Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf910aaa-3a04-3f85-8e96-0f6b0b000f07.roa
File: bf910aaa-3a04-3f85-8e96-0f6b0b000f07.roa (raw, json)
Hash identifier: Now2QPa+RLbPojNEeIqY3LYG/bX/kaqp44s/v2zpTV4=
Subject key identifier: 0A:42:6D:B7:C4:A9:D7:6A:5E:38:24:D2:AB:E5:3B:8C:65:EC:84:1F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE55C978DE5581EF86A737A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf910aaa-3a04-3f85-8e96-0f6b0b000f07.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 137.114.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e5:5c:97:8d:e5:58:1e:f8:6a:73:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=688b2c19-162f-4796-a7a0-cc166cabe1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:43:a3:1d:6b:89:06:08:9b:ee:ea:6b:d4:a7:
1a:56:50:6a:3e:79:a4:26:1c:15:53:c5:0b:da:fd:
24:a7:b1:8f:b4:db:41:49:23:34:32:69:c1:72:91:
49:ea:41:90:67:9b:a0:d2:25:a0:8e:20:14:5e:de:
ef:07:89:b3:32:b7:76:e2:47:64:dd:36:17:4d:21:
9a:73:dc:21:c6:17:f2:eb:da:da:b9:c7:dc:a5:2a:
86:f3:d7:87:0c:49:70:2d:f1:1c:77:53:18:6f:ce:
53:6e:ef:64:f8:b2:1c:a8:d5:5b:6c:eb:7e:ad:8a:
5b:5e:25:af:72:fe:4b:4b:c7:0a:12:73:34:d3:f5:
bc:94:1f:22:6e:bd:e1:6b:69:57:b7:3e:02:01:d1:
28:92:79:86:29:26:f6:66:45:42:78:f0:ed:1a:05:
a4:27:bb:6a:8c:b9:7b:2c:fd:79:6a:2c:8f:b6:83:
31:4c:c3:d0:0e:7c:e3:76:4e:b8:19:60:58:e3:5c:
93:7a:aa:f8:92:8a:29:4e:1d:cc:6a:7d:6d:5a:b6:
f2:c9:36:f3:a3:32:4b:8f:c9:be:96:b1:f6:6d:e5:
5a:44:a1:c6:49:96:59:8c:c6:32:99:96:c7:7a:30:
f2:e3:20:51:4d:c3:52:a4:e5:bb:05:54:ef:b4:54:
3c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:42:6D:B7:C4:A9:D7:6A:5E:38:24:D2:AB:E5:3B:8C:65:EC:84:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf910aaa-3a04-3f85-8e96-0f6b0b000f07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
137.114.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:93:a1:a7:ea:0c:31:4e:9d:0e:1d:d0:e1:e4:85:12:7b:00:
39:e5:d3:2e:f3:41:43:97:c6:b3:c3:1d:8a:b2:7c:b2:41:4e:
62:3a:d4:8f:9a:26:ea:7e:ba:aa:db:09:39:6a:2e:be:a7:7f:
e9:b8:95:40:48:b9:a6:c6:4e:51:6c:69:5f:db:0b:ad:60:a4:
89:21:65:1b:62:bf:9c:d0:5f:e1:b9:37:f0:8a:ba:9e:d1:e5:
af:fb:2d:7c:fd:47:b1:bd:3e:ec:db:75:41:7b:85:c6:58:94:
0f:e2:ec:e5:af:99:1f:da:a3:9f:3e:b7:15:f8:4e:f1:f7:4a:
4b:f0:50:9e:2e:c7:64:39:55:7e:88:62:ea:1b:bb:86:96:c2:
0d:78:98:22:79:27:d4:8f:25:e3:28:96:48:d1:dd:22:c8:26:
11:22:c6:0e:13:09:0d:98:14:b8:0a:6d:be:fd:0d:44:82:fa:
1f:cc:fe:ac:d5:70:73:05:b3:61:b6:e0:ad:fd:f2:93:43:24:
ff:37:29:e8:f6:f6:b9:07:7d:d7:41:aa:67:ec:96:3a:ea:a5:
92:ee:a6:2e:06:eb:bb:a0:2e:7e:55:26:ef:61:6d:43:9f:4c:
af:28:b9:d6:f1:91:c2:79:96:b8:05:4c:43:6d:5a:6a:ca:3a:
67:12:38:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:08:31 2025 by rpki-client