Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ed29ff8e-ec90-33f1-9b20-15ef41f4698c.roa
File: ed29ff8e-ec90-33f1-9b20-15ef41f4698c.roa (raw, json)
Hash identifier: pYZZVeV9RWHIX/4dX2ab9Jt+osIJe6wXYSIJWoBxoKE=
Subject key identifier: FB:C2:B2:7F:D6:60:E6:7E:36:23:09:F4:A4:15:92:44:95:1B:C7:2B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5B641547192350E9ACC51780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ed29ff8e-ec90-33f1-9b20-15ef41f4698c.roa
Signing time: Sat 24 Sep 2022 12:00:00 +0000
ROA not before: Sat 24 Sep 2022 12:00:00 +0000
ROA not after: Sun 30 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 144.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5b:64:15:47:19:23:50:e9:ac:c5:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 24 12:00:00 2022 GMT
Not After : Oct 30 04:00:00 2022 GMT
Subject: CN=a2ddc409-7ed9-45a3-aa37-554f21e08a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ac:22:a0:04:77:73:06:bc:c3:bb:bf:a5:cd:
53:d8:6d:6b:c4:19:74:ed:b6:d6:1e:d8:2a:18:e8:
82:6a:0d:7c:8c:a9:37:df:5c:28:2c:40:24:08:12:
55:21:1a:bc:cd:8d:9d:5c:8a:13:43:31:dd:11:be:
20:91:ab:15:f6:08:b4:1b:e0:e8:c2:92:49:98:e8:
3c:af:e8:43:a9:f7:7d:34:ba:47:56:dc:73:ee:2c:
99:70:55:c3:ec:09:f2:d1:9a:d6:b3:89:9c:64:47:
4b:e0:df:7f:27:70:74:51:0e:65:7a:c0:93:64:f5:
49:a5:10:36:9d:0b:8d:62:ea:0f:89:c1:3d:a3:f5:
24:ea:4a:09:c6:64:46:d0:ca:20:1d:e7:69:9e:5a:
2d:58:35:78:ac:30:33:f7:11:99:c8:8e:07:a4:24:
13:83:48:9c:5f:84:ac:02:46:47:d1:4e:5a:87:4c:
3a:1f:3f:77:56:f6:56:38:d8:0d:5f:6b:fe:f8:0d:
f8:d8:e3:ac:f4:b3:65:df:f2:e5:24:55:a9:5f:ec:
6a:f2:e1:5d:2f:7c:56:85:a5:27:61:c2:3d:56:db:
54:68:f1:e0:a9:bc:c8:60:9e:82:f8:22:17:05:b1:
04:24:aa:88:07:ea:1c:2e:b9:74:df:2d:43:59:b0:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C2:B2:7F:D6:60:E6:7E:36:23:09:F4:A4:15:92:44:95:1B:C7:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ed29ff8e-ec90-33f1-9b20-15ef41f4698c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:94:eb:d0:90:46:69:5d:f4:b0:6f:c5:77:c6:82:7c:14:6a:
f0:5e:e5:e5:71:06:70:8c:b3:9c:57:6b:bb:bd:32:5f:2c:bc:
ac:97:2a:ca:ee:0e:b0:ba:57:b6:7d:52:c2:b4:dd:80:71:7e:
5d:42:d3:f9:7c:da:be:b8:28:4e:d2:4d:ef:db:1e:88:ab:5e:
cd:4a:ad:a0:e9:13:ea:f4:b3:2d:06:a1:7c:a1:c0:ca:f0:0e:
07:58:b4:eb:c8:77:c1:2d:da:f8:3f:b9:a2:4b:b3:4d:23:f8:
df:55:94:bf:91:32:55:5f:c6:61:bf:a6:89:73:d4:9c:da:ae:
7d:11:08:9d:d9:a7:04:8f:20:82:1f:e8:ec:cc:70:ca:97:31:
10:2f:22:09:57:18:35:cb:db:32:f4:a0:e4:be:f8:6f:3f:9d:
7c:a9:a0:bf:ac:43:28:f5:10:42:0b:9a:b2:d1:1f:e3:6d:a8:
a0:89:09:89:4f:b8:7e:53:fc:9f:1a:b9:e4:78:21:12:f3:28:
46:e8:9b:63:13:99:c1:fd:19:ab:ea:0a:f2:09:72:7b:3c:c9:
a6:a0:30:30:6a:c1:7e:4c:55:d8:39:16:f6:9d:6f:28:ab:64:
b6:05:e8:00:61:3c:ed:8d:1b:87:78:eb:0b:cc:c8:51:ee:9e:
ec:e6:0c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:58:34 2025 by rpki-client