Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8411c35-bc64-33f4-b315-2f35d1cc97dc.roa
File: e8411c35-bc64-33f4-b315-2f35d1cc97dc.roa (raw, json)
Hash identifier: fKZ4J/Ovf51wywrcjgFGoh7tthxwhplFQVTx2ns9kS8=
Subject key identifier: CC:13:DC:E1:53:70:32:9B:29:57:38:2E:B5:B9:35:C4:0C:FC:AE:43
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DE474AC5CE5A7B0B1FCCE2BC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8411c35-bc64-33f4-b315-2f35d1cc97dc.roa
Signing time: Thu 12 May 2022 12:00:00 +0000
ROA not before: Thu 12 May 2022 12:00:00 +0000
ROA not after: Fri 17 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 151.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:e4:74:ac:5c:e5:a7:b0:b1:fc:ce:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 12 12:00:00 2022 GMT
Not After : Jun 17 04:00:00 2022 GMT
Subject: CN=27de6d7b-af10-48d7-b57f-85660e98b9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:e7:be:5f:b5:da:20:22:47:17:e0:1f:87:
78:18:4f:91:36:12:8a:d6:d0:77:2b:04:e1:06:24:
a4:e8:f3:b0:8b:d3:ef:b5:f9:b5:34:ba:b9:90:e2:
dd:76:4b:3f:9d:ee:14:9c:14:11:ff:3c:93:74:26:
2e:f8:5d:f1:6f:d4:50:f9:65:7e:4c:2c:af:18:28:
32:e8:fd:1c:f9:57:1d:1b:ee:4e:2a:7a:ff:3d:3f:
91:92:6d:ca:c5:ae:5a:bd:fd:a5:de:78:49:eb:e5:
c9:8e:d4:cd:4f:64:a4:ab:87:77:9d:71:71:e0:58:
35:db:5c:00:1e:ff:32:44:3e:fb:aa:34:d9:7f:c5:
20:78:10:b9:6d:1d:8b:d1:5c:21:4b:63:ae:c3:26:
cb:f6:23:7a:e0:47:5e:26:2c:c5:1d:bd:7b:91:f5:
55:10:c8:4e:99:3e:c0:70:ba:9d:d2:80:ba:29:a1:
90:26:6d:06:15:1d:f6:ad:c7:6d:55:3c:04:3a:40:
8c:58:7e:2f:fb:3d:08:44:fa:ce:d0:28:db:a4:4a:
97:f8:a9:ae:e7:2c:22:38:dd:5a:3f:24:61:3f:1c:
b6:6c:34:98:51:75:c0:81:94:42:c5:17:8a:60:19:
8b:8e:8f:44:a5:8a:23:bb:1b:9c:20:08:f8:5d:58:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:13:DC:E1:53:70:32:9B:29:57:38:2E:B5:B9:35:C4:0C:FC:AE:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8411c35-bc64-33f4-b315-2f35d1cc97dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
151.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:a9:5c:58:40:17:a9:23:85:9a:f6:f1:7e:a7:65:17:1a:07:
9d:0f:6c:eb:83:8f:f4:16:d8:ab:6d:a8:7d:e1:5c:27:a8:cc:
05:5a:c2:88:d3:fa:5c:4a:d7:a2:94:c7:65:e3:1e:1d:0c:5c:
ca:06:f9:18:ae:f5:37:bc:2a:e4:07:3c:84:ee:f2:75:b6:f2:
87:d9:76:db:25:71:7d:b1:bd:57:aa:25:6e:6e:0c:5a:c6:39:
2a:23:45:b6:95:fa:78:88:a1:27:9b:b6:1a:85:22:e9:36:ab:
c9:63:fa:77:4f:ee:5b:f3:df:d6:a9:fb:d7:16:b4:1a:46:b7:
56:66:b1:b4:0c:d7:4d:7a:d3:15:e5:ae:24:65:52:b2:59:9b:
79:db:07:c5:af:4e:49:84:1c:d9:b6:8a:fe:4e:a6:5f:2a:3b:
f3:14:62:0a:a1:0a:03:89:6e:38:1d:fa:e8:ef:3a:fa:31:89:
b6:f7:22:08:30:f1:b8:83:c0:cd:84:4b:34:c1:98:90:0e:f0:
aa:03:0b:e5:6e:f8:81:1b:9e:a3:df:6d:e5:1f:45:0d:30:e9:
db:3e:cb:96:80:65:31:d3:36:37:02:ae:56:8d:0f:28:e7:d0:
1a:32:0f:6a:1f:ce:3d:e2:05:51:6d:23:50:f5:e6:71:f6:03:
2b:01:b5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:57 2025 by rpki-client