Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d358451e-5998-34a3-97ab-213a149c7fa2.roa
File: d358451e-5998-34a3-97ab-213a149c7fa2.roa (raw, json)
Hash identifier: 45GLJ9a9EhnU50bezkVjeo4+Lxuz3fs81Qppl52OFv8=
Subject key identifier: 29:F4:0E:F1:91:70:F5:89:F0:52:77:35:C7:32:BA:AB:C3:DB:DF:CD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D027125422B97E4366D811980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d358451e-5998-34a3-97ab-213a149c7fa2.roa
Signing time: Tue 22 Feb 2022 05:00:00 +0000
ROA not before: Tue 22 Feb 2022 05:00:00 +0000
ROA not after: Tue 29 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 138.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:02:71:25:42:2b:97:e4:36:6d:81:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 22 05:00:00 2022 GMT
Not After : Mar 29 04:00:00 2022 GMT
Subject: CN=b2e57860-aed1-41b0-971c-6d975bbdd37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:56:54:9e:b7:25:5e:36:1b:56:11:7b:c3:
de:0e:6e:18:c8:05:bb:ae:56:a7:6b:cd:fe:73:38:
c2:34:cc:04:e1:e6:1e:5e:53:8d:16:68:1a:0b:3c:
5d:ff:3f:28:23:66:da:ef:5f:63:94:e0:48:7d:1d:
7e:d5:36:64:be:0c:ae:aa:bb:b6:be:10:21:17:c7:
62:c8:8c:e1:90:d1:f0:a0:a0:ed:63:9b:26:33:49:
3e:07:b6:a3:b1:33:58:b8:00:01:cf:4d:1d:86:a9:
40:bf:53:97:b3:cc:6c:39:d0:a7:39:2e:8a:dc:67:
97:53:98:bb:92:51:f1:c4:3c:ec:e9:3c:3f:0f:5e:
5e:3d:67:f8:71:c7:91:7a:93:a0:7a:05:70:8b:7e:
26:b4:72:eb:d6:85:f2:91:45:de:e5:75:ba:7b:e1:
58:e2:a8:6f:ee:e9:23:6d:bf:0e:9c:ac:48:2f:ee:
65:c3:94:45:bc:0d:13:ef:ea:dc:08:30:a9:a2:24:
90:3a:04:b0:8a:43:74:31:11:73:cd:68:cc:77:6c:
78:9d:fa:05:d8:d0:f8:90:22:ae:69:cc:8f:f4:bc:
43:80:f4:fe:0b:2b:17:21:fa:05:0e:d4:81:f9:d6:
66:8d:d9:02:23:33:5d:f1:66:33:1c:5c:c1:61:ac:
69:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F4:0E:F1:91:70:F5:89:F0:52:77:35:C7:32:BA:AB:C3:DB:DF:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d358451e-5998-34a3-97ab-213a149c7fa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
138.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:e1:a7:e5:a7:27:79:96:a8:30:7a:00:e5:fa:3c:6c:82:57:
55:87:85:7c:55:7f:f3:75:be:23:98:6a:6c:60:c3:d4:1a:23:
78:a6:f1:b5:05:38:c4:da:23:8c:a3:17:98:78:52:6b:52:76:
0d:bc:67:80:0b:cb:e1:63:75:18:f0:1f:af:20:28:87:30:0d:
e8:83:3d:c4:39:4c:61:f0:ad:95:9f:90:66:75:e4:98:ca:a2:
50:de:9f:01:fd:52:c6:ae:99:c4:b5:ab:77:9c:87:aa:96:5a:
78:6a:5a:23:e3:66:78:60:33:0c:cb:e4:6b:d2:28:3f:b6:e0:
06:81:0c:0f:a4:4a:3e:5f:ea:a3:c1:92:1b:00:60:81:ae:7c:
6c:fb:ed:fd:0d:43:9b:74:e8:45:51:29:ad:13:ee:58:8c:91:
48:cb:bf:60:3e:82:c6:6b:ab:db:76:95:f7:17:0b:8d:aa:f6:
36:7d:a5:63:09:80:6d:ed:40:84:bc:83:25:cf:1b:c4:6c:66:
3c:30:e0:28:41:69:09:d4:33:28:af:51:da:f8:fd:7c:c1:b6:
cd:ad:ad:6f:c6:bf:16:46:11:b1:72:b6:2d:6a:5d:47:56:3b:
a2:fc:45:9b:9a:b9:01:39:48:c9:3a:e4:97:c6:02:16:96:d6:
79:63:df:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:53:39 2025 by rpki-client