Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/990b625b-ab6d-3e3b-9af4-739b95387a96.roa
File: 990b625b-ab6d-3e3b-9af4-739b95387a96.roa (raw, json)
Hash identifier: u5zoWvAFcMPdNYktrTO+siN4RI3i4UcKy6S9V5P5jiA=
Subject key identifier: 6F:1B:EB:15:AD:9E:64:49:A9:30:E4:E2:8D:08:67:27:F2:19:93:48
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF74CC5B03DF37138E4B8F300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/990b625b-ab6d-3e3b-9af4-739b95387a96.roa
Signing time: Thu 19 May 2022 12:00:00 +0000
ROA not before: Thu 19 May 2022 12:00:00 +0000
ROA not after: Fri 24 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 141.139.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f7:4c:c5:b0:3d:f3:71:38:e4:b8:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 19 12:00:00 2022 GMT
Not After : Jun 24 04:00:00 2022 GMT
Subject: CN=9bdbcb01-f88c-40b4-9951-0a4d45965f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:09:6f:ff:3c:22:9a:37:79:bc:75:0c:37:
7d:af:6e:30:98:97:13:e8:42:60:fc:e3:25:b6:e6:
e6:e7:53:18:40:50:ce:4c:b9:ab:08:68:88:84:c7:
5b:75:ea:99:13:39:bf:ce:9d:49:25:20:50:c5:6b:
04:df:b4:41:8b:9e:6c:f3:86:54:81:ba:48:8a:86:
5b:f9:03:d4:44:fe:eb:49:e1:2a:fb:86:47:5f:56:
ed:94:94:c3:e6:28:1a:a4:3a:fc:0a:7a:08:8e:9a:
2e:e9:4e:95:3c:47:99:35:29:97:66:4d:6a:35:8b:
ef:a8:37:4b:b2:29:a2:c3:45:42:06:7d:31:dd:98:
f0:f3:95:77:8d:95:c1:4b:d2:5d:44:f8:78:71:d1:
5b:28:e2:00:c7:7d:82:97:a4:49:96:6b:29:66:88:
b2:14:9a:a3:9f:e9:05:57:f7:bf:cd:d7:8e:e3:58:
5b:03:ce:90:52:08:a1:41:cb:99:68:75:0a:5c:89:
e3:d3:8e:c4:e0:53:b7:ad:b5:a8:ee:c9:cd:a7:d7:
ec:71:2f:32:ae:f1:39:d9:95:dc:e2:74:ea:d7:3c:
b8:2e:b9:b1:23:ca:13:ac:2f:c7:ef:34:26:47:38:
0a:1a:6a:d1:51:6c:db:c9:89:01:83:3d:c8:51:5b:
ee:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1B:EB:15:AD:9E:64:49:A9:30:E4:E2:8D:08:67:27:F2:19:93:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/990b625b-ab6d-3e3b-9af4-739b95387a96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.139.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:b7:b0:69:f3:41:53:d2:67:c0:b7:42:30:31:37:10:39:85:
76:90:bc:8c:58:9e:e5:cc:2f:48:ab:76:af:9a:50:ce:e2:c6:
28:99:d4:04:c5:15:2c:55:b0:90:3c:85:cb:17:e5:68:95:8d:
ac:7a:ef:d8:c2:90:8b:6d:c3:dd:0e:ca:7d:c0:63:24:ad:25:
24:75:7e:0e:37:3e:2d:9e:db:b1:95:b4:6a:12:db:72:c0:67:
ab:a8:67:68:f1:80:2b:7b:a8:c8:52:1c:b8:b6:0c:95:10:1e:
73:9e:e1:ad:9f:8f:65:bd:d0:07:87:18:47:22:fa:e9:da:6b:
58:af:2a:9f:fc:33:26:c8:b9:c7:77:a3:c2:ab:74:5f:3a:58:
61:5e:5c:22:1c:3e:e1:e3:25:37:a2:97:27:53:ff:2c:e2:05:
e9:c4:a2:7e:b3:cc:ed:0c:95:74:c4:50:28:40:85:b0:c6:da:
5d:9b:06:4e:ff:b2:1e:a5:51:a0:e5:bc:de:46:fb:0d:82:e6:
b9:7e:62:a2:a7:cc:96:2c:66:51:87:e7:df:e7:98:8c:22:a0:
72:46:65:39:c0:05:1a:1b:35:95:b1:49:cb:13:0e:20:7d:13:
3b:13:a3:4b:0e:bc:f5:7f:09:a4:40:e4:42:72:f1:27:de:a8:
9d:e9:b1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:10 2025 by rpki-client