Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/849a1369-d918-3ddb-b8c0-e656fcac4f14.roa
File: 849a1369-d918-3ddb-b8c0-e656fcac4f14.roa (raw, json)
Hash identifier: BIoD7+/dDBsHxPiwk6CsPhuy6oP8HlnMEtqVeDvo//E=
Subject key identifier: 6F:3A:3F:02:28:48:FC:AD:7C:DA:69:B8:BE:F0:11:95:C8:B6:EC:50
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D4800A0FC965ED4630871FB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/849a1369-d918-3ddb-b8c0-e656fcac4f14.roa
Signing time: Fri 18 Mar 2022 04:00:00 +0000
ROA not before: Fri 18 Mar 2022 04:00:00 +0000
ROA not after: Fri 22 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 151.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:48:00:a0:fc:96:5e:d4:63:08:71:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 18 04:00:00 2022 GMT
Not After : Apr 22 04:00:00 2022 GMT
Subject: CN=9320a1cd-dfce-4b6d-8974-efc04ebbd1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:08:48:2b:6b:6d:19:ad:06:44:61:9e:0d:02:
ea:28:d9:99:ee:83:4e:a3:21:65:d1:a2:18:1a:aa:
70:29:df:f9:bb:6c:a7:83:94:00:4b:5f:3e:cb:3b:
68:84:e9:c4:f2:28:fa:97:b5:a8:cb:5f:d5:50:cd:
83:ba:ae:eb:87:c0:cc:82:0b:33:93:1b:8a:fa:08:
16:ef:1a:8e:25:c1:4a:de:08:74:b6:98:6e:68:9f:
be:8a:3d:72:98:b7:21:c6:5e:01:db:7c:50:97:66:
a1:54:14:54:ca:b6:82:23:18:65:dc:74:2c:84:18:
eb:b0:93:bd:ba:51:c2:be:e0:68:c6:85:27:7a:24:
6b:1c:ac:27:62:78:c1:11:9f:59:a2:b8:58:a6:8f:
8a:da:c6:9a:79:fa:c6:e3:7a:c3:cb:05:d0:da:95:
24:10:35:95:36:a6:69:e2:da:e3:f6:5c:7b:a2:2a:
e6:70:5b:e1:97:6b:f8:82:3b:18:12:16:93:b0:64:
7c:0c:55:e2:b4:49:ee:d7:1a:ad:c5:44:d6:51:d5:
09:56:46:03:cc:b8:a6:49:22:c7:6b:9e:51:f7:e3:
b7:c3:aa:b4:dc:5f:9c:f3:8c:f0:4d:f5:c7:c9:e7:
09:db:2e:78:a4:69:11:02:11:47:ac:56:31:5b:5e:
1e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3A:3F:02:28:48:FC:AD:7C:DA:69:B8:BE:F0:11:95:C8:B6:EC:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/849a1369-d918-3ddb-b8c0-e656fcac4f14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
151.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:62:a9:12:46:5f:0e:94:ca:44:49:68:22:1d:70:b2:63:31:
44:38:c3:77:07:8f:43:fa:b0:ee:79:3f:d4:63:5d:44:c8:fc:
4b:10:2c:07:fc:08:f4:32:a0:6f:49:c0:7b:0a:bb:c5:aa:f2:
b4:0c:fe:fd:d5:22:61:cd:60:78:f5:7f:66:6b:83:ad:8f:8c:
e6:90:a0:c0:05:56:4e:8b:8e:a2:d1:c9:e7:ef:a0:43:e1:83:
b2:89:ac:40:88:d0:cc:c3:45:2c:36:7f:26:54:ce:94:cf:73:
a9:4c:57:84:f6:a1:5c:e8:38:75:3e:cb:7a:72:de:d9:f5:42:
45:c7:88:f3:ee:66:80:73:fa:e3:42:d2:75:f4:c0:e8:8c:d0:
43:a2:9c:ff:10:3c:e4:2e:9a:47:41:40:28:0d:11:9e:07:95:
69:01:7d:2a:8f:03:3f:52:28:e7:f5:b2:66:4e:64:fc:ef:41:
73:0a:c6:de:9c:ce:61:9e:fe:d5:5f:d4:fa:20:17:fa:b8:ff:
30:b8:b3:9f:ba:2f:5d:bd:4c:a5:0b:c0:6f:b1:05:72:e6:d3:
0e:17:6b:2b:50:5a:0e:3c:4c:8c:69:d5:52:d8:47:bf:f7:ea:
c2:d7:0d:02:a1:92:99:8d:c9:ea:5f:58:ec:ec:11:fc:2e:21:
bf:bb:87:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:14 2025 by rpki-client