Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b51784f4-c58c-3b05-95ce-0995682b5f2f.roa
File: b51784f4-c58c-3b05-95ce-0995682b5f2f.roa (raw, json)
Hash identifier: hDA2qcHLEYJLsTPoQhHwET99dzAjPnB39ixQykSlYvc=
Subject key identifier: C7:32:BF:9C:0F:BA:FE:07:81:FE:6B:2D:06:0B:F7:1C:B1:41:E1:8D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F28D212F607A7A94CF5166CD0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b51784f4-c58c-3b05-95ce-0995682b5f2f.roa
Signing time: Tue 06 Sep 2022 12:00:00 +0000
ROA not before: Tue 06 Sep 2022 12:00:00 +0000
ROA not after: Wed 12 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 152.155.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:28:d2:12:f6:07:a7:a9:4c:f5:16:6c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 6 12:00:00 2022 GMT
Not After : Oct 12 04:00:00 2022 GMT
Subject: CN=a7ee58d2-7662-40fa-ab71-1070ff3fd54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:b2:4f:ce:f3:32:ec:72:8e:4f:e7:0c:49:
86:6c:d9:3d:63:64:fc:bf:5d:ca:2a:e7:42:76:1d:
41:20:41:2f:97:c8:38:ba:ea:bc:6f:0c:83:a0:10:
b5:30:d1:90:f8:d2:b8:d5:ca:b3:a8:c2:e6:25:68:
c9:6f:c8:e5:70:35:5a:2e:db:3b:cf:45:ea:30:12:
72:79:bc:0b:24:22:b9:18:1f:7e:f8:99:91:5a:4e:
81:3b:49:94:c4:42:7e:a8:34:b7:6e:27:82:33:97:
19:16:49:d7:0d:9d:0f:e8:72:94:f9:35:d4:51:d7:
cc:5b:c7:8b:f6:f3:60:92:ee:f6:dd:52:d1:d6:bf:
0c:59:27:bd:ae:4e:d2:13:39:b7:7a:df:dc:21:c7:
0d:55:b4:1a:c3:dd:2d:07:a8:7f:42:d0:a8:d5:6b:
cc:6c:aa:8c:e0:ee:3f:b0:3a:5b:97:68:dd:13:1b:
95:2c:7e:b4:34:68:88:3b:57:ef:df:8b:13:97:14:
04:45:68:35:16:8d:1c:92:00:48:3c:76:7a:65:35:
5e:a5:bf:c9:d3:93:da:8b:1b:ab:1c:cc:e5:41:6d:
ca:e8:4c:94:20:76:a4:df:ec:53:69:f1:3e:21:fb:
fd:53:7e:04:e8:b8:04:39:12:38:30:45:28:d0:ee:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:32:BF:9C:0F:BA:FE:07:81:FE:6B:2D:06:0B:F7:1C:B1:41:E1:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b51784f4-c58c-3b05-95ce-0995682b5f2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.155.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:ca:9d:38:93:87:53:d7:ed:27:12:09:6c:8f:9f:9c:71:ab:
3f:83:c4:01:d7:bb:a2:75:27:29:1f:0f:9e:d1:c0:4e:ef:3f:
bd:39:eb:0f:64:ae:16:5a:7b:c4:d3:88:2f:6c:37:e0:11:72:
83:bc:9e:5e:d9:19:16:41:b6:01:75:3f:d9:55:2e:1f:3c:87:
27:f4:26:58:bf:a7:db:c2:0a:2c:e6:7e:13:83:e9:74:10:42:
67:80:fd:1b:3d:4d:fa:6e:25:68:45:e2:45:1a:c5:f8:a6:e8:
54:b8:7b:33:16:1b:d5:17:18:48:ea:8e:63:8d:4e:17:8e:7d:
e5:40:58:43:f3:72:db:0d:51:83:04:40:fa:19:c2:cb:fa:9f:
63:d8:cc:02:df:cf:59:0c:58:d5:4d:3e:ed:8a:d0:b1:35:8e:
02:d3:a3:b6:28:55:fe:e4:e5:71:4d:95:c3:44:43:0b:42:b4:
e2:cf:65:dd:25:22:38:41:c2:eb:e5:ca:e1:d5:19:cc:4b:33:
1b:7b:86:1a:45:ac:c7:57:06:ad:fd:b5:5b:97:6a:80:f2:01:
3c:a5:45:2a:2b:da:8b:f6:41:0a:6c:d9:e0:98:00:97:ea:e4:
72:99:2f:81:75:8d:49:d5:4a:66:76:66:27:16:66:d9:9c:41:
dd:40:27:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:35:11 2025 by rpki-client