Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea787d7d-1172-3469-8798-5f7cbd8d4921.roa
File: ea787d7d-1172-3469-8798-5f7cbd8d4921.roa (raw, json)
Hash identifier: 6mQegFnTRm6uyen2xxNAW0eniXx0seyM95l7ZN3EzYo=
Subject key identifier: 48:1B:D5:C1:4B:4F:60:B7:00:D4:73:F7:87:48:1E:71:E7:BD:CB:FC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBE3F760AAE52E1950DD10780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea787d7d-1172-3469-8798-5f7cbd8d4921.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 137.114.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:be:3f:76:0a:ae:52:e1:95:0d:d1:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=78e11bc0-1301-4b9c-af15-6336326d794b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ba:43:b8:95:06:fc:e6:1c:b1:28:1c:ca:10:
85:4a:1a:2d:59:58:9c:18:4d:d7:e0:a0:b2:c0:6c:
49:ff:ca:4a:ad:e8:e8:8e:8f:79:10:43:fd:99:ee:
67:d1:a7:cb:0f:19:73:78:61:7d:29:a8:a8:aa:fb:
a0:87:f8:66:84:59:35:f7:e8:ac:52:17:bd:0a:5c:
b0:48:31:be:d1:3a:f8:52:69:95:ab:15:d7:9d:b8:
7f:c4:42:06:95:f1:17:1b:cd:87:97:d4:5b:b2:a4:
4e:b9:27:68:87:58:fb:ff:59:49:cc:f7:c6:b0:65:
57:05:5e:aa:8e:30:d1:4c:93:70:64:77:6d:8d:64:
10:d8:d7:5c:43:e1:cd:48:10:87:ae:e4:49:7f:6c:
b5:8c:fb:c9:8c:75:e3:2b:2f:b9:2a:8b:3b:f5:f6:
bd:4e:19:fd:02:bc:cb:d5:f9:a0:b1:f2:4b:5a:af:
b8:dc:2b:30:f1:8e:7b:41:99:8d:07:7e:55:e1:ec:
e4:eb:00:28:08:41:a4:61:99:c3:a9:f1:4f:a8:3e:
bf:09:06:18:cb:34:2e:54:51:e0:10:f9:b7:3e:fc:
31:1c:00:b4:30:7c:12:d5:00:f5:53:6a:02:f3:f5:
35:70:7b:77:86:a1:3c:e2:44:f0:29:73:da:e2:16:
c1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1B:D5:C1:4B:4F:60:B7:00:D4:73:F7:87:48:1E:71:E7:BD:CB:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea787d7d-1172-3469-8798-5f7cbd8d4921.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
137.114.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:88:33:ea:7d:8b:ed:56:eb:60:d0:cf:db:38:bc:45:d4:cb:
99:05:b6:32:ea:3a:31:4e:ca:8b:0c:57:1b:4c:b2:38:d8:3b:
9d:ca:4a:33:f8:a3:78:6c:81:b4:ce:08:72:c1:87:3c:64:23:
a0:2b:0c:f9:cf:73:8d:62:ce:b3:3d:94:bb:e5:6e:a9:2b:74:
fb:ec:1c:4d:76:cb:53:78:b6:0f:df:46:83:fe:d8:49:fb:2c:
96:b5:02:38:c0:50:08:b4:77:20:9b:d7:3c:22:14:30:20:c0:
0b:99:1b:c7:1c:49:af:a0:ad:2a:34:51:7e:59:1f:14:45:46:
99:a7:d4:47:63:f0:79:0f:6d:dd:62:43:63:4f:32:c6:fe:fc:
b4:7d:3c:a3:2d:bc:6e:1a:e5:5c:cf:2b:3c:1b:cb:81:bc:5a:
d2:e3:58:b4:bc:36:50:cf:d5:55:c8:04:8b:d5:06:01:01:ee:
33:d5:46:33:b8:a1:54:8e:b3:12:d7:05:64:2e:d5:8a:3f:63:
1a:fe:fb:8b:50:83:d8:33:02:88:4e:b5:18:2f:95:3c:1c:0d:
73:85:2e:3f:3a:44:f8:ef:a2:57:00:f0:42:e7:94:f4:47:65:
e6:84:89:10:61:f8:b8:97:d0:b8:6d:b5:13:03:b1:34:27:d3:
7b:e7:8d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:34:33 2025 by rpki-client