Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb942829-d55b-3caf-ac18-d2b94582137a.roa
File: bb942829-d55b-3caf-ac18-d2b94582137a.roa (raw, json)
Hash identifier: h7xHlQZhaqOSjMK7dNmS8G6DhIb5mCsjyvEYn/Dyjuc=
Subject key identifier: A1:29:0A:8E:8E:85:2D:82:5C:68:7C:1F:4B:DF:1D:E7:AE:FF:64:52
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBF41DA75A73053AAB353B0C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb942829-d55b-3caf-ac18-d2b94582137a.roa
Signing time: Sat 30 Jul 2022 12:00:00 +0000
ROA not before: Sat 30 Jul 2022 12:00:00 +0000
ROA not after: Sun 04 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 144.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bf:41:da:75:a7:30:53:aa:b3:53:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 30 12:00:00 2022 GMT
Not After : Sep 4 04:00:00 2022 GMT
Subject: CN=7037dd51-9da0-4b53-bb8f-7cfa31946598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e3:28:3d:da:eb:6f:4a:f3:0d:d7:eb:1d:6e:
e8:4f:d7:ed:f2:01:f6:a1:b6:bf:6d:2d:61:25:dc:
ae:ef:33:be:07:d6:21:b8:bf:93:2f:29:26:e0:6e:
7e:32:03:da:f6:29:93:7a:7d:91:99:f8:13:2f:49:
c5:62:62:e2:c3:cb:25:18:43:bd:6f:4a:a2:4a:88:
99:58:39:a4:12:c4:cc:be:3a:19:76:4e:12:0d:8c:
53:e8:20:c3:be:47:33:94:c6:09:57:8c:32:c4:04:
fc:f2:49:10:dd:c3:5c:a3:a7:39:87:89:22:9d:6c:
d0:22:1f:f6:da:64:b6:63:85:49:64:1b:6c:b3:83:
62:5e:c3:e9:41:75:50:b9:7c:01:c8:e7:04:f5:55:
a5:f0:49:f5:78:6d:a8:59:a0:39:7b:2f:2e:65:15:
78:2e:f3:3b:8c:f9:e5:3a:a3:82:02:fa:9f:46:bf:
cf:4e:b1:fb:c8:49:b8:a3:1f:ae:ce:fb:8d:fe:65:
49:23:80:25:77:94:b5:8c:d1:0b:a0:a9:61:4c:e1:
35:17:3e:07:ec:37:f9:5a:76:67:29:db:42:eb:9c:
bc:92:86:7b:c9:40:50:f2:69:19:94:17:1b:f4:f9:
eb:58:ac:9a:22:2e:d0:52:56:de:34:07:95:7d:ec:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:29:0A:8E:8E:85:2D:82:5C:68:7C:1F:4B:DF:1D:E7:AE:FF:64:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb942829-d55b-3caf-ac18-d2b94582137a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:77:ea:b2:67:26:20:c1:57:2f:79:45:13:00:06:05:f1:4a:
55:10:50:bc:ee:15:e4:cb:cb:b6:41:f1:60:a0:f2:fb:64:18:
1c:30:28:ab:81:91:91:b3:54:fc:18:27:0f:07:f1:89:bc:79:
43:27:49:6d:5c:f9:5a:83:ae:a8:f8:84:13:c3:e1:94:47:43:
47:8e:01:b9:a1:ae:0c:6b:cd:23:da:9d:8d:2c:81:b6:55:eb:
0b:59:63:31:9c:44:46:06:9e:3e:03:07:19:6b:c2:09:9e:f3:
c2:c8:b5:3b:70:13:9a:21:da:47:85:9d:99:c0:38:bf:29:cf:
8f:40:9a:f3:5c:66:9a:18:43:74:c6:08:99:fd:2e:fe:13:f1:
8a:ed:db:2e:23:37:0f:14:8e:da:04:d0:91:3e:a7:70:b7:78:
de:6b:97:df:73:cd:4c:77:a6:34:93:21:34:f1:d6:2f:cd:72:
d8:1e:3a:a3:31:b9:5a:5f:2a:d8:66:f6:fa:c6:8b:4f:31:c9:
60:bc:4f:c3:15:27:f5:e9:ab:1a:45:f2:6f:79:63:44:8e:1d:
86:8b:84:a8:a8:93:69:c4:38:3a:bb:94:8f:97:3c:31:09:bd:
75:03:b8:4c:2b:0a:86:d3:f0:59:2d:a2:5e:6b:3a:52:d9:d2:
7a:bf:62:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:45:33 2025 by rpki-client