Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fc14d9d4-8e61-3c09-b550-c9279bb8898f.roa
File: fc14d9d4-8e61-3c09-b550-c9279bb8898f.roa (raw, json)
Hash identifier: 7IRz6A2NbNfRkJWmqZhuUJjcWIsQSaU9F7WjHb8FL4o=
Subject key identifier: 1C:EF:A3:A4:04:16:2C:0C:BB:A9:87:29:80:0C:07:52:BF:0A:DE:C1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E4561A3823FC6473E1B8A9500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fc14d9d4-8e61-3c09-b550-c9279bb8898f.roa
Signing time: Thu 16 Jun 2022 12:00:00 +0000
ROA not before: Thu 16 Jun 2022 12:00:00 +0000
ROA not after: Fri 22 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 137.114.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:45:61:a3:82:3f:c6:47:3e:1b:8a:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 16 12:00:00 2022 GMT
Not After : Jul 22 04:00:00 2022 GMT
Subject: CN=121e1093-c4ba-4742-bec0-e603488a5d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:48:21:9d:fc:05:22:cd:ee:35:f1:41:f6:31:
b7:46:9e:01:4c:a5:da:57:e1:09:d7:f8:e9:5f:3b:
86:52:d3:52:7b:cf:6a:2b:9b:9b:ae:7f:73:61:aa:
d0:a5:c7:aa:f4:97:40:8b:22:36:a1:d7:c9:2b:4a:
20:fa:ae:cf:f3:a6:ec:15:8a:b5:4c:de:44:46:fd:
73:32:7e:09:8d:8a:2f:30:3d:dc:02:53:86:2c:7c:
db:46:5f:3c:78:5b:e6:95:ab:4b:76:58:43:2e:d1:
a3:e8:ac:02:f8:1e:29:ea:57:ca:a5:b2:ff:54:59:
f2:b6:2a:c5:04:79:bd:43:1d:39:45:64:af:9a:57:
3e:9f:f4:e4:c2:8f:d6:9e:f4:31:52:52:aa:5b:af:
d8:63:ee:79:85:3f:0b:6c:59:6e:6f:97:96:70:bb:
13:29:0c:0d:d1:d4:69:39:ab:3f:a2:b2:52:e2:15:
44:6f:e3:0e:88:bc:0b:83:81:59:21:86:81:05:11:
80:e4:a9:71:41:fe:75:bd:7d:d5:46:a0:d3:59:1a:
b0:eb:57:f9:60:06:03:66:e0:ce:ca:7a:23:4b:b2:
9f:4f:78:9f:a9:12:ee:8a:fd:f6:a8:a5:6f:19:2f:
35:08:4f:0d:30:e8:5c:88:3b:c2:3e:1b:b5:0e:6f:
30:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EF:A3:A4:04:16:2C:0C:BB:A9:87:29:80:0C:07:52:BF:0A:DE:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fc14d9d4-8e61-3c09-b550-c9279bb8898f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
137.114.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:49:bd:0c:e4:ce:1d:0c:fd:81:ae:ef:4a:05:04:55:e0:e1:
bd:15:96:dd:8a:7a:33:ba:55:40:12:79:e2:8e:f5:fc:8d:62:
d4:a7:8f:38:1f:91:83:1f:78:9d:f7:10:68:a1:17:6b:1e:e0:
44:4f:fc:55:e2:b6:4c:eb:2b:95:5b:7c:0d:50:40:76:9e:b1:
6e:48:48:7a:27:78:0e:61:d7:1d:b0:5b:5c:2f:6d:22:58:74:
82:4e:1d:24:ee:a4:37:8d:bc:4e:d1:6f:d3:79:4e:3f:49:e3:
e5:7c:02:79:86:3e:ee:c3:76:01:25:3a:d0:db:20:71:53:c8:
82:9f:19:29:91:67:41:0f:04:d2:62:20:95:b3:7b:68:55:3e:
e5:00:a7:3f:c3:d4:4c:75:a6:53:be:90:77:05:18:77:5a:af:
f5:eb:ee:d7:e4:99:2e:e0:be:a8:6f:da:d3:c1:fd:9e:54:96:
9a:20:e1:19:9b:9e:e3:2c:04:f3:cf:e0:7f:67:79:50:1b:bd:
f5:9e:4f:58:0f:dd:e0:e1:d7:a3:6d:bd:80:89:6d:7c:2b:d0:
5f:0d:8c:f6:64:09:20:fd:cf:d7:4c:a5:18:43:a2:41:1b:cb:
2a:86:e0:86:85:98:fc:5c:2b:e7:ba:8a:65:3e:33:b9:9f:78:
02:0a:10:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:05:52 2025 by rpki-client