Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8a0c817a-6ea7-3737-a423-ce872bef1a2a.roa
File: 8a0c817a-6ea7-3737-a423-ce872bef1a2a.roa (raw, json)
Hash identifier: o54ALtTTebqNov/GDaUyyNMqdU8L6IZriO7uVZYDlKQ=
Subject key identifier: E2:15:D8:EE:7E:1C:C5:2D:FB:83:DC:33:B8:7D:D0:42:1E:23:79:1B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E0B91C2CF978E8190C0930640
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8a0c817a-6ea7-3737-a423-ce872bef1a2a.roa
Signing time: Thu 26 May 2022 12:00:00 +0000
ROA not before: Thu 26 May 2022 12:00:00 +0000
ROA not after: Fri 01 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 151.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:0b:91:c2:cf:97:8e:81:90:c0:93:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 26 12:00:00 2022 GMT
Not After : Jul 1 04:00:00 2022 GMT
Subject: CN=7004dd6a-4192-4d81-80d4-25a03b668c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:52:cc:34:a8:8f:92:0e:dc:1d:3b:87:2e:
2f:23:18:ff:49:73:ae:4b:03:f8:3a:cc:79:c0:fa:
73:26:4b:a5:3a:97:ab:45:30:30:76:b4:78:61:b4:
a0:92:e8:48:61:47:5f:01:ae:e9:73:a7:b1:23:2e:
43:0a:55:27:46:1f:0d:9e:e1:3a:23:ab:0d:ba:a9:
fa:4d:63:07:9d:1c:ba:12:60:21:c8:6a:78:ba:32:
5f:97:2f:a9:61:d8:fb:bd:9c:bf:c8:8e:f9:55:59:
41:e3:d8:53:c4:bb:66:42:6b:f2:fd:b5:6f:3e:c6:
25:b4:80:3f:dd:16:bf:36:81:ad:94:cb:7b:0a:44:
fa:36:2b:a1:05:03:25:d3:b3:8d:a0:c7:db:30:e8:
45:1b:c0:68:3b:e7:bd:f0:35:f7:1d:96:a6:6f:0a:
88:74:79:d8:87:18:ea:a5:24:57:cd:6a:56:47:af:
02:e1:92:95:86:cf:3e:f4:c4:2d:c3:d4:2d:cc:01:
dd:cc:7c:d2:c6:94:00:84:4d:12:01:b5:86:3a:fd:
1e:a9:b2:21:3e:3f:80:75:75:35:f9:9c:7e:b8:c8:
e4:ba:9d:33:9d:d1:a3:28:f1:ac:50:3f:5b:c6:b2:
55:8e:21:12:b6:36:2b:1a:97:8f:d8:68:e9:71:fb:
2d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:15:D8:EE:7E:1C:C5:2D:FB:83:DC:33:B8:7D:D0:42:1E:23:79:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8a0c817a-6ea7-3737-a423-ce872bef1a2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
151.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:aa:22:2b:ba:24:aa:9b:a1:76:80:65:9e:5d:40:fc:89:71:
6e:e2:17:b9:8b:ef:1f:2a:c3:d2:67:fb:64:e9:5e:2c:88:e4:
bf:85:cf:24:76:ae:60:fd:49:31:ed:9e:31:e3:82:fc:d8:fd:
df:57:1b:97:1f:a9:8a:9e:53:48:a0:2a:69:21:55:e3:7f:5f:
88:d6:65:2d:e5:61:31:33:77:fb:f4:29:2b:f0:3d:9c:6b:13:
1b:b3:f5:5c:df:50:2d:80:52:97:e9:65:20:49:a0:fe:58:0c:
b4:4d:8a:bb:fe:27:bc:15:e4:9d:76:ee:08:d9:48:53:14:23:
5d:da:17:fe:f3:b5:6e:8e:49:3a:38:9d:eb:73:79:df:30:f3:
3f:d4:f5:8f:36:fc:f2:61:06:ec:e9:00:77:88:a9:0b:e3:05:
cd:12:ad:bf:51:83:4d:8d:26:72:63:14:cc:7d:b0:c9:32:fe:
2c:98:01:c5:d6:da:0d:a3:12:2e:ca:66:c3:dc:c0:ea:81:04:
16:12:5f:58:82:43:80:d2:52:26:4c:88:35:83:7a:2d:5c:df:
2a:fc:05:1d:f7:09:1d:b9:8a:b8:2b:88:05:99:dd:f5:e8:b0:
76:15:ef:22:9a:3a:f1:03:fc:55:1a:7b:0e:b6:81:bf:22:03:
5f:10:e8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:05:41 2025 by rpki-client