Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f26ac28a-bf96-3b21-a801-48cb299232dc.roa
File: f26ac28a-bf96-3b21-a801-48cb299232dc.roa (raw, json)
Hash identifier: HtIargnerrHEARS8B57B5VrVS7IZrM88zBckqnkVdGY=
Subject key identifier: D8:AA:CA:D3:50:00:A2:37:7A:2F:3F:A3:05:E4:54:6F:48:12:FC:9D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FC572CC82F1EA6E8E66B6E940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f26ac28a-bf96-3b21-a801-48cb299232dc.roa
Signing time: Tue 01 Nov 2022 12:00:00 +0000
ROA not before: Tue 01 Nov 2022 12:00:00 +0000
ROA not after: Wed 07 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 155.38.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c5:72:cc:82:f1:ea:6e:8e:66:b6:e9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 1 12:00:00 2022 GMT
Not After : Dec 7 05:00:00 2022 GMT
Subject: CN=6abbe522-db34-4028-9f9b-25df8852e986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:75:02:1c:cb:23:0a:e4:ab:a8:3c:b6:c2:
67:07:4e:6f:50:cf:04:fe:9c:4e:40:11:43:f3:1c:
a5:3a:c8:11:51:b8:a5:54:41:b5:eb:79:80:86:ce:
cf:0a:42:85:a5:94:38:c8:8d:e8:f6:aa:fb:2f:c6:
f7:f7:13:46:ee:a7:bc:e2:7d:19:f2:b1:a9:c9:25:
bf:13:86:cc:7b:a2:4f:99:71:8e:ca:c2:af:8e:43:
5b:0b:4d:1c:7a:ff:71:ef:dd:e0:09:27:8a:8b:fc:
92:33:52:6a:8c:85:45:56:2f:13:31:41:e5:dc:0d:
f8:70:ad:c9:37:ee:4c:68:1b:f9:7e:b3:6e:eb:8e:
62:02:3e:19:0b:1d:36:c5:d9:40:aa:19:eb:60:77:
5b:6e:73:a4:8c:9c:b3:ea:82:cb:da:a5:c6:de:64:
53:4e:43:cd:c0:a6:0f:02:30:1b:a5:e1:11:85:6b:
a8:59:c1:15:0b:d1:55:17:db:b6:9a:99:08:87:79:
32:74:fb:76:ea:68:e6:7b:3c:33:6a:f2:3b:82:3c:
51:61:45:4b:0d:50:26:e0:42:da:09:d9:fb:ca:30:
67:82:70:90:36:1e:1e:97:7b:63:23:bc:cf:75:06:
99:ae:a8:2e:27:20:f6:0a:a6:6a:79:a0:a1:cf:e7:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AA:CA:D3:50:00:A2:37:7A:2F:3F:A3:05:E4:54:6F:48:12:FC:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f26ac28a-bf96-3b21-a801-48cb299232dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:12:0f:a4:1f:4d:31:40:97:f0:75:74:b8:4a:be:61:5a:10:
25:ee:56:5b:8d:60:fb:ec:2c:bd:d6:e4:b5:9a:65:98:0b:7b:
a8:d7:c4:bb:fe:78:fa:3f:98:93:c1:7b:f6:54:3a:65:bc:23:
0a:ef:5d:2b:c9:70:47:fa:10:85:29:d4:5f:15:b3:dd:88:19:
9f:41:95:e0:d1:a2:6c:fe:85:8f:91:b4:82:54:40:69:7c:16:
df:88:67:d3:8f:ad:5f:9f:73:10:95:ad:df:d7:16:7d:07:5e:
ff:e1:91:f0:0d:94:2b:d3:27:8a:cf:b0:7e:58:0f:0b:a2:d2:
4c:99:98:a7:42:97:19:30:4b:bf:d7:5e:11:6b:dd:18:c3:c9:
de:23:1a:39:d8:2d:25:4a:40:2f:d6:1a:f6:73:1e:3b:97:59:
d3:79:6b:e0:49:d6:6f:b8:f9:de:37:ea:2b:1f:83:f0:da:d7:
ae:f6:bf:fb:c7:12:45:44:fa:2a:09:11:8d:32:6d:cc:6e:1f:
3f:ca:ca:6d:8b:72:65:c6:b4:ae:fd:52:71:29:93:19:eb:d2:
4e:2a:d6:a2:11:5e:2c:e7:42:32:b4:00:03:53:5f:d2:f1:57:
d2:58:7f:fc:5f:fd:6b:f4:00:b7:ce:8f:2f:65:1f:74:1c:81:
36:74:7d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:56:23 2025 by rpki-client