Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f0ea6e5f-9274-3abf-8b9f-402528fc962a.roa
File: f0ea6e5f-9274-3abf-8b9f-402528fc962a.roa (raw, json)
Hash identifier: Uk7fypsC8pEd2bjOjpHweQojFcsy94qy2DkDzGy4GfM=
Subject key identifier: 90:25:AE:84:1D:DD:DA:BE:9C:50:C0:54:E6:7D:6D:BA:56:C3:52:E4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840A4B33ABF7E0166B2D23090C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f0ea6e5f-9274-3abf-8b9f-402528fc962a.roa
Signing time: Fri 20 Jan 2023 12:00:00 +0000
ROA not before: Fri 20 Jan 2023 12:00:00 +0000
ROA not after: Sat 25 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 151.162.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:a4:b3:3a:bf:7e:01:66:b2:d2:30:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 20 12:00:00 2023 GMT
Not After : Feb 25 05:00:00 2023 GMT
Subject: CN=bf6625c4-0c47-4dea-92c7-ab805ddf5c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0b:9b:d4:ab:a2:c0:1f:b3:bd:4e:03:0f:95:
60:fd:45:7b:37:3f:f6:ec:38:d2:ac:66:84:e8:fb:
7c:e3:aa:9d:b8:9f:3a:bb:e1:eb:f1:2f:6d:98:2b:
73:8a:28:23:bd:da:ce:27:52:ac:ec:28:26:8b:0c:
cb:9a:08:fb:50:85:00:96:0a:41:a0:6e:2f:22:92:
60:9c:a5:7e:23:f4:2e:89:81:42:a4:a8:d8:d9:43:
d1:41:9b:ab:61:1c:6b:a5:ca:d3:26:a9:c1:ac:d5:
d2:0c:c2:52:38:f2:dc:0b:d0:92:27:1c:43:98:4d:
d4:9b:9a:40:fe:2a:e4:63:7e:33:2c:f2:2e:bc:cd:
73:30:d4:15:ea:26:78:c6:58:2f:64:c4:99:83:95:
93:9d:7a:7e:f7:a6:5f:42:fb:c5:c8:4d:99:2a:fa:
78:13:dd:53:ad:ba:af:87:78:e6:f7:9d:dc:05:c1:
e3:16:85:19:3e:ea:a4:e5:1d:c8:52:e3:72:da:9e:
b5:03:61:a5:2e:57:ae:4d:50:37:d8:bc:01:4c:2c:
48:c5:2e:3f:a4:2c:a8:dc:5e:92:58:47:52:bc:af:
8d:c8:2c:e6:01:85:77:ea:bb:67:e5:bb:f2:7c:23:
a8:01:90:23:ef:ca:6e:03:41:75:a1:1a:f0:fa:15:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:25:AE:84:1D:DD:DA:BE:9C:50:C0:54:E6:7D:6D:BA:56:C3:52:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f0ea6e5f-9274-3abf-8b9f-402528fc962a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
151.162.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:94:b4:3a:1e:eb:0b:13:fc:c0:52:ed:a8:5f:d1:80:ee:47:
a3:f4:5f:54:53:e4:11:e0:06:dd:7d:e7:64:6b:41:03:68:dd:
85:91:1a:8d:e5:0f:a8:33:47:85:ff:48:77:f5:d2:0d:c4:79:
31:df:2e:57:6e:7b:44:9b:91:93:20:d9:d8:82:74:5f:99:00:
3e:c7:ae:e0:b8:e8:3d:56:90:a9:52:53:1c:e6:e7:c8:b5:fd:
78:c8:aa:2c:bb:05:43:9a:36:e1:69:42:ca:35:9b:84:33:52:
ff:f3:11:a9:03:dd:56:cd:25:69:1b:5e:d4:9c:c2:2c:83:df:
db:08:2f:0e:8a:ad:81:56:2e:2d:c6:f0:b3:00:ef:5b:71:9f:
ef:9c:9d:b9:cc:a7:c1:b4:f3:ce:a9:5f:f4:94:b0:e8:33:fc:
c9:c2:9c:d1:e2:49:8c:7b:ef:67:81:05:14:a0:45:6c:a0:86:
71:13:01:e0:ec:e2:3c:15:9b:ff:e6:f5:d0:95:a0:d8:8a:28:
60:c3:e9:5d:8f:45:ee:86:37:0e:29:35:7e:18:23:0d:62:8b:
f7:db:68:88:b0:b6:35:f2:77:50:b0:39:c0:2a:91:96:45:f6:
2b:5a:c3:1b:71:b1:08:3b:9d:04:5d:2b:09:81:9f:d2:84:9f:
c8:2d:8e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:43:19 2025 by rpki-client