Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8e6d4fe2-82ba-386c-b0ca-6803240d60e5.roa
File: 8e6d4fe2-82ba-386c-b0ca-6803240d60e5.roa (raw, json)
Hash identifier: o8Snd/maiwj4rhweQOUsMMJtOZ0inZL6O7wmNDUM9JY=
Subject key identifier: A8:21:01:AA:44:78:AD:AD:22:E9:91:F3:C8:94:DE:EB:DD:BD:6D:93
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858408F8ECC8B3BAEE2C5D02762C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8e6d4fe2-82ba-386c-b0ca-6803240d60e5.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 144.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8f:8e:cc:8b:3b:ae:e2:c5:d0:27:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=2c9203a1-64dc-47cf-9b35-ef06172a3e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:71:84:e7:ef:e4:d6:6b:61:6d:14:b2:c1:
95:36:9a:e6:a3:8f:19:e1:1a:47:71:b4:e9:c6:4f:
14:40:32:9f:d6:ac:45:1e:67:25:df:af:aa:c9:6b:
c9:0a:6f:9c:27:d4:43:03:33:a8:ec:8a:e6:19:ee:
2a:5a:cf:72:4e:57:7c:c3:38:bd:db:6a:59:2f:76:
24:c3:a1:7c:1d:2e:83:cc:98:c7:2f:98:d6:7f:ef:
5e:ed:24:1d:76:f9:9b:6a:18:6b:bc:9e:9c:56:e6:
98:6a:1d:c2:e3:ae:da:56:0d:c2:d1:bd:86:b4:61:
79:df:b8:95:a9:88:34:13:9d:91:8c:15:84:3b:2e:
bf:f0:ea:b2:97:2d:f2:ac:90:45:0a:d6:6f:42:a9:
91:55:27:d8:f0:3c:b3:e9:39:37:65:2f:d2:ad:5f:
c0:86:33:cf:b0:14:f3:8a:65:b8:a3:3d:13:bd:f9:
80:cd:e9:6c:f1:88:b9:13:e0:87:43:73:84:31:4e:
fe:66:b0:cf:42:6c:f5:35:20:2c:b7:5d:a7:83:c8:
8f:5c:d5:42:a4:79:9a:96:96:a7:b5:8f:3c:50:cc:
4f:b2:bd:cc:4d:d3:2f:a4:1e:df:9b:2c:ba:8d:48:
d9:6f:8a:4f:c9:84:76:d1:9a:41:ac:93:f9:89:44:
47:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:21:01:AA:44:78:AD:AD:22:E9:91:F3:C8:94:DE:EB:DD:BD:6D:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8e6d4fe2-82ba-386c-b0ca-6803240d60e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:d9:5b:67:a0:ef:2c:1f:6a:a1:dd:9d:58:93:e1:57:92:57:
cd:e5:a2:7c:df:a0:a0:cb:26:c7:26:e4:22:0d:d3:06:4d:1d:
fe:a6:7b:43:5e:84:2f:71:dc:aa:2a:86:eb:86:61:6d:93:98:
b5:3e:65:7e:68:0a:b0:4a:13:ac:de:53:ad:db:84:41:13:81:
49:db:8d:49:d2:64:fc:4e:a0:f8:37:3b:b6:c7:22:39:d6:55:
ee:a4:77:23:58:e0:03:f7:55:1b:04:5f:90:43:8c:b8:b2:f1:
05:72:2a:e3:47:b1:64:b2:5f:51:84:81:33:15:5d:23:c8:a0:
85:dd:43:01:5d:cf:ce:c8:fd:6e:eb:c3:ff:de:6b:bb:ea:ee:
68:a5:41:75:0e:81:43:77:34:b2:28:e9:eb:47:d4:7e:eb:c4:
ae:4b:dd:7b:8f:d7:83:1b:b4:a6:d0:cc:44:3a:f3:b5:d5:a6:
c0:5b:b9:00:a9:c2:b8:c7:73:a0:e5:8f:63:0f:51:94:91:78:
a3:9a:26:ea:80:13:a2:50:2b:4d:dc:7e:f8:f6:5a:a2:75:98:
c6:dc:cc:c2:95:c0:41:50:5b:b2:30:78:94:4b:17:68:12:fa:
98:ff:5b:c4:88:fd:99:1b:12:24:35:57:44:94:5a:53:cb:4b:
59:e4:88:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:18 2025 by rpki-client