Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7a3eaf5-a1d9-3e6e-a454-e34d462bb868.roa
File: a7a3eaf5-a1d9-3e6e-a454-e34d462bb868.roa (raw, json)
Hash identifier: Q2o0zlO/PY/r3MfCkxEBL2YU08Tuqaepn6RbAs701B8=
Subject key identifier: 3B:22:16:6C:A2:BB:69:31:09:33:C8:B3:C3:7D:33:E1:27:0C:EF:91
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D3387BA701E45EFB9D98E9AC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7a3eaf5-a1d9-3e6e-a454-e34d462bb868.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 152.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:87:ba:70:1e:45:ef:b9:d9:8e:9a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=876dbeee-45f4-403f-8874-822275930007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:e7:48:77:85:2a:54:e9:ea:aa:66:5a:bd:
25:c6:08:d0:1c:9f:07:6a:02:14:0a:09:ca:04:1a:
d7:bb:c5:7b:71:f9:9a:77:50:c3:00:19:6e:10:62:
31:81:04:35:2a:59:71:07:4a:7e:bf:ef:8e:49:3f:
7e:c6:bf:b0:7a:42:f2:c2:b9:1c:24:a0:28:19:50:
e6:1d:48:a6:11:1b:49:a0:e5:05:db:e8:42:e4:42:
e5:8a:b2:d8:9b:5d:17:98:26:9c:4e:a0:8f:0e:fd:
bc:8c:31:0e:17:7b:72:f2:10:cd:3e:71:64:b7:33:
06:75:5b:f2:a9:95:1d:b2:3f:94:c2:84:29:ec:9d:
20:37:d5:66:f1:e1:d4:8c:b4:b5:20:28:2d:ee:be:
55:d2:93:a3:33:2f:85:0e:e2:a3:4d:a6:f3:b5:14:
ce:b4:44:c8:24:0f:5e:d9:41:1c:f9:2c:63:95:bc:
99:47:f6:a9:ff:e6:e3:85:9e:8d:7d:07:8a:d6:39:
d0:13:83:0f:49:28:1a:11:67:98:b1:44:64:b1:33:
df:0b:17:d9:50:90:ef:b0:f9:6a:c3:57:6b:09:fb:
05:40:a8:8f:a1:bc:a1:6c:ee:92:c2:89:fd:c3:51:
52:04:ff:0d:db:fc:39:53:16:e4:d5:fd:ec:47:8c:
83:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:22:16:6C:A2:BB:69:31:09:33:C8:B3:C3:7D:33:E1:27:0C:EF:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7a3eaf5-a1d9-3e6e-a454-e34d462bb868.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:e8:18:9e:b1:59:5d:e1:0b:6b:65:59:62:44:a7:2c:8a:82:
06:ee:fb:49:f0:a1:39:11:91:eb:c4:a0:00:6d:6e:79:8f:69:
dd:44:c4:0f:4f:da:2d:b6:0c:d0:8f:04:2b:c8:47:8e:6c:cf:
27:56:18:4d:a0:00:58:ef:b4:f2:81:47:1d:cf:43:ba:5f:44:
f1:3a:8b:78:31:27:3b:72:ff:6c:62:42:e3:4d:b7:69:ba:f4:
7b:7e:75:43:bc:2d:ae:e7:a8:93:34:d4:1c:e9:fb:e9:28:41:
da:2d:5a:17:91:7c:74:41:db:4f:8c:89:9a:d4:8a:fc:56:ff:
3b:9b:e4:82:0c:31:8d:f0:1d:fa:c9:e9:a4:8d:d4:18:35:2e:
72:56:b0:50:af:57:56:02:95:94:7c:ed:38:2d:cf:3a:11:fd:
99:26:aa:c5:7e:d5:1a:06:61:54:68:8a:c7:cf:77:40:3a:33:
d6:b9:7c:90:44:b4:71:17:a9:c1:6e:ad:56:d7:ed:29:9b:83:
b4:4e:27:ef:9b:4e:64:29:f2:b7:b3:6a:8d:81:ce:f0:c3:ae:
b9:ce:46:5b:83:31:f9:a0:c2:c2:ea:3c:d8:8a:26:0b:ef:1b:
f3:16:d9:4f:a2:78:cd:85:8a:cd:7f:f3:ad:6b:61:74:4b:a6:
cb:d6:62:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:15:58 2025 by rpki-client