Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87cd37b9-ec9e-3b4a-baaa-6fe00fadb335.roa
File: 87cd37b9-ec9e-3b4a-baaa-6fe00fadb335.roa (raw, json)
Hash identifier: bBYce41kPUrXlf/gtG3jvBWtozq/XeakUcioquzqGec=
Subject key identifier: A8:E9:40:1E:A6:D8:16:BE:E2:79:64:BF:B8:84:52:4A:CA:42:B6:A6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7E15897C42662B11A3605880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87cd37b9-ec9e-3b4a-baaa-6fe00fadb335.roa
Signing time: Thu 06 Oct 2022 12:00:00 +0000
ROA not before: Thu 06 Oct 2022 12:00:00 +0000
ROA not after: Fri 11 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 153.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7e:15:89:7c:42:66:2b:11:a3:60:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 6 12:00:00 2022 GMT
Not After : Nov 11 05:00:00 2022 GMT
Subject: CN=ad71f3c9-bb87-45ba-9009-5d5c46abfaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:88:8a:80:24:d5:89:9c:19:41:ac:b3:2a:c2:
94:0f:87:79:1c:64:c1:7d:bd:3c:38:06:fe:e2:e7:
20:6e:82:f9:04:d5:f6:60:b0:b7:f4:b0:c1:ec:7f:
32:d5:7f:82:a7:09:ed:fe:d7:e0:34:c0:80:93:f9:
5b:4f:5f:d8:4d:7d:0b:01:d9:af:bc:2e:df:7a:e9:
fa:4c:7b:fa:67:54:72:6d:c9:71:f2:b0:74:44:8a:
7e:36:00:79:30:ae:df:0b:07:6d:96:06:be:86:96:
93:94:f8:bc:dd:87:36:f3:66:73:ba:b0:8e:48:df:
1b:28:19:86:95:18:3b:02:2b:02:e8:65:0b:22:5b:
71:75:05:2e:96:ec:70:5a:38:cd:fe:25:4c:51:d6:
71:94:b7:a9:e4:56:7b:45:b3:d8:ff:2d:22:2a:69:
98:50:1b:3a:b2:23:c4:de:c7:83:46:4d:3a:cc:64:
e3:c6:0f:57:ca:6c:7f:33:8c:00:95:b2:a0:b7:42:
b0:2a:85:56:b0:17:45:d1:4f:7e:ab:6f:5b:54:8e:
a9:a9:dd:95:fe:56:47:b6:ac:66:a3:4d:83:ec:37:
0f:3a:c8:ed:7c:0a:7f:10:6c:95:80:35:28:14:26:
b8:ef:e1:e5:7b:4c:41:24:f4:d0:72:75:fd:b6:38:
0f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E9:40:1E:A6:D8:16:BE:E2:79:64:BF:B8:84:52:4A:CA:42:B6:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87cd37b9-ec9e-3b4a-baaa-6fe00fadb335.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
153.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:84:bc:93:1d:07:48:04:02:c2:20:e4:77:eb:ab:3b:e2:8f:
50:96:15:bf:fd:a4:6b:69:e9:fd:4c:85:5a:7d:ec:7c:75:b5:
02:31:d5:20:da:6f:16:37:cd:93:6e:36:ab:95:e6:e3:52:57:
00:f2:4c:c6:49:f0:10:f4:5b:0f:46:d1:98:64:20:69:3d:bb:
03:06:3d:25:75:d5:48:6c:ca:57:3a:b7:53:16:11:12:8a:bc:
26:71:a0:ad:c9:52:9b:9f:52:68:2e:ed:82:0b:41:c0:d9:67:
60:24:85:46:d8:d4:36:80:60:c1:f7:64:8f:01:5c:f6:c1:3b:
1e:4d:76:29:63:a9:22:3e:cb:53:62:99:db:6c:95:4e:df:d8:
3e:71:15:1f:b2:b6:d7:21:80:35:95:df:d5:89:e2:00:3c:9c:
c6:c9:1f:05:0b:85:7f:8f:b5:89:4e:6c:5c:e4:23:f3:5f:46:
c1:af:c1:4b:c5:89:14:ce:af:3d:71:55:84:61:4a:8e:89:b1:
10:48:b6:bc:9f:a8:d0:1f:65:3b:80:bc:cf:1b:be:09:70:21:
55:58:9c:e2:15:20:0d:0c:4c:ab:83:82:ed:a4:f7:4b:c2:90:
4a:5e:c8:54:0b:86:1b:c2:95:f7:40:45:4c:15:5f:60:21:68:
8a:19:7f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:34:13 2025 by rpki-client