Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a62a4eeb-c135-3e96-8ca6-2d3f82d19d32.roa
File: a62a4eeb-c135-3e96-8ca6-2d3f82d19d32.roa (raw, json)
Hash identifier: NFsOv+2K0rwnhnLjS73ZrYX9zxwF4fRFeijxUzFApzA=
Subject key identifier: 52:A6:C6:DF:5C:5F:69:21:CE:CD:BB:C8:0F:1D:1A:64:B8:C4:E5:5D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840142B5BC6FBEBB3FE5AD1E000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a62a4eeb-c135-3e96-8ca6-2d3f82d19d32.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 152.155.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:14:2b:5b:c6:fb:eb:b3:fe:5a:d1:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=4ced240f-d89e-4b5e-8224-279af467bef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:db:9d:f3:bb:16:fa:85:bd:2f:6f:2b:06:
ab:f3:75:07:56:e5:29:34:b4:63:a8:b2:66:b9:cd:
36:77:cd:8b:c8:19:9a:65:3a:c6:18:d2:a4:1e:b7:
f2:bd:d0:ce:e9:96:fd:eb:ec:45:c8:bc:47:3e:8b:
57:ab:4b:02:77:51:b0:82:d6:0c:70:18:51:6b:90:
53:d4:05:82:ef:ab:98:39:f2:60:45:9f:01:e1:29:
98:b7:2a:1b:28:e6:1d:96:07:4c:60:fc:30:ea:50:
eb:e7:3c:d6:ac:b9:56:f0:fb:d5:65:47:cf:55:9d:
0d:af:82:78:ef:23:da:0c:c6:51:88:be:9a:0a:50:
0f:20:48:f7:1d:62:f1:c1:d4:72:33:0a:aa:da:83:
74:02:fb:66:90:97:b6:cd:2f:2e:ef:d5:15:dc:e6:
0e:9f:b5:c8:72:16:98:f8:cc:92:41:59:5d:ac:6b:
7c:7d:3c:b9:9f:7f:87:c6:6b:72:68:57:76:cf:97:
73:c7:c2:22:6b:ce:c3:52:10:d4:92:52:40:f8:40:
c0:ee:22:13:de:a0:28:d5:01:69:16:8d:8d:a5:fe:
33:00:46:3d:f5:08:38:e9:c8:f4:c8:31:d4:ea:44:
a0:1b:e2:44:f4:e6:e4:df:40:bf:22:f4:19:d8:e2:
f3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A6:C6:DF:5C:5F:69:21:CE:CD:BB:C8:0F:1D:1A:64:B8:C4:E5:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a62a4eeb-c135-3e96-8ca6-2d3f82d19d32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.155.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:34:ca:8c:5c:3f:be:02:9c:fe:e5:aa:e4:da:6e:f7:9d:15:
8a:f7:87:08:b4:e6:35:b5:43:f3:8a:d9:5a:b4:5b:17:d6:fd:
ca:94:aa:6b:f2:36:11:bd:79:c5:e2:16:3d:1f:2c:49:97:7a:
65:79:c3:06:14:c3:35:8a:65:d6:d6:2b:69:de:78:dc:32:cf:
1a:d4:13:e0:2c:7d:96:d1:bd:0b:66:63:e4:9b:ce:e8:f2:2d:
55:69:bc:22:a8:43:1e:d1:4e:bb:5e:3c:27:d2:f0:83:57:b8:
a6:03:44:24:73:fa:a3:ba:c9:fc:8b:25:cf:87:42:bf:84:c9:
a3:c9:00:14:b4:df:3a:03:73:95:7e:cb:55:e7:79:76:aa:d5:
ea:e3:28:50:91:41:1e:ef:95:b1:11:5f:a4:18:31:4a:86:9e:
dc:2a:d3:38:b1:25:52:aa:69:cb:21:1f:f3:d4:94:36:92:65:
c3:d9:78:32:bd:14:01:b0:09:6f:c6:f8:2c:aa:ec:19:39:76:
e2:7d:db:0d:c7:5f:cb:81:25:d1:40:fc:f9:b4:0f:ae:52:41:
b6:b4:87:50:e1:5e:e4:23:20:e6:a5:47:0f:d0:a8:0d:69:56:
20:3f:88:18:f4:6d:57:90:a8:9a:33:60:d6:4e:5d:6d:05:23:
2f:4c:3f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:20:45 2025 by rpki-client