Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7fa5688f-e892-3a13-b17c-ff5c5ebc82cc.roa
File: 7fa5688f-e892-3a13-b17c-ff5c5ebc82cc.roa (raw, json)
Hash identifier: OK23SGfKsbV62d0PzD/4DYiuhv1EVHXM5D7Kvdyrono=
Subject key identifier: D6:5F:3D:5B:AF:1D:73:2A:A5:6D:09:3C:61:4F:A1:9F:78:66:97:8A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584046035544A930BB904B92B800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7fa5688f-e892-3a13-b17c-ff5c5ebc82cc.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 144.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:03:55:44:a9:30:bb:90:4b:92:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=fecb5280-e450-4404-908c-912d9c1a49d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8b:e9:e6:1d:bc:ee:c8:0d:14:75:94:49:c1:
61:4a:00:98:0a:33:c7:a3:c0:69:3f:89:19:2e:1e:
9a:a2:aa:69:98:97:0a:f7:bb:45:6c:91:63:7c:56:
c7:aa:08:4e:67:cf:ef:0c:a0:3b:4f:ef:e5:a2:f0:
05:0c:e2:cf:81:12:ca:af:b7:97:22:e6:30:0f:3f:
1e:6a:ec:51:85:6a:d4:eb:4d:20:64:b4:3e:d7:82:
db:00:ec:f9:2d:c4:36:af:b8:c1:e1:e2:a6:a1:81:
d1:6b:62:be:27:1c:e8:e0:9f:31:d8:e5:90:4f:d2:
fc:ce:38:0c:99:ae:52:62:53:03:b8:27:dd:a9:b7:
e7:44:87:bf:c2:08:d1:39:c7:21:ac:85:52:5b:94:
77:5a:54:90:bf:b9:14:c1:83:fd:eb:94:db:ea:6f:
b1:c8:80:4c:26:e4:11:e7:4c:73:ee:3f:af:a8:81:
e1:50:05:8d:1b:d8:78:5a:d0:c5:19:f5:aa:27:1c:
38:dd:a2:4b:2e:c3:b2:66:65:12:5f:98:40:04:7a:
7a:92:ec:a8:29:b3:e2:da:4b:9f:6e:f4:47:a2:c0:
d6:59:8f:b7:b3:6f:a3:2b:33:80:3c:da:10:64:80:
b0:c3:81:e9:d3:9f:0b:c4:63:20:9d:00:09:ea:df:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5F:3D:5B:AF:1D:73:2A:A5:6D:09:3C:61:4F:A1:9F:78:66:97:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7fa5688f-e892-3a13-b17c-ff5c5ebc82cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:73:dd:45:55:12:7b:b3:d9:d6:05:74:fe:aa:01:2d:3d:6e:
92:ad:71:01:9a:6b:4f:75:8a:4c:54:42:25:58:de:19:5b:28:
06:08:a4:8b:a6:1e:34:02:d1:57:d8:b7:a4:23:7d:f0:47:5e:
86:82:2a:ec:90:a1:d9:38:f4:fc:39:1d:8a:ff:34:70:b1:bc:
53:cc:25:f6:4c:75:42:be:26:4e:40:57:96:7c:f5:61:8c:2f:
8a:6c:8d:16:56:c3:89:ce:01:b0:d8:85:d1:00:af:6e:72:67:
f2:3a:dd:69:aa:cc:9e:3b:67:d2:68:ed:d0:03:f6:f2:23:64:
06:cf:6b:81:c7:57:50:f8:ac:99:51:de:f7:bd:b9:e3:da:22:
56:39:92:62:24:62:26:59:e7:81:4c:58:41:c0:3f:61:69:7c:
8a:2c:95:73:ec:f9:06:e9:84:e7:45:6c:3f:29:87:9c:f5:c2:
e1:07:39:96:10:a3:83:1a:22:12:1b:6f:64:ba:df:73:10:ae:
0f:4e:40:a3:44:e3:8b:b6:56:a5:82:9f:f7:92:4c:ce:92:c9:
4a:71:61:9a:8a:87:0c:30:1c:ff:b0:4e:ca:b5:99:65:ae:15:
e2:49:e7:b0:d8:30:37:e9:36:95:8a:fa:b3:7c:7b:a5:96:ce:
4f:b7:dc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:47:39 2025 by rpki-client