Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a8c9d524-0406-3a46-9670-29b1f31867fc.roa
File: a8c9d524-0406-3a46-9670-29b1f31867fc.roa (raw, json)
Hash identifier: jMfofG5lteoDTqsySJzqEklWYkWXOkI7NOG114IEgfU=
Subject key identifier: 16:D5:87:A1:10:40:D1:7A:C3:A6:48:81:1E:5A:51:9E:A0:F0:D7:3A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409CA4D77F3F22717C1B985800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a8c9d524-0406-3a46-9670-29b1f31867fc.roa
Signing time: Tue 17 Jan 2023 12:00:00 +0000
ROA not before: Tue 17 Jan 2023 12:00:00 +0000
ROA not after: Wed 22 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 148.55.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9c:a4:d7:7f:3f:22:71:7c:1b:98:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 17 12:00:00 2023 GMT
Not After : Feb 22 05:00:00 2023 GMT
Subject: CN=8edace46-2f68-4ae1-9f7e-8ccfb99f1526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:d2:31:36:77:0f:77:75:bf:2f:9b:4e:a0:
41:72:ba:cc:ad:1f:20:82:cf:e7:77:dd:29:84:d0:
2d:26:8a:f3:64:09:ca:d7:01:50:ca:67:e2:04:23:
fa:95:56:40:22:ee:d8:70:86:15:a4:92:cc:fe:23:
e9:17:9f:97:1d:da:4e:5e:25:78:d2:19:17:fd:1d:
36:b1:62:a2:2c:7f:20:97:dc:aa:5f:d2:d6:05:04:
fc:8d:66:ee:5d:4a:46:49:3f:4a:a9:b4:96:d1:51:
ee:19:6b:0b:04:29:a3:7e:87:48:87:30:dd:0f:01:
d5:f1:1e:6e:12:4d:8f:f0:51:6f:1a:de:8c:02:75:
9d:59:d0:28:62:2b:b9:da:4b:65:2c:ed:94:06:f1:
a3:ab:8f:6d:6c:86:3e:9a:c7:c4:9f:69:bf:25:21:
72:1e:38:1d:e1:16:9b:b0:eb:0f:78:44:3b:af:53:
b8:cc:1e:4a:15:fd:ff:fb:87:7e:93:a2:a7:a6:58:
31:17:d1:03:d9:e7:de:dc:31:be:91:92:d7:85:14:
7f:f6:a9:a2:2f:6b:8d:8b:f0:ba:19:3d:ef:e2:87:
72:1f:45:fb:92:24:6b:6b:87:b0:95:b4:98:d9:9b:
66:c0:53:7c:6e:fb:a3:8a:a8:d8:6a:0d:88:92:68:
df:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D5:87:A1:10:40:D1:7A:C3:A6:48:81:1E:5A:51:9E:A0:F0:D7:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a8c9d524-0406-3a46-9670-29b1f31867fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
148.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:e1:bf:ab:f5:6b:c0:9d:e2:da:97:c9:69:b6:d3:53:94:cf:
69:57:a1:3f:d1:a4:40:8c:fb:9c:56:fa:40:99:b2:b8:84:2a:
bd:68:be:97:bd:f2:24:17:9d:ff:ea:39:89:c0:28:82:ec:0d:
3b:c6:f0:eb:1e:2a:df:ef:55:50:a0:34:bc:fc:a3:4e:67:4b:
ca:62:39:63:1a:90:fc:7d:15:f0:17:1b:ed:87:92:82:1b:85:
93:94:53:49:98:d5:4f:62:b4:e5:73:d9:75:8d:94:a9:52:ea:
db:d6:31:92:25:31:ad:e1:c3:77:f5:7d:a1:3e:e9:aa:22:7b:
86:32:73:44:46:17:e0:01:97:51:94:f3:51:5a:4b:0e:fe:c9:
6b:f6:6c:94:92:ad:32:51:c1:ef:08:37:26:ee:7d:18:e1:36:
a0:cd:d3:f4:88:67:e1:24:97:eb:70:7d:e8:dc:99:59:5b:3f:
c1:99:c6:26:d9:c9:14:f4:16:9a:56:5d:78:68:41:5e:f6:11:
c7:a5:e0:ca:e8:a3:ea:1b:fe:59:20:f6:00:20:54:2f:9e:32:
44:02:e0:01:08:cc:1d:1c:3e:63:77:5d:6f:9b:6e:e8:a1:66:
d8:71:8b:cc:e6:86:ef:6a:07:9f:25:15:86:ea:ab:24:1f:10:
76:6b:d9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:29:18 2025 by rpki-client