Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d5e7fc4-9eb1-3e89-b983-a050d22e9626.roa
File: 8d5e7fc4-9eb1-3e89-b983-a050d22e9626.roa (raw, json)
Hash identifier: 7FFBDHdUSQ57dz06WcrmpEK4Hbj5MgboYQSvZZ4y9cA=
Subject key identifier: EF:EE:3F:CD:E3:58:B4:D6:35:88:15:43:6E:26:30:AD:21:8D:EC:F4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE22EE31098C6A24B8C96AC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d5e7fc4-9eb1-3e89-b983-a050d22e9626.roa
Signing time: Thu 11 Aug 2022 12:00:00 +0000
ROA not before: Thu 11 Aug 2022 12:00:00 +0000
ROA not after: Fri 16 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 144.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e2:2e:e3:10:98:c6:a2:4b:8c:96:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 11 12:00:00 2022 GMT
Not After : Sep 16 04:00:00 2022 GMT
Subject: CN=9002c89b-f4f1-4573-92ce-8002edfb3265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:00:cd:1b:d5:c2:0b:d2:06:2d:b3:65:98:d8:
f7:1f:6b:57:1d:f6:a0:9b:15:2a:2c:47:6a:b5:ac:
2a:5e:9d:3f:44:a5:ed:b4:bd:2c:11:46:f9:b4:0c:
a8:0e:05:ec:76:cf:1c:c3:4c:3c:dd:b5:c3:61:24:
d5:de:33:e7:ae:46:b8:4b:29:b6:04:77:c3:4b:4a:
9e:4f:91:22:08:46:e1:94:e3:57:fd:21:3c:d6:6b:
09:89:71:31:a1:71:1c:f5:2c:08:ae:51:1c:42:2f:
e4:b4:d7:ed:14:df:f4:90:9f:72:ae:f2:44:d6:60:
f1:b7:00:1c:55:10:09:74:41:65:ec:9a:cc:9b:38:
8a:5b:51:fa:3e:c1:bb:d4:99:dc:9d:cd:03:34:53:
68:15:dd:6a:6e:55:7c:18:9d:5d:27:3f:60:ad:e2:
ef:fe:ba:39:56:d6:c7:76:23:5f:df:58:58:cc:52:
1b:d6:a6:ca:40:91:36:c3:c8:34:f4:95:e0:3a:83:
f0:1d:5b:14:34:df:6c:a7:2f:6c:45:27:25:25:aa:
a6:81:ed:07:82:d9:d5:d7:e9:2c:ce:20:98:60:b6:
3e:ad:af:5b:a9:c5:33:e5:21:ff:ca:fe:e8:f0:3b:
0f:29:37:96:a6:cd:4d:72:b3:66:b5:3c:12:5c:ff:
29:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EE:3F:CD:E3:58:B4:D6:35:88:15:43:6E:26:30:AD:21:8D:EC:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d5e7fc4-9eb1-3e89-b983-a050d22e9626.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:71:8d:d3:59:04:83:7d:1c:e4:7d:e4:46:44:7c:b4:f6:ba:
6e:af:c5:a6:8b:00:ca:5b:18:0b:c1:d5:f1:9b:e6:97:96:37:
75:c1:93:7c:eb:17:de:69:ec:82:38:b5:ec:6a:4d:10:42:41:
b0:e1:15:57:29:70:4c:89:d8:54:de:9a:ca:0c:92:51:f1:14:
c9:5a:76:9d:bd:69:00:a7:c9:4a:b5:0a:46:ca:4e:8f:e2:ce:
49:2b:86:2f:90:e2:c7:be:6f:55:ad:33:bb:56:5f:b5:e7:f3:
80:c9:ca:35:fc:e6:13:a1:62:4f:96:d9:ce:9c:8d:66:4f:0c:
a7:c2:98:88:47:93:4f:3b:90:98:bb:f3:b3:d1:76:fb:cc:5a:
ae:08:09:bb:84:62:73:a8:1b:b5:0a:b5:27:10:1f:b4:9a:4f:
94:ed:e0:7c:83:96:2f:2b:26:6d:87:50:57:00:87:6b:73:da:
23:ee:ae:11:d7:7f:d8:bc:27:ae:f3:36:fb:65:51:77:47:64:
56:fc:f0:3b:fc:c6:fd:cc:e9:d0:fa:6a:e3:4d:dd:60:3a:9f:
60:93:f8:a5:72:70:65:23:91:9b:07:92:b2:0f:84:e7:bb:c3:
e3:99:0c:b8:11:4c:a8:8a:bf:6a:53:bf:f0:93:f5:eb:07:0f:
e6:b2:b8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:18:22 2025 by rpki-client