Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b7137c7e-0984-333a-bfda-181cfa0f80ce.roa
File: b7137c7e-0984-333a-bfda-181cfa0f80ce.roa (raw, json)
Hash identifier: /tp88+iAEetDTujwCnxLu4+HRssE4YUGxKXkPOojnL8=
Subject key identifier: 5A:15:E8:0E:CC:6E:EC:43:03:05:16:33:66:85:19:15:7E:83:54:71
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840A4C977EE03DD46247F26E200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b7137c7e-0984-333a-bfda-181cfa0f80ce.roa
Signing time: Fri 20 Jan 2023 12:00:00 +0000
ROA not before: Fri 20 Jan 2023 12:00:00 +0000
ROA not after: Sat 25 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 159.209.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:a4:c9:77:ee:03:dd:46:24:7f:26:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 20 12:00:00 2023 GMT
Not After : Feb 25 05:00:00 2023 GMT
Subject: CN=7856ee57-0704-43af-9524-9c33702d93a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:09:87:df:00:04:4e:a6:14:9f:70:05:40:e2:
df:37:3c:42:05:a9:6a:4a:e0:f2:59:73:a3:c3:79:
8c:bb:5d:2b:34:1c:bb:b0:ef:cf:07:63:ea:9f:bd:
62:e7:74:f6:51:ba:28:cc:65:fc:a1:fb:28:05:4e:
0b:4f:7e:a8:f9:4b:b0:88:fe:36:40:48:c0:81:58:
7d:89:19:9a:87:ae:97:d2:3b:d1:aa:eb:5e:91:ac:
20:76:20:43:09:74:79:7c:1d:0d:5d:37:3f:2e:ba:
29:1a:8e:2c:a3:9d:3a:9a:42:00:78:f8:ec:e3:52:
7c:31:f2:e8:d5:f4:6a:d9:f7:5a:86:d0:22:6c:c4:
93:10:80:7f:81:2a:68:4f:7e:24:6e:08:25:6b:4f:
4e:16:e2:48:1e:68:e8:f2:fd:8b:d8:6c:cb:3b:52:
11:8b:d1:a8:fe:5e:cb:b9:35:83:1c:b3:91:b6:ab:
67:b0:bd:2b:42:8b:c1:65:59:d6:bd:0f:8c:a7:d0:
b7:5e:54:3c:f5:69:db:1f:ad:4f:6d:2f:ca:eb:bd:
b9:af:c5:c5:e2:7b:22:bb:44:26:0f:1e:5f:fa:15:
2d:6b:3f:f7:a4:8b:19:f9:5a:cf:0a:18:bb:e7:5f:
70:c2:84:c9:b4:d8:2e:1a:6d:fc:91:91:19:e0:12:
0e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:15:E8:0E:CC:6E:EC:43:03:05:16:33:66:85:19:15:7E:83:54:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b7137c7e-0984-333a-bfda-181cfa0f80ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
159.209.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:79:45:cf:ef:ce:e9:b5:e9:a8:a1:d6:9a:9f:52:91:6e:b5:
38:7e:81:b4:f3:76:6f:1a:6b:79:d5:bb:63:11:da:56:15:12:
4b:18:af:ec:e6:80:9f:0c:63:3b:d8:e5:a1:f9:23:09:8a:bf:
9b:f7:a0:04:4e:48:43:39:04:3f:c2:59:a5:c0:c4:a8:cc:5c:
a3:76:fa:19:84:ad:3a:d8:eb:1b:7d:8b:39:03:87:41:c0:b2:
31:01:79:ac:ab:7e:61:ff:f4:38:b0:d5:69:49:78:ae:85:a8:
fa:12:e8:ca:ea:a3:88:54:d8:63:09:d3:21:47:cd:38:09:6b:
e6:9a:2c:fa:db:9d:0f:b3:35:d4:f3:97:12:31:84:52:f6:94:
65:71:77:c0:68:f0:56:88:98:7f:03:45:d3:8e:5a:f1:ec:85:
76:a4:a4:03:94:bc:a3:90:62:ee:40:8b:ce:e9:e5:fd:92:0f:
08:a4:04:e9:0b:5d:0b:6e:de:b4:cb:1c:d7:2a:83:8e:02:10:
ef:3f:2e:f2:e9:9f:f0:e7:df:41:99:2b:71:87:45:8f:20:66:
d6:2c:e8:b0:99:88:ad:d0:de:82:6e:c7:b1:64:30:74:36:91:
02:c2:92:d9:04:f8:8c:91:54:40:86:5c:03:f0:71:cf:25:39:
30:34:40:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:01:04 2025 by rpki-client