bb:7a:62:11:74:d0:46:63:b2:41:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=f1836504-6032-443b-939a-c55e74364884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:2b:67:f3:90:b2:33:c3:6b:ef:3e:92:4b:
22:fd:58:e3:08:64:90:6d:9c:d4:26:50:65:8a:3a:
41:48:2d:40:d6:51:bf:91:7d:80:6b:bb:b6:08:43:
81:70:9b:e6:ed:c7:67:ef:76:f6:75:26:bf:27:a0:
37:d4:07:6e:ad:53:d8:e7:36:2a:c6:80:be:55:de:
a1:5b:be:f9:30:9a:83:10:bc:95:7a:7d:69:18:6a:
da:fd:2c:57:f2:91:df:84:ce:d4:78:ee:7c:6a:8a:
a0:23:28:d0:99:24:89:0c:d3:06:c8:69:d5:8f:0c:
11:1c:cc:5c:da:90:bb:b2:8b:dc:fe:d2:41:a1:be:
99:a3:9b:d3:8d:9f:57:f4:3d:5c:23:c4:0c:a9:03:
1c:b2:cc:55:96:ec:86:c7:97:b6:a3:db:e7:73:0e:
9f:2f:2a:fc:4a:e8:34:8a:11:2e:fd:38:4f:37:2d:
fc:7e:97:5b:82:57:0e:4a:ce:0a:ff:75:50:3e:07:
e9:a1:5a:d6:71:34:43:36:bb:f7:18:a2:6b:40:ec:
b6:af:7c:48:98:14:25:0f:08:88:66:d7:13:d5:03:
16:90:16:02:97:15:88:d7:49:2b:e0:fe:5e:46:87:
7f:63:3a:02:36:60:fc:6b:18:49:10:f7:da:87:38:
b5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1E:CB:47:48:58:CE:35:E6:F4:17:09:C0:2F:4C:C4:E7:D4:96:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7d9fc0a3-6b36-3141-a8a6-92f7ff51ef85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
153.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:4f:bb:6d:42:11:dd:54:5b:82:0d:0e:f2:1e:f9:10:27:b6:
ab:02:1f:51:59:c5:14:35:07:85:6d:f5:bf:14:e0:0f:ab:aa:
81:89:01:b1:33:db:23:86:b4:f4:87:29:b4:4a:fc:a7:f5:c6:
e7:99:07:b7:eb:11:0c:86:fb:28:3e:8d:16:c5:13:e2:a6:48:
1d:26:aa:f3:b4:3a:84:68:c6:9f:3f:08:60:6e:52:bd:83:3c:
60:ba:e9:79:93:04:c6:2a:f6:c5:b1:0c:09:63:60:f3:08:1a:
53:5f:80:62:cc:c5:7f:46:3a:6a:cd:f8:6a:a7:be:7e:92:b4:
dc:27:68:ed:79:4a:a1:00:5e:38:51:23:c7:51:be:bb:28:e3:
67:e6:2c:25:6c:42:eb:ad:32:6b:fe:a8:b9:f1:ee:5e:c8:e9:
75:68:fd:04:42:72:47:1c:eb:03:7e:88:32:08:62:e3:50:09:
cc:8f:bf:15:be:aa:7e:d0:8c:65:fb:03:3a:22:ee:d5:dd:73:
66:77:01:2d:b0:f4:b7:b3:49:29:5f:48:1a:91:77:1f:85:99:
00:91:58:1d:82:16:c3:00:3e:e9:47:e7:aa:a4:1a:2e:a0:71:
c6:8b:7b:8e:8a:b5:58:0f:d8:b1:27:01:a9:87:74:1a:d8:3d:
fc:40:df:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:24 2025 by rpki-client