Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9a7faa4e-d99d-39df-b746-9eae4f783733.roa
File: 9a7faa4e-d99d-39df-b746-9eae4f783733.roa (raw, json)
Hash identifier: PelwCOrq1Aee7TYI9vxsBfkMkpw1G7WJ5xUGxztd3xU=
Subject key identifier: 7A:26:AF:DD:DA:23:B5:A5:14:E2:64:8F:A0:94:FF:AD:1B:B3:9B:C2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF5419172D8745422F56EA880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9a7faa4e-d99d-39df-b746-9eae4f783733.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 153.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f5:41:91:72:d8:74:54:22:f5:6e:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=da94482e-5e7a-4ed8-b038-2865717e44b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e4:a8:1e:d2:a3:7a:45:fe:33:3c:af:36:1d:
77:3f:3f:49:2b:d8:19:8a:46:99:3e:d4:22:e8:65:
f1:94:02:1d:5f:c2:88:1a:fd:f3:6f:cd:ab:6f:1a:
c3:23:18:97:2d:f4:b6:85:37:78:8d:c4:e1:a2:dc:
66:28:5d:79:6a:8c:91:2e:ae:d8:33:f9:79:c7:b9:
12:78:2b:1a:26:a1:38:18:74:d0:27:71:5f:58:9a:
0a:9a:9f:50:99:63:bd:73:a1:05:a4:0f:47:99:c6:
12:f7:96:f2:60:a7:1a:93:8f:e1:75:3d:36:6e:6d:
e0:3c:27:d6:61:16:4d:74:6c:7c:d4:97:d6:45:2d:
91:8d:bf:46:5b:fb:38:f1:6f:ce:bd:90:11:5a:80:
a6:9d:ac:f1:a0:6b:1b:b2:f0:18:90:07:e0:1d:5a:
60:89:78:7a:d8:31:72:3d:d1:b9:48:76:c7:0b:b9:
ab:75:04:42:27:63:56:df:e4:f1:71:7d:4a:75:a7:
a9:cb:47:a6:aa:12:ca:d6:74:79:b4:f8:55:4b:04:
66:42:8a:ae:11:e2:04:8b:18:c1:67:36:25:8f:10:
21:a8:47:23:94:9a:21:da:bb:07:34:d9:af:85:10:
94:9c:be:a8:c7:c0:21:ca:30:ed:cf:f3:e9:e3:79:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:26:AF:DD:DA:23:B5:A5:14:E2:64:8F:A0:94:FF:AD:1B:B3:9B:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9a7faa4e-d99d-39df-b746-9eae4f783733.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
153.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:94:e7:5f:0a:c9:7d:a5:cc:6b:67:1d:39:82:b3:08:3f:be:
c8:7a:18:a7:0e:c9:03:32:99:72:b0:d0:05:19:49:69:52:0d:
cf:5a:8c:5a:77:6c:a9:6d:eb:84:6d:57:82:b4:e2:4b:d0:bc:
f0:75:73:d9:45:e7:68:e4:78:e6:da:09:d8:e7:ff:d8:eb:1e:
0f:40:e1:cd:a6:cc:16:6f:b7:6e:30:8f:c5:e2:96:97:5c:f8:
89:cb:53:dc:7c:4a:31:5a:ea:06:44:a7:d7:f0:fa:25:82:41:
e6:0b:2a:17:4c:f3:98:3e:ae:d5:33:50:f7:75:73:67:83:1e:
6b:86:dd:06:cd:3d:ae:33:99:19:94:0b:24:58:e5:b2:c3:dc:
70:7e:58:03:80:0c:8a:e3:d1:d5:e6:7d:1d:6a:45:e0:d2:05:
e9:7d:c6:38:44:ea:71:4d:eb:75:33:2d:b2:ae:85:32:97:1d:
ee:3e:83:85:e8:f3:73:9b:12:87:4b:62:e4:25:d2:63:14:b4:
d5:08:96:05:7c:9d:b9:46:4b:f5:18:56:a7:a6:ec:51:ab:0e:
85:b2:f2:93:f3:43:4a:a7:eb:83:34:3e:a6:cd:d6:49:fe:2d:
2b:49:b5:4b:f7:d2:3b:79:9a:31:fb:d2:dc:ad:41:9a:6c:70:
14:70:64:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:24:23 2025 by rpki-client