Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9bb721ad-8c2d-3cab-ab76-787a6d2fc19a.roa
File: 9bb721ad-8c2d-3cab-ab76-787a6d2fc19a.roa (raw, json)
Hash identifier: c+7AI5YB2p+RfMGxu1dyx4KlX3M7gv9AMVu1ywgd7Hg=
Subject key identifier: 8C:02:00:29:63:6A:20:02:27:E5:56:C2:42:31:64:AF:23:C9:76:8D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA5580144ED3817739E6F64C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9bb721ad-8c2d-3cab-ab76-787a6d2fc19a.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 149.80.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a5:58:01:44:ed:38:17:73:9e:6f:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=248d9684-8552-4d27-9a22-e5b90442beff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4b:d8:7d:e3:f5:2e:ee:80:7b:a1:0a:32:cc:
28:be:72:b6:6a:f7:76:67:97:e2:6b:03:0d:99:32:
63:7d:06:b2:41:9e:ad:50:74:6c:6a:11:6f:f1:19:
66:91:30:6e:90:de:6c:ef:c6:c5:e1:0f:dc:32:f7:
a0:6a:a7:59:c4:70:1c:99:fb:c4:01:4a:e4:ee:12:
bd:16:4e:56:91:4f:d6:b1:72:9f:81:25:bf:9f:bd:
3e:18:d8:d5:05:61:68:c1:28:db:0a:38:40:b2:b0:
4e:a6:17:4b:12:78:b0:d4:9d:ea:5a:f3:87:31:38:
3e:be:cd:59:f4:bb:cc:42:c4:c5:0e:1b:76:51:31:
24:e5:34:51:28:31:62:bf:53:ab:f7:28:5a:b1:d8:
c6:80:a9:63:d6:dd:d1:8b:9f:f4:5a:f0:d7:9c:6c:
58:59:e2:15:72:4d:02:ed:e0:40:50:d3:13:9d:be:
c7:90:bc:86:d0:68:61:5f:93:84:3f:50:8b:b7:97:
24:c8:65:14:2a:e3:00:c5:4d:ef:88:27:3f:8b:58:
2f:70:26:ec:49:23:66:44:e9:8b:08:58:0e:2c:c1:
65:26:69:e0:8c:04:6b:34:b5:7f:96:6f:f6:fd:d2:
47:a2:fa:c6:4d:22:17:de:eb:63:3e:48:77:e1:76:
75:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:02:00:29:63:6A:20:02:27:E5:56:C2:42:31:64:AF:23:C9:76:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9bb721ad-8c2d-3cab-ab76-787a6d2fc19a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
149.80.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:c8:fe:92:38:79:63:86:01:fa:6c:3c:a8:0e:7a:b0:0a:f8:
5c:cb:5a:2c:1a:26:1b:6c:0e:35:d5:ff:dc:53:e5:4c:68:09:
f6:2b:a1:11:a1:ec:a9:88:a9:27:b3:d5:b2:f7:8c:e1:1c:86:
b1:c1:dc:78:51:33:a2:fa:a8:f2:8d:e1:67:ae:bc:3f:a3:52:
00:ee:85:1f:ad:17:b4:e6:4e:bb:7d:ca:24:5c:34:84:e7:49:
11:38:b4:70:94:c0:98:63:25:89:04:2f:d1:64:d2:e4:f9:bf:
41:56:15:8b:19:dd:18:09:6f:0d:10:31:09:30:ad:82:c5:4e:
a6:c6:9e:c9:95:b4:dc:b9:d2:a8:b2:cb:e1:d2:05:48:bc:e7:
b5:f3:63:96:80:47:7f:9a:a3:b4:98:9e:42:cc:64:04:75:8b:
27:61:81:bc:27:e8:7f:0d:1a:12:c5:08:8a:0e:d7:58:5f:ed:
c2:26:73:4c:61:c9:05:b6:4b:ed:84:c7:e5:ae:8a:47:ba:09:
19:b0:31:2f:cd:c5:93:82:d2:b2:a6:e6:83:79:f1:cc:24:fc:
2a:fa:0e:5e:ea:95:78:01:86:3a:b6:2f:ad:f9:e2:97:fa:ea:
d4:9c:e6:1f:73:64:5c:47:d6:f4:0b:fc:04:91:6e:55:fe:f0:
19:b2:da:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:54:10 2025 by rpki-client