Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/89e0f04a-7b8b-3b3c-b592-391cc414f03e.roa
File: 89e0f04a-7b8b-3b3c-b592-391cc414f03e.roa (raw, json)
Hash identifier: u0nvG8YStvIx139znRWI2uUjGSx+CYyqfNCpSOV0QXc=
Subject key identifier: 57:24:8B:1A:DE:8E:6D:54:25:E8:8C:36:3D:F3:C3:AE:26:21:46:C8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C700CB668899BACCC6EAA9920
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/89e0f04a-7b8b-3b3c-b592-391cc414f03e.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 143.204.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:70:0c:b6:68:89:9b:ac:cc:6e:aa:99:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=b4d82f8d-ac17-481a-8588-4496668f22f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:df:a5:9b:78:c5:5c:4b:35:67:9f:87:7e:12:
f5:21:83:c9:5a:b8:25:2c:7f:17:a1:95:39:6f:10:
d6:dd:60:de:fd:3f:3c:12:33:fa:3a:57:32:9d:42:
b8:9b:0e:08:a9:0c:ec:3c:ae:a8:eb:ef:db:30:2e:
62:94:ba:a3:f2:9b:88:37:ae:9a:6a:ca:ac:83:61:
ac:fd:1b:1d:0e:83:b1:73:8e:8e:40:77:82:21:9b:
d7:35:8d:99:4d:59:1a:3c:87:57:d0:93:7e:47:c0:
87:f4:34:a0:b7:a7:06:83:3a:af:8f:93:e7:60:62:
31:2d:d3:a8:39:b1:88:20:49:ed:3f:38:97:62:92:
6b:a7:5c:f6:0d:5a:7d:3e:8a:e3:ad:91:b4:17:0f:
bc:e9:f4:2a:72:71:6e:2e:13:85:ff:80:73:63:7c:
97:67:5b:33:52:7b:53:46:56:23:5b:3d:08:18:b6:
ea:9f:42:e3:45:ba:44:83:c4:a4:07:0e:ff:84:63:
27:62:05:e3:16:7a:a8:79:a5:3e:b7:25:c5:81:b9:
fb:20:b0:31:73:6e:ca:42:66:88:20:b2:e3:8c:03:
bf:68:58:44:2d:d4:97:58:62:53:97:42:c3:22:72:
fc:c3:02:dd:fd:9b:9a:de:cd:84:ca:31:94:bf:18:
9f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:24:8B:1A:DE:8E:6D:54:25:E8:8C:36:3D:F3:C3:AE:26:21:46:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/89e0f04a-7b8b-3b3c-b592-391cc414f03e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
143.204.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:20:6a:7a:f5:ad:d6:0c:7e:08:04:64:ae:85:f4:be:48:ec:
54:48:8e:b3:ca:48:17:9c:7f:ce:5d:74:55:c0:fe:03:10:b3:
63:e3:37:1e:14:0a:bf:30:6e:fc:11:ba:52:a2:10:5b:c5:d7:
c1:f2:82:a0:5b:ce:02:ca:59:70:cd:81:50:c7:36:fe:d3:ef:
27:0a:84:39:93:85:92:82:70:8c:5e:56:dd:c8:db:8d:da:42:
85:8c:29:e6:87:f6:7c:78:89:d5:f0:12:fe:6b:fe:b1:6a:78:
6c:8b:a4:25:a4:21:b1:36:54:3c:fb:7e:58:21:c0:1b:31:a7:
fb:42:f1:4b:a4:1d:ba:5f:7a:bf:ec:70:c6:07:2a:5b:ac:fc:
18:3d:57:fd:3d:fe:d3:cc:5d:d3:87:70:81:a8:48:a6:cc:af:
c0:00:76:7b:c0:4a:c3:13:b9:86:f1:55:bf:c9:5b:b5:e3:67:
df:f3:26:4b:16:41:6c:62:4f:fa:cf:5b:34:6f:46:2f:01:89:
c3:4b:30:3b:f7:8e:d0:76:e9:df:90:72:da:1b:a8:ac:76:bc:
39:c8:cf:e4:59:bb:3a:e4:43:13:eb:f0:7a:e2:fe:1b:f1:03:
9b:d8:77:c5:fd:6d:d6:b6:4c:61:1a:9d:1f:9f:28:b5:72:05:
9d:6b:92:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:48 2025 by rpki-client