Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf868d8b-33ff-31f0-a1d7-7f8b1ef72cc1.roa
File: cf868d8b-33ff-31f0-a1d7-7f8b1ef72cc1.roa (raw, json)
Hash identifier: XxZj8FfP9LBXAqoUt+HxdMXAgwdjk869Kj9XKlQSbkg=
Subject key identifier: 6B:94:A6:EB:DF:69:92:55:8A:8B:19:A1:76:36:CC:CC:40:27:50:BE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7FF99E5C7CEAAA590B64D080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf868d8b-33ff-31f0-a1d7-7f8b1ef72cc1.roa
Signing time: Fri 07 Oct 2022 12:00:00 +0000
ROA not before: Fri 07 Oct 2022 12:00:00 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 153.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7f:f9:9e:5c:7c:ea:aa:59:0b:64:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 7 12:00:00 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=13f486d3-1a04-4b84-ae47-a3c370ebc6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:9a:d0:b3:ee:51:c3:8d:17:fd:e2:d5:6f:
62:b6:78:c9:6a:49:70:33:f5:98:ab:f3:e6:3a:37:
e8:5f:a3:3c:4e:c7:32:29:cb:93:91:e1:5a:58:bd:
cf:bb:eb:2f:c0:3e:5d:97:2f:27:29:19:eb:d3:3a:
2b:4d:77:87:79:fb:6e:62:d1:cb:c9:12:ae:89:1a:
58:eb:47:07:50:a0:5e:27:00:6c:2c:87:d7:75:93:
7b:ac:be:6a:08:47:64:80:0a:33:30:55:22:74:ba:
fa:7e:66:96:ea:e1:36:26:b7:6c:2f:f1:0e:a6:e4:
e3:91:ba:f8:8e:18:bb:e5:a5:8d:ce:81:f3:dd:b4:
b3:40:17:b7:57:f3:68:6a:15:26:85:05:0d:6d:44:
d4:79:43:54:9c:10:38:2a:6a:d6:f5:c0:40:02:87:
f4:1e:76:82:9d:ff:01:ce:47:8c:b5:7b:99:1d:37:
27:31:75:20:9b:7e:88:1b:e8:7b:20:5c:bc:4d:7d:
8f:bc:7d:51:46:22:92:35:b4:ae:36:05:9d:09:f8:
e1:b7:62:29:b3:4c:36:e0:34:a1:fd:5a:14:f9:9d:
fd:6b:cd:79:f3:fa:7b:16:ff:5e:2d:5e:c4:30:4f:
4c:51:05:5d:4d:e8:f4:d3:85:cd:7a:40:94:a4:73:
75:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:94:A6:EB:DF:69:92:55:8A:8B:19:A1:76:36:CC:CC:40:27:50:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf868d8b-33ff-31f0-a1d7-7f8b1ef72cc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
153.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:36:08:65:2a:a4:69:77:ea:ce:ca:09:21:a1:14:b6:af:93:
8c:26:b6:e5:2d:1f:85:5f:1b:38:a2:3d:3b:52:5e:75:80:47:
f8:d6:78:16:99:26:2a:0c:c6:92:76:8c:f2:8c:35:36:0d:2e:
2c:25:9c:91:69:e4:43:bb:4d:f5:01:d4:ce:30:26:00:21:d2:
ac:e5:bd:2e:ca:fb:f0:c6:4a:68:38:20:5d:6a:c0:a1:7b:36:
e2:d5:bf:c2:4c:9a:fa:6a:a3:81:88:62:a7:83:01:29:08:e8:
2d:c0:26:3f:a4:ad:32:23:f3:69:aa:63:04:81:87:a8:7a:ce:
9e:70:22:85:c8:9f:21:f5:f1:4c:c0:a5:c2:36:de:a6:2f:5d:
1c:85:bb:f5:ca:6a:94:d7:40:2c:4b:e1:df:0a:14:46:73:63:
62:17:65:37:95:be:61:4b:c5:f1:8e:1e:ee:19:6f:bf:ea:d4:
92:56:a1:da:ad:77:71:2e:5f:c7:d4:90:b2:ee:43:2d:48:54:
67:fd:87:14:4d:b2:37:a6:b9:45:f1:2f:5c:93:0b:b0:12:8d:
08:ee:97:0f:04:c4:ba:00:a6:b7:ed:71:76:aa:eb:2b:40:05:
a4:e2:51:77:cf:13:97:4f:d0:c9:c3:eb:78:46:8a:b1:72:07:
23:bb:48:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:26:47 2025 by rpki-client