Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7620844-aa47-3fda-9ea2-0f0c2ae9c343.roa
File: f7620844-aa47-3fda-9ea2-0f0c2ae9c343.roa (raw, json)
Hash identifier: S8AedZMr0Lr9PhDh8aJMF9C2KMa+OI20AFvmKd3Uhn8=
Subject key identifier: 9F:CE:5C:65:E3:F0:8D:32:06:D5:2A:F1:B7:86:C7:88:3A:2A:D8:2B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E32AEBF75632CE85BC5AD2700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7620844-aa47-3fda-9ea2-0f0c2ae9c343.roa
Signing time: Thu 09 Jun 2022 12:00:00 +0000
ROA not before: Thu 09 Jun 2022 12:00:00 +0000
ROA not after: Fri 15 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 151.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:32:ae:bf:75:63:2c:e8:5b:c5:ad:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 9 12:00:00 2022 GMT
Not After : Jul 15 04:00:00 2022 GMT
Subject: CN=c6887426-53d8-48c5-bf6f-758ab23ed6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:dc:04:7e:26:ef:54:cd:e0:7b:9a:a8:23:
3c:ae:a9:45:60:30:46:0e:ac:a2:b3:ec:e1:0b:69:
98:ef:92:c3:27:c4:1a:f0:06:6e:fb:ee:e8:83:b5:
5b:c4:83:fa:3f:95:18:02:da:d5:4c:de:ab:d0:89:
21:98:e8:26:c3:7c:98:14:2f:5c:1a:f6:d5:ff:b2:
c2:cf:d0:df:09:d3:ce:b8:0f:6a:cd:23:76:27:bf:
c6:56:f1:01:e9:c2:3f:cd:09:53:7f:58:da:b4:06:
06:bd:9b:fe:ba:30:56:59:83:0b:dc:ce:be:2f:b7:
ee:6a:20:e6:bf:04:31:ab:3e:18:c2:98:cc:bc:77:
66:1a:f1:5b:af:9c:12:30:b1:f2:80:1e:ef:db:1a:
ee:98:ab:7c:02:ec:68:07:c5:55:9f:5f:ab:0b:31:
ca:8a:45:15:c2:e0:99:d7:90:2d:58:c7:1b:98:4c:
39:39:db:6d:6d:f8:71:42:c1:e0:3e:ea:a9:93:2a:
3f:ec:c3:ef:e8:78:db:f2:6a:f5:3c:db:ea:fd:76:
09:df:fa:3d:24:41:bd:1f:12:02:06:f5:6f:6d:0a:
b5:f9:68:bf:60:aa:f2:de:63:2d:76:26:14:08:18:
32:10:b0:62:5a:be:3b:72:52:50:c3:19:44:cd:01:
ab:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CE:5C:65:E3:F0:8D:32:06:D5:2A:F1:B7:86:C7:88:3A:2A:D8:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7620844-aa47-3fda-9ea2-0f0c2ae9c343.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
151.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:0a:ae:08:b2:9a:35:96:16:24:d1:69:9d:5f:85:0a:3d:41:
e0:e1:19:c1:2a:31:4d:ed:b9:be:ef:a5:80:b1:84:b9:5b:29:
d0:d0:6d:0e:70:8a:df:b5:61:22:f3:d9:70:35:2a:bb:62:1e:
44:ff:94:15:3f:24:1d:e2:4d:a6:ad:12:e2:11:c2:ae:1e:1f:
7c:ca:65:68:3a:fa:64:fe:9e:bd:20:84:82:07:76:08:d7:e1:
35:ae:66:96:c3:8d:36:ae:43:5e:c4:65:e1:17:b5:53:27:7f:
4a:da:2d:ec:f2:e7:69:cd:9b:3f:2a:fc:dd:86:4b:6b:3a:bd:
f3:0c:e0:3b:e6:e4:9d:1b:eb:e5:cd:79:7d:e6:97:82:c5:91:
70:56:2d:eb:1f:0c:88:4a:ee:6a:f1:a8:72:e0:02:f8:90:18:
1a:99:2f:22:58:e2:af:d9:7f:04:b0:50:71:a1:03:e0:6b:e2:
82:d2:20:e3:ef:b2:5f:20:00:61:6d:f4:8a:08:b0:d4:37:54:
dd:08:17:26:1f:06:2b:fb:f5:33:9d:71:36:fd:28:57:89:9f:
0f:8a:97:4e:cc:53:c5:5d:52:9c:ae:c9:f3:aa:4c:2c:00:f4:
4c:f3:5a:ff:f7:4a:bb:01:3e:05:f4:5d:f8:61:92:3b:f1:e7:
e1:ae:c3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:53 2025 by rpki-client