Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/80bbe72a-ea52-37ea-a38f-5791acb5c22f.roa
File: 80bbe72a-ea52-37ea-a38f-5791acb5c22f.roa (raw, json)
Hash identifier: ZRY24Sz0xD06sS+EEzpyf8r/5w87wCZl8OiSL7LVLPw=
Subject key identifier: C5:39:46:D4:1C:7F:24:08:21:7A:94:8E:3E:1A:92:17:41:EE:A6:91
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F6BE14B76AAB2EDEA23299200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/80bbe72a-ea52-37ea-a38f-5791acb5c22f.roa
Signing time: Fri 30 Sep 2022 12:00:00 +0000
ROA not before: Fri 30 Sep 2022 12:00:00 +0000
ROA not after: Sat 05 Nov 2022 04:00:00 +0000
asID: 8987
IP address blocks: 157.241.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:6b:e1:4b:76:aa:b2:ed:ea:23:29:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 30 12:00:00 2022 GMT
Not After : Nov 5 04:00:00 2022 GMT
Subject: CN=aadcb80d-2989-4605-917d-bd6267a46f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6c:53:30:6f:76:76:77:19:ff:65:bf:8f:70:
1b:b8:b8:8c:6c:b8:dd:b6:88:0b:f7:c8:65:ce:6e:
fd:79:1b:0d:19:f3:64:c5:bf:2a:9a:f2:79:1a:86:
b1:1e:3c:b8:2e:3f:cb:78:36:84:57:d2:af:97:b4:
fe:68:65:8c:5b:af:9c:9b:70:ec:9c:fe:99:d0:33:
79:1e:50:db:98:ad:8c:64:22:91:02:4c:55:ea:4d:
6a:22:60:36:43:73:b3:85:c3:85:4d:b5:95:6f:47:
37:fd:4e:58:10:27:24:8d:e1:89:86:22:cd:73:86:
6b:81:4b:7d:8a:2c:a2:99:fd:fb:18:df:16:37:dd:
51:2d:3b:43:ea:29:80:5f:8b:69:ba:e6:16:0a:ed:
55:03:4a:2b:60:f2:c7:20:f6:89:5b:da:13:b6:d5:
52:49:95:c8:96:62:d9:ca:f2:f6:55:00:1d:55:72:
50:76:28:70:6a:f2:13:92:fa:3d:e3:c6:f3:db:06:
ef:9d:1c:09:32:67:14:50:b5:51:fa:8d:43:ac:9a:
23:f2:1e:9e:93:0c:3b:2d:9c:08:6d:67:0b:60:a4:
94:4f:1e:17:ed:6d:27:1e:66:a8:ce:e7:eb:e8:4f:
61:d1:43:d7:a0:55:aa:1e:5c:d1:b8:d3:55:e3:a3:
40:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:39:46:D4:1C:7F:24:08:21:7A:94:8E:3E:1A:92:17:41:EE:A6:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/80bbe72a-ea52-37ea-a38f-5791acb5c22f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
157.241.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:d6:22:df:67:7e:38:48:e4:bf:65:aa:2b:12:13:ff:5d:10:
af:29:7d:49:22:bf:63:f6:e2:fd:58:f9:49:8e:d2:d4:9e:cc:
d8:8f:fb:c8:80:7f:57:ac:2f:8e:0e:03:1c:2b:f1:13:b0:2f:
f5:85:43:51:b9:4c:e5:e9:87:13:f4:6f:e4:84:5d:fd:1a:68:
49:13:97:1d:c1:4b:16:55:31:ab:4b:88:b4:ec:d9:21:2a:fb:
83:f8:d5:d8:cb:ea:3c:fb:42:29:7b:5e:09:2e:fb:d4:cc:84:
12:34:e3:61:da:4b:54:6f:a0:31:36:07:9e:3a:5b:3b:ac:ef:
7f:b0:cb:ae:2c:c8:75:f3:3b:e2:23:08:96:68:4c:64:a4:82:
02:b3:ba:7d:61:70:06:ef:f3:38:43:c5:bb:78:68:ec:cc:27:
76:b6:e6:e2:7a:f7:9d:7b:f8:d0:97:76:ec:bf:06:09:db:6f:
91:67:66:8e:66:c5:39:b5:4e:ce:2e:e0:f4:c9:2c:cd:34:9b:
34:9f:46:b9:1b:af:6b:24:71:35:53:8d:86:51:93:b6:1f:d6:
29:9a:57:cd:b7:04:4b:3f:1f:ea:f2:3e:91:c3:26:9e:64:e2:
53:c2:71:a6:7e:67:2d:8d:20:6e:a7:28:de:39:1c:e2:26:2a:
fc:00:64:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:07 2025 by rpki-client