Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1d4435f-f0e3-30be-9809-36d451a3b571.roa
File: b1d4435f-f0e3-30be-9809-36d451a3b571.roa (raw, json)
Hash identifier: /0LBQfoTPlKsS/IFNatqXAtiK5xPzIC/cMwHyhmmrfo=
Subject key identifier: 73:70:BC:99:A9:46:46:6A:27:90:EA:D1:F4:DF:BB:45:D8:79:94:11
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6CDF3DEEF5630EC7C3663800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1d4435f-f0e3-30be-9809-36d451a3b571.roa
Signing time: Thu 30 Jun 2022 12:00:00 +0000
ROA not before: Thu 30 Jun 2022 12:00:00 +0000
ROA not after: Fri 05 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 153.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6c:df:3d:ee:f5:63:0e:c7:c3:66:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 30 12:00:00 2022 GMT
Not After : Aug 5 04:00:00 2022 GMT
Subject: CN=63cc71f7-31d7-430b-9723-ac7a028477f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:73:8f:58:28:9a:cf:d6:3c:30:60:e6:98:
c3:e5:18:3d:6e:46:fe:1d:24:66:13:0a:a4:23:48:
a9:7e:49:7c:7a:4f:f3:69:93:b0:96:b0:b2:a0:9a:
80:25:9a:8a:54:49:e5:d6:6b:7c:50:6d:52:a1:f8:
88:73:1b:11:ca:6a:91:25:ed:9f:46:2c:84:a8:22:
ed:9e:0d:67:5a:5b:e0:a4:2a:13:db:a0:fa:82:90:
e2:1b:22:1b:fd:92:60:1f:14:df:8f:e6:58:41:86:
36:19:a7:ae:51:09:75:fd:d4:97:43:f7:71:d1:4d:
6b:8e:20:7c:f7:10:52:b4:9c:6b:17:fc:1f:f4:97:
df:64:f5:c9:e9:8a:42:1d:ad:f2:df:a5:22:8d:b0:
47:3c:67:9c:4a:d8:2c:cd:da:ca:eb:ef:c5:f1:63:
de:72:7f:66:96:48:20:04:7c:48:64:1f:d3:0b:cd:
06:dd:1a:e8:33:c4:18:d6:e8:3c:42:13:36:bb:3e:
6d:bb:17:cd:81:0b:e8:ea:77:cd:a4:c0:2d:6b:72:
cb:89:df:db:08:ca:c5:50:af:7f:41:16:56:66:14:
dc:23:d5:bd:82:57:f8:0e:a5:2a:88:29:3f:4e:a0:
b1:ce:19:2d:e5:86:ce:48:3e:63:94:29:e1:9b:1d:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:70:BC:99:A9:46:46:6A:27:90:EA:D1:F4:DF:BB:45:D8:79:94:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1d4435f-f0e3-30be-9809-36d451a3b571.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
153.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:49:45:b4:c8:86:f1:e1:e6:3e:ea:54:f2:0d:29:5a:95:3b:
0c:81:4b:c0:a6:5f:12:6d:bc:5d:8b:f9:64:54:b4:db:a5:5a:
d0:8c:cf:11:42:44:0b:e1:4a:9e:2a:40:e6:ff:b0:8f:3d:1c:
70:39:18:a4:3f:4d:55:82:99:cb:3f:8f:31:0b:4e:02:1f:67:
6a:94:33:5a:f5:9e:bb:cc:e3:46:f9:29:c0:d6:36:8b:ce:89:
27:75:d0:b0:4b:c6:77:6e:58:da:a7:7a:75:27:00:be:d9:f7:
92:de:90:f0:a2:9b:c7:2d:04:73:0a:d9:1c:4c:7f:d0:36:01:
ac:5e:de:55:b9:55:77:0f:67:b4:f8:fd:59:16:03:6f:e4:65:
84:ba:51:56:ae:0d:fb:22:69:7f:12:bf:04:a5:71:49:d9:fe:
09:c2:43:da:01:c8:92:e5:47:8d:45:da:ce:dc:e9:c8:f5:39:
f5:fc:c3:6b:08:16:b6:c9:2b:41:fb:69:4e:10:a2:f2:31:c3:
5b:8e:cd:bb:61:71:fb:5c:08:70:b8:e5:2c:30:db:39:7c:e8:
86:31:e0:d5:52:77:9d:e5:be:a5:45:b0:38:b6:1c:0f:45:77:
11:cd:26:60:9c:fb:b6:c3:5e:c9:2c:43:30:89:df:ee:99:f0:
43:b8:6f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:40:27 2025 by rpki-client