Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b6ef485c-5bdd-3dd9-8b7c-7d77cbe7fc4e.roa
File: b6ef485c-5bdd-3dd9-8b7c-7d77cbe7fc4e.roa (raw, json)
Hash identifier: zgWUnWHDk/Od1BkbuNDGyinxetLafCaqlR59ixWqXpg=
Subject key identifier: E0:FD:17:14:4E:BF:20:23:DA:43:2C:02:EF:8A:AC:19:68:CA:5D:F6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F260743048CC5EA8890375EC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b6ef485c-5bdd-3dd9-8b7c-7d77cbe7fc4e.roa
Signing time: Mon 05 Sep 2022 12:00:00 +0000
ROA not before: Mon 05 Sep 2022 12:00:00 +0000
ROA not after: Tue 11 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 138.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:26:07:43:04:8c:c5:ea:88:90:37:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 5 12:00:00 2022 GMT
Not After : Oct 11 04:00:00 2022 GMT
Subject: CN=bc67c68d-728e-4024-aac6-0d04ce8d7560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:24:ee:88:a5:82:8c:fc:c1:9b:69:c1:26:
ad:c5:63:76:b9:a0:23:cb:86:8d:0a:e0:13:b7:ff:
e0:70:95:bc:dd:01:92:3e:78:e5:6f:5a:a1:8f:af:
2b:11:57:d1:08:dd:ad:d5:7f:cb:c9:46:50:41:9a:
1e:82:97:78:2a:98:d3:57:64:48:ea:a3:2d:5c:23:
c9:f8:07:b0:0b:83:58:f2:b4:1f:23:9b:38:34:57:
85:c8:de:db:b2:6c:b8:ba:ff:8b:84:3b:7c:39:90:
fc:79:e6:ee:ac:e8:f4:53:6a:6f:ad:d5:6b:26:b0:
b0:7b:67:3e:b4:33:3d:51:81:9b:40:75:ff:38:9c:
df:e7:5a:dc:22:3e:89:ca:68:8a:23:ed:97:b8:d2:
0a:d0:db:b6:6f:b8:3c:de:e2:40:ba:99:fd:96:64:
eb:7b:1a:50:54:aa:13:18:e7:b8:98:e8:3d:67:dd:
a8:c3:ac:ea:40:43:c9:94:d1:87:44:bc:2f:2d:56:
b1:5d:17:c1:b9:65:25:ce:b0:77:6c:18:ec:1e:e9:
c5:b9:59:24:9c:ca:e2:94:10:22:77:d7:5e:a7:60:
88:6f:6c:30:3b:85:d0:46:08:a4:b1:ed:07:f4:50:
b8:a3:90:32:d8:67:e4:52:e4:b3:fc:0d:bd:5a:6d:
10:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FD:17:14:4E:BF:20:23:DA:43:2C:02:EF:8A:AC:19:68:CA:5D:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b6ef485c-5bdd-3dd9-8b7c-7d77cbe7fc4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
138.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:f5:73:e9:2e:37:c7:48:11:f8:33:6b:11:1f:dd:0a:0b:f3:
54:a9:f8:05:42:d8:b2:52:e9:3b:c2:49:12:3d:7f:4a:73:45:
5f:a4:80:c9:45:8e:cd:eb:a5:b6:c5:df:45:9f:81:93:a3:1a:
d7:a2:6d:aa:87:b4:38:6d:8b:c4:b8:ed:26:75:a3:51:4b:6b:
6d:b8:43:0f:94:3c:9a:a8:74:73:f2:e3:a8:f9:d1:3d:33:94:
b9:93:9c:19:75:f6:94:90:58:d6:c5:d5:e5:01:7a:25:24:e0:
fc:08:9b:65:40:e9:6c:95:97:45:f4:85:52:a2:37:39:24:aa:
54:26:55:65:a9:52:1a:82:e4:8a:c7:c9:1b:2a:09:8e:f8:f2:
3f:b2:29:2a:a5:00:11:c1:ff:ee:de:4e:26:7b:4c:31:76:0e:
f5:ce:e1:e0:13:c6:7d:85:26:08:fa:07:80:88:5f:94:ce:48:
b4:98:14:b9:3f:00:80:d9:f9:8b:57:85:e4:66:33:cb:92:0d:
19:cc:25:0f:f6:e5:d8:0c:8f:59:d3:84:23:d7:6b:57:54:9a:
0c:60:1c:62:51:b4:d8:66:f5:96:17:7c:b7:0e:d3:00:00:a2:
78:77:47:50:a8:7f:fe:4e:65:09:c8:c7:9d:ac:b5:f2:23:d8:
30:19:1a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:34:00 2025 by rpki-client