Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7c7cc60-2918-323b-9aab-4f65ac7c73de.roa
File: f7c7cc60-2918-323b-9aab-4f65ac7c73de.roa (raw, json)
Hash identifier: jxgFcmTdbDAHfv9C0pV4df5vWJ8uR7Jkxk/HDydiYBI=
Subject key identifier: 57:34:FD:C2:34:95:5A:FD:98:37:B0:99:0E:9D:0D:FB:53:95:1A:98
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840569E4E2DBC2E3C5088CF6C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7c7cc60-2918-323b-9aab-4f65ac7c73de.roa
Signing time: Fri 23 Dec 2022 12:00:00 +0000
ROA not before: Fri 23 Dec 2022 12:00:00 +0000
ROA not after: Sat 28 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 159.209.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:56:9e:4e:2d:bc:2e:3c:50:88:cf:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 23 12:00:00 2022 GMT
Not After : Jan 28 05:00:00 2023 GMT
Subject: CN=9d780987-eb98-4d8a-84eb-1a9e3134ade3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7b:77:c7:2f:8a:a0:5d:d6:02:ca:84:a2:4b:
9b:d9:56:4e:40:48:69:ee:c3:f0:9a:69:d8:c5:92:
73:4e:97:f4:a3:a3:87:1e:4a:dd:0c:36:0a:d4:e9:
d5:eb:d5:89:af:fa:8e:15:bc:d7:3d:25:cd:ab:d6:
3b:5e:21:26:af:54:7f:f9:f9:8e:09:e5:31:ed:4c:
19:8e:14:10:fb:27:83:75:6c:65:a4:df:9d:0b:d9:
80:ef:5b:fe:32:46:2e:b6:a4:03:8c:c4:91:dc:af:
d6:c7:7a:1e:46:8c:8f:6a:4a:e2:62:a1:cf:a9:d8:
da:3c:16:c0:f6:a6:69:ab:68:11:07:fa:78:2c:ce:
3b:7d:bd:8c:a0:80:97:c2:11:f6:61:0d:f1:4e:70:
22:5c:c7:b4:02:23:2e:12:22:e7:6f:8e:11:69:80:
87:2c:2d:fe:c1:3e:1a:f0:eb:6d:58:66:18:c1:46:
dd:73:31:28:fd:ce:92:2a:81:9b:25:c5:11:6b:cd:
0b:56:a9:12:1e:f4:70:7f:37:df:c0:7f:e9:c0:bb:
f0:e2:5a:43:8a:a2:eb:7b:68:b3:2f:ac:09:b8:f8:
32:1d:bb:de:f2:0f:05:04:46:91:1b:66:85:4f:6b:
2e:fd:bf:d7:0b:1d:2e:61:06:da:bb:31:50:e1:38:
9b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:34:FD:C2:34:95:5A:FD:98:37:B0:99:0E:9D:0D:FB:53:95:1A:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7c7cc60-2918-323b-9aab-4f65ac7c73de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
159.209.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:05:ad:9f:96:40:14:cd:6c:e0:94:f4:e6:06:72:31:ab:b2:
16:08:9a:1e:7f:6a:0a:59:5b:c7:90:45:8a:81:13:f4:89:2c:
07:39:0e:f8:b7:e5:14:d9:e4:3c:04:d6:60:d3:1f:03:f1:ec:
10:02:c4:26:d2:fe:b9:40:12:bb:12:6e:60:5e:6b:94:ee:13:
50:6c:19:48:62:55:56:be:71:94:91:18:6a:39:56:24:93:66:
22:04:33:0e:67:af:23:32:83:2e:8b:f6:2d:25:d4:9f:44:45:
8e:79:40:30:7d:59:d8:71:42:b9:fa:72:46:0e:57:a9:f1:c3:
ef:92:2e:4e:97:67:de:bb:5b:d6:9b:38:77:27:3d:62:a1:ad:
a9:15:33:da:e5:83:12:65:f2:6a:57:52:50:a9:fe:94:2c:e1:
c4:f7:27:79:dd:30:13:19:a6:24:bc:93:1c:f0:eb:f4:7e:83:
74:82:97:20:e8:ab:7c:33:e1:76:f2:bb:f6:3f:3f:51:09:86:
72:7b:c1:f7:3b:c8:72:75:85:62:d1:e0:f2:d5:d1:95:5c:e3:
d1:51:96:07:68:66:21:c0:e3:16:4e:78:ea:89:c5:98:8f:77:
a0:ac:57:ad:c9:db:aa:44:83:1e:05:d4:06:02:52:70:85:1f:
f6:31:da:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:17:35 2025 by rpki-client