Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e981ce91-60c2-36f1-894c-d49d9580f088.roa
File: e981ce91-60c2-36f1-894c-d49d9580f088.roa (raw, json)
Hash identifier: EwkiCDnfA8RK2jZfFmSXiwDSmEReDEjKA531kA70niQ=
Subject key identifier: 38:F5:1D:9C:7D:5C:1A:0A:93:4F:3D:9D:68:3B:A5:11:BA:82:C4:69
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FECF819AC2F91FB09DFB0BC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e981ce91-60c2-36f1-894c-d49d9580f088.roa
Signing time: Tue 15 Nov 2022 12:00:00 +0000
ROA not before: Tue 15 Nov 2022 12:00:00 +0000
ROA not after: Wed 21 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 152.155.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ec:f8:19:ac:2f:91:fb:09:df:b0:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 15 12:00:00 2022 GMT
Not After : Dec 21 05:00:00 2022 GMT
Subject: CN=67e10f72-4df6-453e-a372-be9fce530033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:c0:71:1d:94:0a:1a:78:39:c2:d6:bf:42:
51:99:19:48:f7:4d:f8:e8:04:c2:9b:77:0e:f0:65:
8d:45:aa:bb:41:26:37:eb:dd:1b:02:4f:e2:54:e3:
a6:70:11:e9:c4:eb:4d:f9:08:cd:05:88:bc:be:e0:
4d:90:4d:7c:81:cf:eb:13:4a:33:e2:a8:e4:32:c3:
3b:b8:e3:af:b0:5c:96:52:ce:87:13:f4:9d:eb:94:
38:e1:40:6b:9a:12:20:db:fc:be:df:29:bd:79:5f:
f8:26:1b:92:3a:a2:f5:01:6d:7e:53:9f:8f:5e:85:
c0:99:32:a7:52:e8:c5:56:f7:60:30:07:4c:62:9e:
5d:b0:9b:2e:a0:40:0b:c5:75:36:af:e6:e2:12:e6:
cd:29:02:cd:e9:d2:a7:93:f2:35:2f:3b:a2:ef:fc:
c1:45:d7:58:e0:ab:25:dd:aa:47:5d:2b:bd:5d:1e:
e9:af:69:64:df:e2:a1:9c:b4:ef:55:c2:06:95:fd:
63:49:dd:c5:75:42:df:61:cd:3a:b3:c0:64:81:37:
f9:22:e2:02:40:52:ed:69:90:8b:33:20:1f:43:23:
5d:96:06:b8:dd:d8:a6:9f:08:80:0d:23:eb:56:7e:
92:77:65:b1:95:84:e4:4d:20:25:a1:78:71:83:dc:
3b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F5:1D:9C:7D:5C:1A:0A:93:4F:3D:9D:68:3B:A5:11:BA:82:C4:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e981ce91-60c2-36f1-894c-d49d9580f088.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.155.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:65:18:82:13:07:3c:d0:b1:51:64:7e:bf:2c:0c:d5:aa:e7:
60:c6:4d:8d:38:f2:8e:82:de:96:08:99:b4:76:48:7c:ba:7a:
4f:3f:4c:38:2e:c1:3a:57:21:6f:f2:49:f0:88:c8:6d:70:8b:
2b:98:2b:53:4f:44:02:4f:a5:9d:10:12:9f:a9:e1:55:f6:2a:
b0:4b:01:d3:a8:40:e8:24:99:d3:8c:6d:e0:c4:81:d2:40:24:
96:ef:11:91:b3:32:c3:68:3b:54:aa:1d:fb:39:fd:2c:b5:3c:
c3:88:db:3d:3c:81:41:d9:e1:2c:86:98:0c:f1:d7:37:ce:2b:
bc:01:55:54:08:79:0e:98:84:c5:f1:d6:fb:7d:20:75:11:e8:
c4:15:8f:58:92:d8:bf:9f:fc:16:a8:8f:e3:fc:72:24:a4:d0:
0e:be:3f:3c:74:31:e8:90:5e:16:ae:b5:c8:33:1a:2d:c7:fc:
a8:ec:98:c4:c8:c4:42:c1:11:a3:63:d6:e6:0a:45:8b:9b:31:
35:dd:e4:69:22:38:ae:9d:d6:89:f6:ed:05:fa:40:09:7e:08:
65:03:e9:7e:25:a6:10:b2:1b:4d:a3:ef:cf:93:8f:33:8a:b4:
e1:6c:d1:0f:0c:98:a5:be:02:93:9f:4c:26:e4:d6:cf:66:94:
ea:41:1b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:05 2025 by rpki-client