Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/afd388c5-9647-38d4-be04-e5ced15172f1.roa
File: afd388c5-9647-38d4-be04-e5ced15172f1.roa (raw, json)
Hash identifier: 2FFWtgvft3aHtkPw7zZOdl/TF//x2G3f/96q1qPv+ho=
Subject key identifier: 7A:50:C6:13:FE:E8:C6:71:65:65:07:4D:44:30:8E:B2:0C:E8:2E:05
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBE383060253D00917A505980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/afd388c5-9647-38d4-be04-e5ced15172f1.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 144.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:be:38:30:60:25:3d:00:91:7a:50:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=24b9f839-109e-4f69-b33f-9c7d7d091eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:92:24:16:12:d9:ba:46:cb:cc:80:58:ec:20:
a8:71:d1:6a:c8:73:8d:4b:b6:59:6e:3b:88:c1:4b:
77:cf:81:9c:28:15:84:56:bb:ba:46:17:70:e7:85:
5a:f8:b0:7f:0a:fa:1f:07:6b:f2:ee:96:38:1d:93:
55:99:f4:25:0f:a5:2b:40:41:93:8c:38:18:5f:bf:
5c:9b:e1:8d:b8:30:99:5c:e3:c2:5a:a1:47:82:60:
9c:95:bb:b8:52:be:6d:81:6a:38:fe:29:c7:e1:5a:
82:65:9e:cf:38:49:17:e6:4c:27:48:53:da:b3:f8:
bf:10:3b:a3:bb:93:26:b9:d0:aa:15:ec:d0:b1:b9:
18:55:3a:dc:87:d9:92:dc:12:42:c4:dc:6f:d5:d0:
79:a2:17:5c:6d:81:f6:29:7c:2d:10:48:98:d9:4e:
a7:85:97:df:41:7e:14:f6:b3:9b:e8:49:31:63:af:
24:06:c2:94:8f:47:01:09:c1:d0:6a:f9:f5:bb:0d:
cd:da:23:26:ef:56:da:2a:60:49:0f:ad:a8:09:80:
24:ec:80:bb:1e:04:a1:25:33:4f:d6:93:10:aa:9c:
6e:99:8e:26:65:81:6b:fb:95:9d:2f:ed:1c:f0:a5:
76:21:61:49:cc:11:94:e2:74:b6:b2:8c:1a:61:e4:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:50:C6:13:FE:E8:C6:71:65:65:07:4D:44:30:8E:B2:0C:E8:2E:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/afd388c5-9647-38d4-be04-e5ced15172f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:96:0d:15:65:bb:f3:eb:7b:34:f4:ab:ae:d5:c1:72:84:c3:
d6:bd:d1:79:bf:0c:19:25:48:d9:df:1c:f0:fd:00:13:ed:9d:
cb:3e:0c:ea:89:f5:80:b8:79:bb:be:11:50:b3:ef:b6:7d:73:
d1:95:c6:65:29:48:b2:64:0a:63:46:6c:7b:c8:48:fe:41:18:
96:c1:8d:45:7e:73:8b:80:1b:30:fe:cc:49:b7:ba:a7:61:46:
86:db:16:0d:53:40:c2:ce:bc:0a:c8:73:37:c3:39:ce:f0:f3:
65:fd:e7:42:6d:50:cc:48:83:58:cc:91:e3:6d:7e:cd:2b:0d:
27:0a:25:9f:51:87:13:de:51:79:43:97:97:81:06:49:95:18:
32:73:34:4e:c7:ba:c7:73:fd:48:5a:3c:d5:ec:15:2a:1c:47:
a3:a8:88:b5:a5:8f:9b:f9:7c:1e:32:9c:88:1d:ea:b3:02:83:
46:50:c2:0c:ba:3e:87:9f:87:59:aa:6a:9c:b8:21:33:1b:c6:
47:a1:a5:f9:c1:71:fd:0e:bc:a2:bb:53:79:c4:aa:dd:b5:e0:
15:94:83:19:31:88:44:48:6f:15:b4:d1:5b:a8:24:50:73:a2:
2b:ad:78:3e:a8:a3:0e:78:b8:f3:d9:11:84:86:ea:23:0f:b8:
50:cd:74:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:30 2025 by rpki-client