Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea60b4bf-141e-309e-9496-11f3fec7dda1.roa
File: ea60b4bf-141e-309e-9496-11f3fec7dda1.roa (raw, json)
Hash identifier: dn7z18zoXg+eC+36eT5kqGBx1gaW5eGVrB8d0oSHAX4=
Subject key identifier: EA:EB:F3:43:96:5F:B9:D0:96:54:C2:54:D8:3A:99:BC:D6:8C:F7:EC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CDB54138C1B276B8E3B73B6C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea60b4bf-141e-309e-9496-11f3fec7dda1.roa
Signing time: Tue 08 Feb 2022 05:00:00 +0000
ROA not before: Tue 08 Feb 2022 05:00:00 +0000
ROA not after: Tue 15 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 138.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:db:54:13:8c:1b:27:6b:8e:3b:73:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 8 05:00:00 2022 GMT
Not After : Mar 15 04:00:00 2022 GMT
Subject: CN=f4cad2d9-5c8a-4c32-883b-ead1f434ddbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:88:0c:fd:57:0f:ac:63:f4:37:75:dc:87:fa:
75:14:1b:8f:22:60:c2:ae:ac:b5:69:23:39:90:0f:
f5:01:61:a4:9d:29:cf:40:db:f3:ea:85:35:b1:c1:
a3:a7:c8:ab:7d:56:1c:4a:e4:b6:18:56:c9:25:fc:
f1:48:02:95:3f:b8:bc:f6:70:76:9f:4e:52:9f:ff:
c1:b4:55:78:95:41:00:81:6a:65:13:fd:c8:19:24:
9c:7c:00:30:e4:af:e4:f7:36:13:f6:82:a9:bf:cd:
4f:3e:18:48:20:d5:18:32:7a:32:0a:b1:21:a1:fc:
84:a5:25:ee:5b:4e:17:e6:ae:cf:90:2a:1b:fb:8a:
98:e7:29:f8:c8:ad:a2:8f:41:39:0d:20:76:f4:0e:
56:fd:b7:32:d1:60:1c:85:e7:0b:0f:07:f0:39:d3:
45:85:0a:bb:9c:d4:90:3d:f3:eb:39:27:fd:73:63:
b5:e3:2b:a8:7b:7e:4c:ab:e1:a5:f9:bc:bc:9c:c8:
09:f5:32:b6:61:fa:58:8a:dc:20:81:ee:ab:2a:fe:
5c:ec:93:d8:f4:ad:c0:eb:52:fb:59:ac:cf:b1:d8:
a0:90:11:9c:3c:0d:de:07:b2:2d:c2:2e:8f:95:dd:
a0:48:eb:ed:ef:e2:16:10:39:4f:87:7b:f4:30:05:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EB:F3:43:96:5F:B9:D0:96:54:C2:54:D8:3A:99:BC:D6:8C:F7:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea60b4bf-141e-309e-9496-11f3fec7dda1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
138.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:5d:3e:09:2c:0b:d1:aa:ec:03:84:b4:44:86:24:64:a3:50:
2a:6e:83:28:39:2f:7b:66:08:87:52:06:7a:a3:31:db:16:99:
c3:a5:bc:be:da:49:3f:c0:1f:d6:ae:ed:be:00:d5:e9:ca:6f:
8f:23:cb:f0:f9:c8:4d:55:14:99:9f:b9:90:50:4b:4f:17:9e:
76:f8:49:7f:1d:c7:76:c9:a8:86:f3:8a:73:43:b3:9d:47:fd:
9d:78:2d:2e:6a:a8:87:3e:f8:eb:ea:61:11:69:48:75:e9:c4:
09:6a:d4:ce:69:ce:64:f4:f0:18:8c:46:31:0b:92:03:89:80:
b5:03:01:a5:d9:4f:65:35:31:d6:b5:70:e9:57:12:a8:bb:fd:
bb:8f:2e:1e:98:d8:a6:e4:62:28:0d:d3:40:36:51:72:41:08:
93:7f:6a:bf:19:49:8d:78:7e:79:8f:25:99:1b:d1:79:9a:21:
6c:a9:93:d6:6a:14:49:38:a2:76:e7:de:26:fd:e0:7f:48:cc:
d9:a0:ed:34:82:a5:3f:d0:2f:c3:9a:97:33:13:c6:af:0d:42:
8a:67:b2:55:5d:39:8f:1d:0e:f2:dc:93:c9:73:53:f7:3b:66:
d9:21:cf:51:b3:52:ca:d5:f7:06:ae:69:86:31:12:dc:8d:21:
53:99:37:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:35 2025 by rpki-client