Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e7454c1f-2718-3f4a-9bb8-1e974894e04a.roa
File: e7454c1f-2718-3f4a-9bb8-1e974894e04a.roa (raw, json)
Hash identifier: yYWyf5aN7jhOiiQu8UX0g95D7vk9c0p96KGp80RHvZQ=
Subject key identifier: A2:43:23:A6:3D:1A:4A:28:BF:C8:98:D8:FC:6D:4C:BC:0F:1E:13:16
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DA81CF5F86550A0F06A133F40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e7454c1f-2718-3f4a-9bb8-1e974894e04a.roa
Signing time: Thu 21 Apr 2022 12:00:00 +0000
ROA not before: Thu 21 Apr 2022 12:00:00 +0000
ROA not after: Fri 27 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 47.10.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a8:1c:f5:f8:65:50:a0:f0:6a:13:3f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 21 12:00:00 2022 GMT
Not After : May 27 04:00:00 2022 GMT
Subject: CN=a972d155-0aa9-49b9-bb19-417bae565f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:39:a2:96:be:cc:46:3f:47:40:5e:a1:4b:
2b:71:8f:44:db:b3:a0:4e:2d:63:da:1a:c8:b5:a7:
4f:c2:d6:f6:45:f9:5b:ee:07:fa:85:d7:56:2f:28:
cd:50:f9:81:81:00:2d:0e:07:2a:f3:46:e2:ab:71:
da:09:ad:16:f7:e5:57:e5:96:8b:8d:c7:03:49:44:
44:d1:7c:23:f0:34:cd:e2:79:7a:24:7e:ad:96:62:
53:73:57:c1:e5:ae:bc:46:24:3c:0a:ad:d5:4a:47:
12:8f:45:6a:78:5c:7f:90:36:7d:51:d0:7f:34:ae:
7d:64:50:89:74:a3:33:8e:ff:bf:2f:3c:75:c2:44:
80:5c:89:47:93:b2:31:a4:2a:c5:a4:38:6f:fa:8f:
84:be:fb:0b:08:94:ee:73:7e:29:5a:c7:8e:5c:ce:
7f:bb:9b:77:bf:37:73:d8:58:ff:f4:cf:ac:c3:3e:
ab:52:ad:5e:5d:d1:76:1a:84:ea:12:d0:57:2c:25:
1b:6d:fd:5f:ef:f3:c8:49:4c:56:dc:52:c7:fa:e8:
35:a3:91:78:27:e4:0f:4b:ab:8e:29:63:0e:a5:ee:
c9:1c:c3:af:22:ff:94:6d:b3:ae:bf:8e:30:d0:8e:
c4:28:21:14:1f:7a:27:27:1f:c7:ae:3a:68:13:65:
60:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:43:23:A6:3D:1A:4A:28:BF:C8:98:D8:FC:6D:4C:BC:0F:1E:13:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e7454c1f-2718-3f4a-9bb8-1e974894e04a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
47.10.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:06:46:03:70:21:9f:8d:4a:35:a9:91:f4:be:cc:5f:53:23:
b7:42:c5:4a:b4:d1:74:0f:ac:2a:3e:e2:62:eb:b4:4e:7d:83:
79:60:73:e0:09:4d:65:40:b5:d2:93:90:62:0d:f9:93:71:d8:
31:7f:c6:f3:09:17:6e:b4:0e:85:c1:f8:2c:5d:6a:fa:3f:38:
b8:f3:b6:62:06:d2:c7:26:24:f2:14:42:4b:36:74:cf:84:43:
9d:fc:d9:e9:0a:1a:79:72:26:81:01:7e:af:c4:e2:fe:2f:57:
b0:10:d8:14:8b:78:ae:67:5c:73:af:57:09:0b:80:cb:6a:d7:
37:0f:7e:d7:42:22:7d:bb:89:a5:6c:e5:92:d2:37:a8:73:30:
42:fd:ab:5a:db:c2:26:ac:eb:51:e4:39:9f:7e:21:53:a3:e9:
61:49:0b:ea:33:79:4c:84:d4:82:1d:56:be:b8:bf:01:e9:c5:
4d:4e:94:e1:bc:c7:c3:ff:22:f9:ba:a8:9c:7a:fc:eb:26:9b:
8a:9b:dc:4d:03:6f:d3:7b:27:81:f9:2d:35:a9:52:6d:37:04:
45:0c:34:04:48:0e:f2:04:9e:8c:2d:69:46:b7:2b:e5:83:31:
c0:3c:70:e4:62:1e:e4:90:e8:54:37:ad:ca:b8:82:b4:1e:08:
68:ab:49:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:21:37 2025 by rpki-client