Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e63cd22b-d236-398a-bf64-87d81b61b6b2.roa
File: e63cd22b-d236-398a-bf64-87d81b61b6b2.roa (raw, json)
Hash identifier: w+DHl8s1D7iLgMIpDaSWG5cMlKafLHXK8fHt8Mv84Zw=
Subject key identifier: BC:73:51:47:4B:0F:0B:53:B3:64:FA:F2:66:A1:D2:1B:DA:88:F4:09
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D338892D79489909EE4F8BCB0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e63cd22b-d236-398a-bf64-87d81b61b6b2.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 156.7.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:88:92:d7:94:89:90:9e:e4:f8:bc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=c02594c5-383b-4d74-9913-23da607e3292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:78:84:a7:58:10:45:36:10:6f:9f:44:ec:
df:3d:5b:90:bb:62:7d:ec:08:2c:59:c8:1c:39:fc:
27:96:08:2f:0f:c8:f1:ad:19:62:65:89:12:69:5d:
03:ab:49:60:aa:77:64:43:16:7e:c9:8c:41:ed:8b:
95:07:b7:5e:7d:42:b1:4a:9d:28:59:9c:ca:ff:81:
44:13:8e:dd:33:12:30:60:32:09:f8:8a:47:68:7c:
96:dc:40:bb:ee:c2:9a:95:6f:63:7b:cb:e5:51:fb:
81:9b:9c:ae:99:b5:b5:19:6f:ff:25:89:b7:60:28:
10:47:c5:fa:60:bf:8e:72:73:61:01:93:88:77:ba:
b7:25:ca:4c:ba:6c:98:76:84:19:14:0d:6f:82:67:
27:7f:e7:07:0b:c5:08:b6:06:17:ca:ba:be:43:27:
fc:3c:28:9d:37:d2:4d:48:b9:2c:20:63:33:64:87:
df:93:1a:4a:66:ae:1d:a5:4b:4c:e4:ad:91:ab:21:
c5:3e:cb:dc:6b:e8:8d:f5:27:9a:a4:74:30:bb:71:
7f:c9:30:51:2b:a5:d3:b3:82:40:89:d6:8a:b9:9c:
25:05:88:b9:61:0b:06:4d:ec:7d:16:56:fa:06:e1:
b5:d5:c3:61:0a:cd:a5:f5:dd:7c:8e:43:14:a3:ef:
0d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:73:51:47:4B:0F:0B:53:B3:64:FA:F2:66:A1:D2:1B:DA:88:F4:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e63cd22b-d236-398a-bf64-87d81b61b6b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
156.7.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:5d:53:f7:9c:5f:38:a2:51:43:2e:a4:42:95:1f:fd:c2:02:
8c:a3:e5:f6:28:a6:21:b8:13:03:ad:19:c2:1c:be:25:25:c5:
ec:b6:0d:1c:39:0e:ff:37:04:65:40:c9:a8:32:f1:09:07:d4:
08:3d:aa:28:df:e1:e7:64:e8:c8:44:49:82:14:b1:91:1b:33:
fe:8b:eb:29:4b:6c:6e:df:48:3b:34:50:97:a3:e2:be:f3:fd:
f8:65:0a:52:ba:bd:1d:50:b1:3e:e7:f4:45:89:5c:b1:05:c3:
8c:b1:a5:46:df:bc:41:95:d8:32:8f:44:55:ce:55:5d:f4:ee:
bb:bf:0c:f5:f3:71:0a:09:6d:3f:dd:09:e8:29:2d:82:dc:e4:
ac:93:cf:cb:ee:cb:72:53:e5:5e:69:c3:3f:57:8d:98:de:f9:
10:4d:bb:ec:56:37:bc:dc:29:ae:b1:db:90:69:97:68:1a:41:
fe:d0:04:b6:8b:9e:aa:98:31:7a:0b:6f:02:40:7f:c9:7a:c2:
94:3c:e1:ec:e4:e7:8e:96:af:2f:bc:0c:5d:1e:b7:64:30:f6:
37:7a:8d:d2:cc:d7:f1:ad:56:db:f9:0e:ff:96:65:f0:13:79:
b2:8e:cb:41:ad:67:03:4a:7b:a2:fd:65:94:f2:b7:cf:da:07:
dd:5c:88:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:39:19 2025 by rpki-client