Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f92b98ea-1d3d-3975-bc74-25f5d8655591.roa
File: f92b98ea-1d3d-3975-bc74-25f5d8655591.roa (raw, json)
Hash identifier: zYBOko1grHPbpmk7DCwKgbQzF8GIA+lWg9iR4lnjNUU=
Subject key identifier: C0:73:7A:12:33:E2:DE:4D:49:65:FF:CA:03:2D:30:59:97:74:48:4B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1E9DCE95E4FB29FA15865900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f92b98ea-1d3d-3975-bc74-25f5d8655591.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 144.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1e:9d:ce:95:e4:fb:29:fa:15:86:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=6c89f53e-c994-46f8-9197-cb41d9b0c0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:79:48:f5:08:43:eb:c5:21:e5:5a:83:dd:
8c:f7:02:0d:a4:93:37:c5:50:dc:e7:a2:13:0e:f8:
ab:03:63:03:e3:ca:7c:73:42:a6:0a:62:24:81:f5:
ac:27:b4:90:03:7f:40:b2:c2:c1:cb:34:a0:78:14:
3d:7b:25:70:2e:c6:80:bf:3a:60:89:34:12:3a:b3:
d8:74:19:7a:cf:42:75:3e:28:ab:3c:d8:0e:fe:a4:
8f:76:95:41:85:0d:0a:ec:e6:a0:2b:7f:41:e6:c8:
1f:54:c7:bc:2e:93:b9:cd:a9:b5:b0:fd:6e:e1:0a:
92:fe:bb:19:28:bc:96:dc:d1:e9:5d:c2:3e:71:58:
63:86:f7:34:e2:c7:26:4f:8c:45:1e:0c:c5:3a:ac:
75:31:e4:de:b2:4d:3d:fd:6c:a8:43:b1:4b:a3:be:
22:e9:67:c9:16:5c:de:0c:b3:2b:42:c9:ab:a6:22:
f3:4d:17:f4:4d:93:62:cd:6e:bd:55:09:e9:e4:e3:
4c:9f:bb:be:26:13:91:d3:a9:f9:ca:d5:ed:5a:4f:
e9:a8:83:24:83:73:84:d9:34:f2:2b:98:41:72:03:
cc:fd:e0:8a:80:46:cd:ff:46:c5:72:34:b8:b6:70:
a4:fb:84:da:d7:18:b8:47:1b:22:fe:65:48:c8:c0:
d5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:73:7A:12:33:E2:DE:4D:49:65:FF:CA:03:2D:30:59:97:74:48:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f92b98ea-1d3d-3975-bc74-25f5d8655591.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:df:48:f1:2e:4b:06:03:40:3f:25:58:02:d4:70:d0:d7:57:
7f:19:7b:da:48:3a:27:39:b1:e9:94:91:fc:70:ac:95:7c:70:
46:91:c1:b4:9d:07:b9:8a:0b:fe:7d:59:d5:7a:76:79:a4:4c:
fa:ff:6b:e4:63:d4:53:9f:dd:1b:d6:75:ed:a6:72:bf:15:37:
30:07:d6:08:86:05:ea:db:ee:ae:dd:3e:89:f3:4e:1b:d3:e6:
48:2d:15:05:1d:26:fd:5d:86:4b:fe:3f:ce:d2:dc:73:ac:7c:
8a:d3:7c:62:7b:70:d3:19:a6:9e:cb:dd:ba:0b:38:8a:13:7b:
f0:f4:8b:65:f9:f5:ec:2b:84:f8:99:d2:63:bd:2d:3e:f2:0a:
7c:7b:a0:1f:38:8f:62:2b:36:cd:27:6d:7c:38:75:95:ff:0b:
c9:e9:d1:ae:0f:a3:9f:45:40:f4:a3:10:4a:c8:48:8e:01:ac:
4b:25:eb:c4:2d:42:0d:31:09:0b:64:50:39:76:36:d6:ea:2a:
a3:e6:03:22:94:48:d9:fa:42:5a:e2:9b:03:6f:83:45:00:5e:
c7:19:37:78:17:93:7f:05:10:d2:89:c1:e4:c6:e1:23:64:77:
ee:91:19:ec:e4:b7:d1:1a:25:2d:da:7b:26:67:33:41:65:a0:
d2:e2:c4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:32:17 2025 by rpki-client