Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/825ef1df-3bb0-38ac-831d-0591ecffa1e5.roa
File: 825ef1df-3bb0-38ac-831d-0591ecffa1e5.roa (raw, json)
Hash identifier: WNUjnXp9MHh2vQmgVIZ13N/vUYcKvwXnSGbbYntrAOg=
Subject key identifier: 48:85:F9:ED:44:B6:71:E2:6A:11:A5:04:A1:48:57:F8:1C:AC:8E:35
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3052B71569CAA6EA9309B800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/825ef1df-3bb0-38ac-831d-0591ecffa1e5.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 152.25.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:30:52:b7:15:69:ca:a6:ea:93:09:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=85aa2475-6eb6-4c7a-809d-dce990ee0108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:66:c8:07:b7:db:ba:ec:7d:62:d7:1e:1d:92:
3c:a9:4d:2a:df:c2:35:48:ba:e0:dd:63:7c:52:3d:
e5:f4:2b:2f:fc:9f:78:bc:85:3d:3c:a4:24:30:f8:
27:59:22:ab:27:21:c1:34:76:ee:57:45:5a:9b:66:
33:80:b4:2a:68:35:73:8f:83:9c:7e:f1:13:7f:56:
b3:79:66:32:24:76:36:b7:58:ca:74:e5:2e:7a:ef:
22:07:cf:32:a2:08:78:34:51:e9:fe:d6:a3:67:d7:
01:7a:d6:01:5f:42:4c:53:d1:9a:e5:6c:2a:18:6b:
c6:a7:44:61:c4:b8:9a:e2:0a:f0:82:25:c0:78:0d:
a9:d9:ac:ff:4b:cb:f4:2a:6b:3b:f6:9b:39:e0:54:
83:c6:8f:95:67:fe:e9:2b:db:e9:d6:dd:39:9e:9e:
5d:c3:a0:30:b1:d4:5e:c4:aa:c0:7f:eb:0d:d7:ab:
e5:d2:2e:07:cb:ac:2c:77:6a:01:82:2d:d8:50:59:
91:87:4c:89:67:76:61:70:67:e8:27:45:3d:9e:0a:
06:fe:a6:e7:b3:d3:c7:86:3a:3c:0f:f1:f8:f7:0e:
e2:ed:21:3a:9c:27:43:c6:68:9f:aa:e8:19:0f:06:
b5:fc:0c:17:02:de:2d:ca:fc:54:6a:35:5c:e6:22:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:85:F9:ED:44:B6:71:E2:6A:11:A5:04:A1:48:57:F8:1C:AC:8E:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/825ef1df-3bb0-38ac-831d-0591ecffa1e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.25.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:41:25:6b:01:72:43:7a:af:83:5f:e5:ff:50:49:14:f0:36:
f7:6b:6e:86:94:c4:fd:f7:5a:59:ad:a4:19:01:23:58:77:ed:
fe:7e:ae:16:5a:be:7e:90:4d:0d:04:18:09:e9:46:fa:a3:04:
59:d0:3e:20:71:4d:2e:a0:8a:0d:c5:d6:82:42:16:1c:39:e2:
bb:0f:97:ba:6d:83:9f:80:f1:ed:f9:dc:df:76:07:11:33:a9:
b6:b8:e4:62:46:5b:a7:18:7a:35:51:a9:02:81:55:7b:7f:bc:
a5:86:78:76:57:af:5d:bf:72:26:fe:95:0d:85:00:70:da:54:
f4:70:49:cf:9b:20:d7:4f:cc:7d:ee:b0:99:a1:8e:95:79:b9:
83:54:3f:cc:0a:c5:57:8d:09:2c:32:a0:55:c7:44:3a:72:d5:
02:ae:e0:e3:66:d6:cb:14:a8:e7:b0:62:90:7c:fb:ea:e9:d0:
62:18:de:ae:e9:80:26:71:41:6a:11:0a:e2:f8:6e:87:7b:00:
f6:ac:70:8c:21:3c:6d:56:cf:b3:8b:38:16:63:f8:72:6c:74:
c0:01:b5:63:5d:ac:c6:db:2a:43:37:d7:51:9f:e6:98:cb:5c:
a7:26:17:4d:20:af:bb:11:b1:0b:43:0f:87:92:c5:f7:20:ce:
2e:f0:7e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:56 2025 by rpki-client