Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/98da0a04-e098-31b5-8412-2bdcb69ee316.roa
File: 98da0a04-e098-31b5-8412-2bdcb69ee316.roa (raw, json)
Hash identifier: 64RWztnJ5CE4tPiX7xSQtb8hXcuqV8ipjxFI5ik8rg8=
Subject key identifier: 56:91:FE:E2:91:96:9F:B2:5E:3C:D9:56:D7:14:0A:34:85:43:C4:46
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D5AA5B3700B2C508E9C27FBE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/98da0a04-e098-31b5-8412-2bdcb69ee316.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 156.7.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:a5:b3:70:0b:2c:50:8e:9c:27:fb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=5d43a2f5-dd38-4535-acba-a0d94f65beae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cf:e3:25:d4:df:7c:a8:33:90:76:22:d1:df:
22:79:83:f7:4d:65:a9:a0:ee:af:5c:fa:66:c1:48:
5f:2d:e1:de:5c:42:23:f7:c6:f8:c0:38:ff:ef:2d:
38:c0:70:2b:4a:46:a6:b9:c6:41:cb:20:a7:b8:bd:
47:11:be:05:d4:a6:cf:43:c5:e4:8a:a0:f9:05:a8:
0a:57:51:88:15:18:6e:72:16:47:4a:0b:85:b5:d8:
09:28:87:3e:17:5c:8f:2d:d0:f9:af:76:40:87:65:
93:e8:b5:da:b4:65:fb:01:49:dd:31:58:55:dd:a4:
b1:24:5f:3d:a4:92:69:d9:7d:d4:e6:4e:06:4a:31:
b8:e9:13:3e:ea:60:53:82:8b:0a:02:84:57:c5:a4:
bc:71:86:68:d2:83:62:9b:c1:4e:ca:3e:a4:e6:f9:
cc:9e:2e:5c:6d:d2:b1:3f:45:de:ba:8e:84:66:ee:
40:ba:1a:45:72:26:01:b9:f3:09:46:0b:83:09:36:
92:c9:02:83:59:bb:36:89:a1:51:97:74:8d:48:78:
54:ca:49:07:94:b1:5e:9f:6c:d6:79:f2:76:5f:9f:
d6:55:cc:96:a0:e4:d0:08:75:f8:de:8d:36:5c:8c:
ad:c1:47:43:c1:21:01:56:44:03:ca:67:06:51:0d:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:91:FE:E2:91:96:9F:B2:5E:3C:D9:56:D7:14:0A:34:85:43:C4:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/98da0a04-e098-31b5-8412-2bdcb69ee316.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
156.7.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:41:fb:f5:1e:75:4a:23:57:c0:35:6a:df:86:32:21:67:fe:
33:d7:6a:1c:d7:9c:1d:ba:23:75:eb:78:43:73:c0:81:72:47:
5f:07:bb:1e:4d:11:8f:9c:f5:b7:04:96:d6:15:37:2d:2d:65:
54:e8:e6:fa:71:24:05:1a:83:2c:32:87:93:63:09:35:16:03:
d3:d1:b4:38:74:3e:4f:78:5e:33:78:5c:7f:fd:c7:d0:fa:d4:
8f:fe:dd:e0:46:21:90:d9:e6:a1:58:2d:1a:ab:3e:0e:09:0e:
2f:92:b3:67:b0:e0:d1:73:80:04:11:51:3c:f3:d5:fb:91:bb:
d8:ef:a3:77:d0:d2:6a:24:a7:ba:92:9f:9b:b1:6a:27:bb:f1:
50:10:51:21:53:bd:78:8a:d4:36:57:ee:70:07:12:86:42:ae:
3c:0d:30:ed:8f:72:fb:a1:2b:97:c5:2c:a0:2c:6f:05:82:bb:
12:2c:27:7a:f9:91:ef:52:73:d0:d6:9f:5a:1d:a2:fb:97:5f:
80:f0:66:c1:2a:01:b3:aa:dc:98:5a:14:9e:8d:85:69:a1:f3:
0b:9c:b6:e0:44:5c:17:5f:41:58:dd:5d:91:c4:12:66:e3:a3:
a1:08:41:49:2b:dc:32:e1:fe:ad:cd:bd:3c:f5:a4:e4:b7:bd:
c3:d9:f2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:28 2025 by rpki-client