Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd2a0c40-2366-3b9a-9c10-b7b0b62ec3a6.roa
File: dd2a0c40-2366-3b9a-9c10-b7b0b62ec3a6.roa (raw, json)
Hash identifier: b6xPLx7mR/cDHLWVLcGYTBMdLdhxkSeIA8Jm9UoTIN0=
Subject key identifier: 8D:85:14:8F:45:38:C4:6F:4A:DA:05:10:84:E5:94:22:59:F7:EC:7B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404190626ECE9EE27B30FC8680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd2a0c40-2366-3b9a-9c10-b7b0b62ec3a6.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 153.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:41:90:62:6e:ce:9e:e2:7b:30:fc:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=d457e2e9-3430-407b-9b82-df10d89d58c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:58:39:42:e7:0f:6c:8b:14:6a:a5:a8:37:
94:10:62:ad:83:28:00:43:c8:6f:4f:12:f6:d6:a7:
02:71:c6:f2:b1:d2:e7:fc:14:4a:38:eb:80:d2:b6:
cb:0b:17:68:55:30:c5:17:54:bc:43:f9:21:93:6b:
ff:ba:51:4b:7c:3b:3e:af:fc:45:6a:c3:7b:13:4c:
65:43:3c:1b:2c:6e:a2:97:36:a2:da:d3:1c:48:84:
bc:78:ec:84:7f:6f:ae:a9:2e:31:73:60:d1:12:c3:
53:68:71:97:e0:82:79:15:4d:45:7d:f0:55:97:2f:
9e:a4:99:43:eb:24:ef:1c:89:a0:b2:b1:91:e0:03:
2b:b4:cb:b2:57:f7:87:ac:b4:be:1e:6a:3f:29:a9:
b1:47:e7:00:bf:68:32:57:e1:60:56:e4:4c:40:4e:
7f:52:de:c3:84:b0:46:50:57:c4:66:77:7f:c1:03:
ad:7a:f2:20:6e:34:ca:25:a2:9f:53:cb:a0:be:fb:
06:f6:e7:6b:3e:3a:8f:ac:c6:7b:e6:b2:bb:4f:8e:
2c:04:31:a4:f4:54:69:79:5c:b9:1d:9a:bd:bc:c4:
5b:f1:a5:87:0b:ec:81:cd:b9:dc:c3:b8:a1:af:c5:
0d:8f:9f:cd:62:35:19:e0:e2:b5:26:24:ba:31:0c:
1c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:85:14:8F:45:38:C4:6F:4A:DA:05:10:84:E5:94:22:59:F7:EC:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd2a0c40-2366-3b9a-9c10-b7b0b62ec3a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
153.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:c4:bb:b3:99:5d:ce:53:23:a0:86:b7:77:a7:6c:81:71:68:
72:90:41:5f:6c:f8:92:a0:05:ef:5f:86:cc:7e:32:f3:85:8c:
b4:0b:82:ac:51:a8:94:9e:2d:0d:92:08:b1:21:c1:b5:7f:6d:
b8:83:0f:a6:15:bf:c9:32:45:8d:d1:04:fc:1f:a5:c0:e9:f9:
84:46:27:d5:05:f2:e7:72:16:4a:2e:52:91:99:9a:cb:72:d4:
83:9a:58:ca:36:7f:24:35:2c:11:05:5e:3a:73:78:a5:0a:39:
75:5b:fe:5c:12:32:21:0f:d5:b1:06:3b:cd:4d:a2:cc:1b:ae:
98:a7:bc:6d:07:9c:fa:f9:b4:af:0e:9a:0f:1c:61:b4:18:b3:
e0:6b:eb:fb:f1:65:59:ce:00:ce:60:4c:9c:31:3b:73:48:e2:
61:e2:8d:af:d5:2d:4c:4e:11:5b:a3:12:2c:6b:a5:46:09:1e:
46:54:43:dd:a8:72:2d:c4:5f:87:ac:8c:de:d7:47:91:27:27:
02:e9:f3:a2:63:e6:7a:7c:41:03:e3:5f:09:98:cd:c3:6a:7f:
aa:7b:4f:d0:6d:93:78:7e:f9:47:a5:91:0d:15:a3:26:43:c1:
6f:d3:d0:74:36:a8:38:c7:6b:1c:6b:1c:86:81:69:6e:c7:39:
40:df:2c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:15:00 2025 by rpki-client