Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c99e9382-8240-38fb-aa83-8073972ff204.roa
File: c99e9382-8240-38fb-aa83-8073972ff204.roa (raw, json)
Hash identifier: a4HLn7exkcV08um94toyAh84LHBVojmELFvZKejB+nk=
Subject key identifier: 8F:00:20:20:B1:9C:74:9D:89:FA:86:55:B5:2A:23:61:88:F6:44:DC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D2223CDC458DE53C8F6716A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c99e9382-8240-38fb-aa83-8073972ff204.roa
Signing time: Sat 05 Mar 2022 05:00:00 +0000
ROA not before: Sat 05 Mar 2022 05:00:00 +0000
ROA not after: Sat 09 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 151.162.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:22:23:cd:c4:58:de:53:c8:f6:71:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 5 05:00:00 2022 GMT
Not After : Apr 9 04:00:00 2022 GMT
Subject: CN=320e7fd7-8fa5-48a9-bd74-94bff6ace05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:69:e1:2c:fa:00:c1:ba:7f:db:ec:f8:a1:
49:82:03:3e:c0:6d:d6:24:91:ca:d4:0f:47:09:cc:
71:3c:3e:50:cb:ea:df:a2:85:03:b8:c6:13:82:66:
d3:2a:f9:9f:5b:ad:52:af:5c:27:a3:bf:49:5e:af:
32:78:cc:65:f0:f5:1d:d5:1a:c6:ea:76:50:d6:88:
95:d2:f8:91:d1:59:c1:6c:ae:f6:ee:14:14:9e:fc:
84:29:a4:bb:06:03:1f:6b:b5:73:ab:55:fb:3e:88:
4f:d3:56:eb:c4:8a:2e:fc:60:1e:cb:b2:04:67:60:
c2:b1:83:7f:e6:28:fd:3f:fb:46:e0:10:52:20:04:
94:58:b0:3f:e6:a4:bd:12:a4:55:4a:8a:06:3e:fe:
45:55:76:83:92:47:51:7f:3b:cd:99:c0:91:0e:d6:
e4:0f:9c:c9:d9:14:d8:37:f1:a3:0a:e6:03:c4:98:
a9:44:cd:26:d2:80:e5:ac:5f:c2:81:ef:dd:75:0a:
1e:23:f0:ad:4e:82:a3:e1:94:eb:8f:01:56:41:e4:
bc:e8:b9:d6:3d:10:d2:47:79:65:bc:38:40:39:e1:
dc:7f:a5:c8:c4:de:c7:ba:10:cc:53:fb:36:93:38:
4d:c5:90:6e:45:0d:04:a9:e3:82:7c:f3:e6:c3:4c:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:00:20:20:B1:9C:74:9D:89:FA:86:55:B5:2A:23:61:88:F6:44:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c99e9382-8240-38fb-aa83-8073972ff204.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
151.162.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:54:6b:c7:ed:6d:fb:04:65:48:0a:76:e1:ea:d9:05:9e:b1:
87:c2:8b:ab:c0:ff:86:72:67:42:eb:bb:c1:c9:19:a0:7b:e4:
03:26:ad:d0:c7:98:a6:6a:0b:ce:7a:7d:0d:5a:1b:dc:35:7a:
44:16:f4:0b:dc:bc:ef:c5:12:2d:a3:3a:cc:35:3e:8d:a3:9a:
1c:76:03:23:0d:ff:b0:42:76:e7:7f:a7:75:de:de:e2:1b:5d:
f4:fd:96:02:ca:4d:ad:c7:ca:32:21:b4:a1:c5:d1:47:b4:0d:
f8:b1:f0:3d:e2:57:9d:c0:db:e6:fe:67:61:73:de:d0:bf:60:
85:24:bf:b3:58:d1:22:cc:6c:ce:a8:13:3f:d4:70:09:a1:dd:
e0:69:bd:8f:b9:aa:31:ce:e7:4f:23:2a:9a:93:27:f8:54:bc:
bb:19:54:46:45:84:99:be:e9:5d:0a:f7:0e:f1:2b:9f:f8:e8:
1c:8f:76:a7:4c:60:92:23:da:2d:7d:25:e2:1c:a3:0f:b6:f2:
51:9f:99:d0:d7:3d:09:e9:1c:b3:f6:54:71:c7:fe:c2:37:25:
55:b3:13:e4:dd:d2:86:4e:38:c1:8c:bd:8a:b7:75:5a:7e:f3:
ed:23:c3:b1:95:58:f3:d8:0f:e2:d4:96:79:0a:98:d0:1e:69:
53:f7:58:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:13:15 2025 by rpki-client