Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9c879074-cd9e-3725-b849-bd8dabb948c1.roa
File: 9c879074-cd9e-3725-b849-bd8dabb948c1.roa (raw, json)
Hash identifier: oWQgNH9jZlydq6ubw3N4YXrz+SCbXPdGEPCYmJtYkn8=
Subject key identifier: AA:98:2E:15:CB:78:8A:2A:7C:2E:58:AC:7A:F1:BC:99:39:FA:74:97
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F4479EAABE23C3D5736F7C280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9c879074-cd9e-3725-b849-bd8dabb948c1.roa
Signing time: Fri 16 Sep 2022 12:00:00 +0000
ROA not before: Fri 16 Sep 2022 12:00:00 +0000
ROA not after: Sat 22 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 151.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:44:79:ea:ab:e2:3c:3d:57:36:f7:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 16 12:00:00 2022 GMT
Not After : Oct 22 04:00:00 2022 GMT
Subject: CN=c00bc7d8-30cd-4f08-b31d-28117caabd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fd:8e:d9:a8:8a:28:f9:38:c0:29:c8:2d:e4:
a3:f8:a4:ae:ef:15:07:5d:2c:98:e3:9a:72:40:7f:
3f:a6:8a:a0:7e:f2:03:85:87:21:90:b8:9a:f9:52:
14:b1:3f:b8:f9:7b:a0:07:71:ab:28:be:df:b1:a2:
3c:b4:55:df:52:5d:4c:9c:6c:65:55:4d:c7:af:47:
f8:91:2e:61:30:ed:5f:da:a9:87:14:67:30:93:2f:
59:68:f4:51:23:8b:86:7c:f2:6a:fd:ef:e8:a1:23:
2a:1d:0e:3b:29:d6:4e:df:d1:a1:18:65:2d:21:3f:
ff:99:09:f2:00:6a:85:a1:9d:c6:48:29:d9:3b:04:
cf:19:30:36:a6:20:5e:72:0b:1f:b3:c3:f9:98:01:
96:0a:15:b1:de:e7:53:bb:fe:9a:28:1f:85:21:e2:
5d:88:11:87:70:15:aa:62:6c:40:08:30:59:84:80:
86:2d:38:48:a2:c5:ce:75:5b:f3:4b:c8:5c:72:c6:
9c:62:19:19:43:73:67:cc:42:de:f7:fd:c4:2b:04:
cf:6b:da:0a:a9:7b:07:10:79:a0:51:54:8f:9a:f1:
b6:34:20:3f:46:e6:18:9f:9b:7d:46:62:a3:72:a3:
72:af:71:61:1e:7a:02:b1:b1:cc:2d:91:1e:84:bb:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:98:2E:15:CB:78:8A:2A:7C:2E:58:AC:7A:F1:BC:99:39:FA:74:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9c879074-cd9e-3725-b849-bd8dabb948c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
151.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:10:4e:8b:e4:e5:9a:64:8d:ea:99:1c:c6:42:d0:65:5c:a1:
f6:4f:ea:f5:b5:ac:52:85:49:1c:30:52:8b:27:ea:48:cc:02:
83:33:d2:ad:ce:ec:24:c1:f7:cd:67:a2:7d:c0:14:87:bf:7d:
6c:47:97:a1:14:0d:b9:c8:6e:89:5a:ae:10:bc:cf:d4:fd:6e:
9f:f1:9a:7b:a5:26:34:f3:63:05:c7:cd:66:38:91:fe:08:a2:
67:42:b7:95:f6:27:75:08:05:97:62:f0:56:ef:a5:19:65:3a:
3b:a9:dd:4f:e1:eb:5a:ba:78:f8:bd:d5:9a:dd:d2:d2:57:e0:
85:01:3c:57:fd:03:27:9c:a1:23:af:4f:df:a2:3a:2d:c9:39:
40:d7:98:57:dc:35:21:04:51:0e:d8:61:2c:71:b9:45:7e:62:
09:87:5a:b9:5b:55:2b:11:74:79:d1:de:88:b5:eb:2b:d9:0b:
03:c8:6f:a0:76:5b:76:73:ef:b0:72:29:d3:a6:eb:89:4a:36:
96:5d:68:08:6a:72:08:70:9b:59:41:4f:f6:cd:a1:fa:c2:e7:
00:fc:bb:67:69:2a:79:a5:87:05:23:c0:01:34:9b:ba:bb:f1:
af:57:2a:ed:3b:67:cb:0d:1b:2b:e3:89:50:b1:6c:96:56:47:
00:a3:bc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:18:04 2025 by rpki-client