Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c32cf3fd-84a8-38be-9dc2-b1b45c35572b.roa
File: c32cf3fd-84a8-38be-9dc2-b1b45c35572b.roa (raw, json)
Hash identifier: 7GYRDjl3pYdyzQLRQbWhPd+ATOIZWJkCaCzr6/bd0js=
Subject key identifier: 95:64:44:DD:46:17:55:18:28:84:3D:B2:3A:B7:31:07:56:32:D1:7D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406906E6DA8CD2C32107C4EC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c32cf3fd-84a8-38be-9dc2-b1b45c35572b.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 152.25.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:69:06:e6:da:8c:d2:c3:21:07:c4:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=bed36353-cfb0-46a6-abd4-31e7bc08ea19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:1e:00:75:1b:ad:1f:a8:3a:12:f3:f9:fd:
7b:2f:d1:40:c3:86:70:09:30:3e:5f:b8:3f:e4:5f:
e0:28:6d:45:30:05:5d:45:de:6e:e4:dd:1a:19:df:
01:82:95:56:8c:95:62:ba:66:25:bf:f1:bd:67:7e:
c0:f3:14:cd:cc:8e:f8:ca:0a:af:e5:8b:7e:b2:95:
94:aa:2e:ab:7b:22:c4:a6:46:a0:51:91:1f:a0:32:
3f:72:15:b9:a9:66:06:1f:da:3c:4b:99:a5:e3:de:
1e:55:e1:3d:56:77:b3:95:85:5f:c8:1a:71:c2:b6:
e9:e4:4f:51:22:3f:4d:13:ca:7e:d2:83:d1:cf:cd:
a0:71:7f:a0:6c:2d:e6:97:e7:e3:d1:67:5f:e6:d2:
54:3c:58:f0:31:72:c0:b9:59:da:12:c5:98:b0:f2:
d1:5e:de:a3:cd:a4:9f:05:de:c3:2d:62:c7:92:67:
cf:2c:dd:77:ee:98:e7:d7:a9:bd:e7:2d:56:bc:a9:
68:06:ed:fc:ae:33:fb:e0:5f:d1:da:55:b0:0c:3d:
2a:81:74:84:07:13:46:35:78:09:64:8a:4c:09:90:
fb:d2:e6:aa:26:54:4c:90:77:1c:a3:01:7e:9f:32:
7d:59:1c:1a:60:a9:97:22:c3:ca:5c:b1:65:e3:5c:
5e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:64:44:DD:46:17:55:18:28:84:3D:B2:3A:B7:31:07:56:32:D1:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c32cf3fd-84a8-38be-9dc2-b1b45c35572b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.25.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:04:0b:f4:40:38:c9:a5:f4:aa:74:d4:5f:79:01:29:ec:40:
f1:d9:c2:df:11:f7:ee:e7:a0:4e:5c:a9:76:ab:ba:e8:b8:50:
0a:9a:4a:b2:4b:08:d1:d2:5b:1a:56:29:b3:8f:fb:60:95:a2:
b9:83:a6:96:63:5a:91:81:71:bf:6a:b5:1a:35:5b:ea:f8:c6:
ec:bf:d9:41:10:43:5d:02:41:4d:bf:21:b7:f4:0b:e0:2e:83:
e0:2c:46:74:25:63:c4:7d:8a:2f:af:35:8e:31:c8:e0:28:5a:
25:db:07:e7:b1:b6:64:21:bc:71:82:25:00:42:96:25:32:da:
84:84:d8:d9:a4:16:cc:63:d3:84:97:98:06:ee:34:24:b3:bf:
e1:91:69:66:75:d8:5b:62:b3:21:99:4d:0f:d8:23:17:7f:14:
ed:b2:36:bf:78:40:51:0d:d7:cc:2f:e0:5f:ea:37:26:67:6f:
19:63:3d:70:d5:18:88:ad:67:c6:2b:16:dd:ed:c3:b1:83:e1:
47:c8:e9:5e:d3:64:56:a9:9c:0c:5b:fe:ce:00:25:70:f7:ab:
9a:0e:5b:28:6c:21:c2:ed:9f:ff:ab:a3:ee:73:93:40:9c:b9:
13:f5:da:b9:47:60:a0:5a:dc:17:5f:73:3e:ae:42:6d:60:a5:
df:a1:3f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:40 2025 by rpki-client