Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af197273-7088-3047-a2e0-9dc1d2705c80.roa
File: af197273-7088-3047-a2e0-9dc1d2705c80.roa (raw, json)
Hash identifier: DwsO+6DGUdMzX07+D7ehNpV1Nxde4AiYClNrFzN4w+4=
Subject key identifier: E5:2E:C6:85:01:89:13:E7:FE:CE:FE:3D:D5:9B:DC:18:5D:0E:DA:46
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584086CE3107A46294708DCE26C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af197273-7088-3047-a2e0-9dc1d2705c80.roa
Signing time: Mon 09 Jan 2023 12:00:00 +0000
ROA not before: Mon 09 Jan 2023 12:00:00 +0000
ROA not after: Tue 14 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 138.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:86:ce:31:07:a4:62:94:70:8d:ce:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 9 12:00:00 2023 GMT
Not After : Feb 14 05:00:00 2023 GMT
Subject: CN=245544c7-92d2-4ac5-9450-58e4f0d70e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:5d:56:99:bb:f0:a1:65:7c:43:1b:53:db:
7f:1d:99:67:ea:8a:87:ad:42:98:b1:48:be:00:0a:
e9:b5:6e:47:c3:c5:5b:c5:52:68:66:5e:b4:27:41:
8a:9d:d4:72:b6:54:85:72:62:42:8d:8b:3f:87:0a:
b2:81:9f:68:2d:85:ff:6a:11:c5:63:e0:ef:d2:2b:
56:83:dc:69:14:cf:ba:eb:91:0f:ae:04:0e:a5:c5:
ef:ca:9e:e3:83:28:b1:1a:77:98:1e:d0:ba:37:db:
b3:98:0b:6f:26:95:5b:00:22:15:37:38:9a:f5:01:
4c:49:1d:83:fd:60:c1:a4:b5:73:07:ba:de:8f:dd:
f2:31:13:fc:73:3e:d3:55:a5:54:a9:ff:f6:6c:5c:
f3:7b:0d:d1:52:99:f8:b6:1a:d4:cb:c6:0f:f9:87:
9d:f6:d1:ef:10:43:3b:2e:41:3c:a8:94:e6:18:5f:
e2:31:e1:81:53:fd:10:ab:3c:bf:8e:d4:e4:3b:12:
65:38:6b:32:a9:7a:3c:81:49:4a:1f:5d:e3:f8:d6:
08:c9:23:c5:2f:b2:08:4e:87:d1:7d:90:14:84:ce:
f1:db:5b:a8:ff:56:ba:f6:3b:cc:67:2e:44:b9:7d:
49:09:20:8c:f5:3e:88:f6:2a:a0:81:e8:8f:dd:5f:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2E:C6:85:01:89:13:E7:FE:CE:FE:3D:D5:9B:DC:18:5D:0E:DA:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af197273-7088-3047-a2e0-9dc1d2705c80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
138.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:96:8a:d3:a6:c6:14:40:11:a4:78:ad:d9:81:04:6a:88:53:
c7:32:6f:04:32:98:a6:d6:23:af:e5:b1:78:3a:72:1a:81:94:
d8:59:98:e9:66:ef:1e:65:7f:9a:f1:12:ae:af:d9:ec:9e:8e:
ed:be:92:30:b9:d7:45:a2:69:48:e4:45:40:33:bc:f9:3f:8d:
76:1e:40:6a:ca:6c:a7:82:8e:9c:a1:bc:4c:8e:4e:56:b5:27:
7c:25:07:e4:86:b4:e7:10:19:ab:93:13:aa:3f:0e:60:b2:5b:
29:8f:a4:a6:24:94:07:c8:2e:be:d0:b8:9a:b4:a0:04:4e:a7:
37:6e:9d:1a:3f:a9:22:52:b5:c0:05:cf:5c:81:3b:79:99:90:
fa:28:bd:ea:c7:ed:81:5b:34:c8:ee:a6:c8:87:02:cf:40:07:
e7:bc:00:fa:72:e4:dd:8e:01:ba:ff:7f:a4:85:5e:b4:64:fa:
40:1e:65:93:e6:49:58:65:d7:b9:e6:77:e3:a6:4f:ad:42:39:
f9:49:f6:50:c5:3a:bc:03:fe:4e:a8:b0:8e:47:dc:6d:d5:7c:
a4:07:e9:a1:d3:5a:f2:b1:af:cc:68:62:a2:e1:a2:6b:2c:0a:
1f:ab:76:1f:21:53:3e:ba:3b:29:73:80:93:59:8b:20:b3:a1:
f9:0b:6f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:27:21 2025 by rpki-client