Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce0339dd-c9e0-3392-927e-0e6f91b4ed42.roa
File: ce0339dd-c9e0-3392-927e-0e6f91b4ed42.roa (raw, json)
Hash identifier: ORdsLJbLvAw+NNn/H7erjVsmx/26GP7SIo9KyGKAQ30=
Subject key identifier: 15:F9:C8:82:B8:35:10:04:1A:84:C5:60:ED:AB:6C:89:DC:F8:C7:47
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403B40EDF61C00C1F6B2C77D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce0339dd-c9e0-3392-927e-0e6f91b4ed42.roa
Signing time: Tue 13 Dec 2022 12:00:00 +0000
ROA not before: Tue 13 Dec 2022 12:00:00 +0000
ROA not after: Wed 18 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 152.155.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3b:40:ed:f6:1c:00:c1:f6:b2:c7:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 13 12:00:00 2022 GMT
Not After : Jan 18 05:00:00 2023 GMT
Subject: CN=242ccf13-f6fd-4c25-adf3-5f4ba2868329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:80:92:86:44:50:b1:8e:9c:61:1f:ef:b7:
88:ea:52:59:14:8a:85:63:04:a4:f9:d4:d3:79:fe:
1a:ad:36:a5:76:44:e1:85:5d:7d:27:09:ad:24:c0:
79:80:c1:c8:52:51:3b:ec:f4:05:2e:66:ef:a6:1f:
19:82:5a:dc:9a:98:d4:88:b9:44:a6:ff:b0:3b:1c:
20:6d:cb:21:2c:7f:14:3a:cb:f0:e7:99:79:66:9f:
02:87:79:c6:f0:86:6f:63:b6:2d:c8:9d:47:1f:24:
f5:f4:9c:44:73:95:fb:ed:ad:51:2b:74:ec:de:a8:
6b:40:5d:46:47:ac:9e:48:86:58:88:fe:c3:03:c9:
57:14:c3:a0:f2:11:be:a1:36:08:54:01:d9:5e:67:
ce:d2:4b:d4:63:a8:58:23:7f:41:33:09:89:1c:89:
3b:16:a5:99:73:33:b7:14:57:47:11:68:67:c3:58:
58:1d:28:10:3c:4b:b5:29:1d:3f:fa:87:ef:d0:b6:
e0:c2:11:53:24:92:5f:54:71:05:8b:83:0c:cd:4b:
d7:a2:80:2f:ae:23:64:26:a7:dc:a3:1e:2a:9f:80:
bd:0f:25:a6:5a:75:4e:05:bc:22:63:56:32:55:df:
8f:da:f0:26:8e:ca:7c:28:59:97:1d:1c:90:e9:f8:
e9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F9:C8:82:B8:35:10:04:1A:84:C5:60:ED:AB:6C:89:DC:F8:C7:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce0339dd-c9e0-3392-927e-0e6f91b4ed42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.155.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:37:aa:4c:9e:ba:20:86:4c:ff:de:2c:3f:a3:13:95:55:07:
b7:fc:6a:6a:96:f0:da:55:18:94:f0:7e:54:b7:ec:a4:a5:14:
90:49:d7:5e:93:e8:58:54:05:8b:d3:d5:12:43:08:cf:48:1b:
11:6d:1d:66:42:6f:3d:24:34:7a:48:b1:40:bf:40:f9:6c:72:
02:13:d0:f7:33:a4:3c:96:d7:03:f3:7d:a0:64:69:e7:51:55:
19:18:48:66:c0:ef:1a:16:92:fd:c6:1b:88:e0:8a:e1:ef:df:
51:a5:46:e9:c0:53:95:39:fe:69:0c:20:24:8b:c5:0f:63:d8:
6b:cf:09:24:19:32:bb:a1:b9:6f:8e:fd:c5:08:0b:74:b4:27:
8d:ff:f8:da:bc:95:45:8e:8e:a4:31:22:e0:11:44:bb:33:2e:
f4:c0:b2:f0:ba:00:a1:a4:77:30:5c:de:b7:24:35:fb:9c:7f:
38:42:65:55:cd:dc:35:ac:f8:94:34:07:d1:11:0c:aa:75:54:
53:48:89:73:5c:27:43:55:e7:82:2f:d3:d0:82:bc:b6:18:36:
2f:26:27:01:48:d8:a4:81:47:11:35:29:90:db:9d:37:8e:ef:
c9:e6:78:17:66:bc:df:b7:8b:61:be:1b:20:6a:2a:a2:47:97:
6a:13:1b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:58 2025 by rpki-client