Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3a71bb6-1c60-336c-b311-8b7646958574.roa
File: c3a71bb6-1c60-336c-b311-8b7646958574.roa (raw, json)
Hash identifier: vd6nbhypf3Qzvc28z1rRBbQZD0sYswbNAyEk9WC906o=
Subject key identifier: C6:43:90:C1:BB:C0:E4:22:6B:24:C5:12:29:EF:84:E2:E7:34:56:1A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C9714390E5FE3E5FBB631EA80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3a71bb6-1c60-336c-b311-8b7646958574.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 156.7.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:97:14:39:0e:5f:e3:e5:fb:b6:31:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=2d684406-4ca8-4cfb-8b3d-646d6f95938b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2c:26:29:3d:f5:fd:84:6d:58:93:8c:47:2f:
e5:1f:a8:ba:0d:be:5f:62:ab:0b:d6:a9:8f:17:3f:
c2:f3:ce:e5:11:31:3a:6b:87:80:e6:d6:db:83:f9:
92:a7:8c:2b:78:a9:2d:5d:49:8a:f9:b8:16:c5:5f:
2c:33:00:14:b3:39:ad:59:f9:74:3b:01:22:38:4a:
5f:98:ea:f6:1e:5c:07:53:ee:c0:90:b5:20:73:f5:
dc:48:19:2e:2c:ca:59:e3:31:fd:3e:ea:37:8b:92:
83:e2:27:68:d3:a3:1a:7c:b5:9a:ce:4f:f6:c6:cf:
92:7b:83:6b:0b:44:49:e1:10:c3:89:e4:3b:7e:a2:
5b:39:49:a6:b3:46:21:b4:20:3b:52:3e:46:f6:9c:
1b:40:78:99:76:08:7e:54:cb:a6:86:41:52:92:8f:
76:25:16:e5:45:06:6c:8f:9c:1d:79:4a:51:63:a3:
49:ce:6f:5e:58:ed:26:83:47:ab:b3:48:68:a0:ba:
91:21:1d:20:9e:07:de:fc:3f:d2:25:a0:db:37:3b:
15:3a:6f:ff:ac:3e:f5:76:49:71:b1:1b:ce:be:7b:
83:3a:05:cf:14:3d:ff:10:a5:9a:ed:e6:39:03:7a:
93:43:ed:74:db:a6:a2:a6:d6:a0:06:74:0c:d5:e9:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:43:90:C1:BB:C0:E4:22:6B:24:C5:12:29:EF:84:E2:E7:34:56:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3a71bb6-1c60-336c-b311-8b7646958574.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
156.7.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:ae:e1:74:4e:45:0a:ab:31:38:bb:ee:84:79:08:9e:0d:49:
bf:40:1d:fa:73:16:6c:49:8a:b9:88:fa:8b:b5:e8:a8:70:9b:
3f:f7:44:5e:94:8c:0e:95:96:a1:8a:15:76:d0:5d:8d:51:61:
c5:c2:7e:fb:3b:1e:ea:b2:6a:df:03:86:c9:8f:1b:05:da:3b:
36:56:cb:e0:f7:91:7f:ac:b4:4c:1c:0d:83:c0:a2:78:09:4d:
61:44:e5:da:fc:c5:12:4f:2d:94:6b:ff:49:c5:d2:f2:c6:02:
39:70:54:fa:a2:79:27:b1:1d:2d:5d:fa:cd:95:44:8f:7e:c3:
49:bd:4b:74:1f:ba:6e:15:45:5a:7a:73:d9:6b:86:4f:e3:47:
45:76:1e:17:de:5b:05:37:22:32:fb:7a:c1:ba:aa:1f:8a:e4:
82:b2:ee:d9:cd:a7:3f:5d:66:f8:4e:bc:a1:c7:d5:46:aa:c8:
9f:45:ad:10:ea:b8:29:86:27:fa:7f:4e:78:ce:89:7d:5c:3f:
6d:28:14:3e:a5:af:44:76:35:ec:de:82:7e:7b:00:ba:ba:69:
90:d6:f7:e9:d1:35:29:0d:4f:ba:e4:a7:ae:f7:2f:c9:15:84:
1a:a5:a5:57:0e:e8:2f:04:74:57:fa:73:4e:0a:85:00:29:16:
39:06:9a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:25:38 2025 by rpki-client