Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/014f1ded-51f5-3e0c-b939-f9c9a949b3de.roa
File: 014f1ded-51f5-3e0c-b939-f9c9a949b3de.roa (raw, json)
Hash identifier: J50/mbnxb62hQHAg1RTZom63xLDtoLn6loyKJmcp18o=
Subject key identifier: 6D:EB:BA:81:C1:43:95:82:17:0E:D0:99:E8:FA:C4:52:30:01:92:4B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CEF3814F690680921C41BD0C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/014f1ded-51f5-3e0c-b939-f9c9a949b3de.roa
Signing time: Tue 15 Feb 2022 05:00:00 +0000
ROA not before: Tue 15 Feb 2022 05:00:00 +0000
ROA not after: Tue 22 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 130.101.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ef:38:14:f6:90:68:09:21:c4:1b:d0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 15 05:00:00 2022 GMT
Not After : Mar 22 04:00:00 2022 GMT
Subject: CN=964382e3-a52f-427c-a2d0-98110f24b51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:7e:d8:cd:b7:46:bd:69:3a:c5:e4:e7:c6:
38:fa:bd:7d:f1:f8:40:b8:94:01:c6:4a:c8:74:aa:
7a:c9:d4:3c:29:77:32:db:91:b3:7d:78:9c:a0:a0:
91:f4:e1:e0:02:dd:a9:c5:cf:de:2f:b5:9c:e0:8d:
dc:ac:e5:76:98:2a:54:e5:2f:70:75:6c:38:38:7b:
8d:0e:d3:c7:0b:1e:4b:c0:e5:04:03:36:3c:a0:fe:
33:ec:d9:09:7f:8a:38:18:e1:28:91:08:2f:77:4b:
9a:8d:0c:92:2f:0f:04:cd:98:de:cf:0b:cb:b9:01:
08:52:d2:69:5b:82:8d:2e:23:f8:bf:13:c5:49:e4:
c4:4e:19:af:95:06:2c:66:8c:b8:44:e1:d9:e1:60:
70:a3:2c:67:ad:7b:1f:72:29:75:ac:c2:43:ca:31:
29:3b:65:11:01:02:aa:08:52:5d:6a:e0:42:20:30:
48:9c:ac:a6:4f:2c:77:f1:70:76:e5:5b:5a:08:08:
80:02:c1:a8:7b:13:11:ed:1c:59:bc:40:80:be:9c:
69:00:2b:44:ad:60:b9:52:71:48:37:3f:b7:4f:58:
24:1c:d6:3e:ab:60:67:4c:43:21:3c:74:5c:5d:c0:
35:51:55:bc:5a:4b:52:b5:30:43:81:74:55:f0:b2:
16:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EB:BA:81:C1:43:95:82:17:0E:D0:99:E8:FA:C4:52:30:01:92:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/014f1ded-51f5-3e0c-b939-f9c9a949b3de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.101.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:aa:25:42:76:05:e5:af:7c:18:a0:59:7c:0f:60:51:f0:8b:
3a:38:86:47:62:64:22:40:b4:dd:70:89:bf:e9:fd:e3:1f:f7:
26:08:7c:50:41:b8:42:14:39:09:0f:20:75:ba:3e:ca:f3:46:
5c:7f:26:94:0e:c4:c0:16:63:32:d1:ea:eb:29:c6:3b:0c:d7:
9d:32:e9:5e:0e:23:e5:40:fe:bc:10:a8:af:32:ff:ca:cf:54:
1d:f4:c3:bb:91:47:35:37:28:39:a4:27:86:c5:cb:aa:df:96:
ec:2d:0c:3b:51:70:84:0a:bb:22:42:2c:45:77:6e:5f:14:16:
ea:2f:19:98:2b:32:9d:ec:72:3b:b7:07:80:4e:77:9c:0c:04:
77:76:7b:7c:1e:30:63:7b:19:24:e4:df:73:30:f3:71:1b:a9:
6a:1e:e7:2f:5d:af:3a:92:e6:f4:29:e8:0b:2a:03:fe:1f:46:
d0:bf:ce:a5:ac:34:2e:b1:4a:64:b5:69:c8:86:1a:56:29:34:
8e:db:e8:7e:a6:a8:2c:25:6c:1c:55:e8:0b:15:25:ac:32:13:
08:2a:ff:ae:cd:4d:d9:7d:08:6c:7d:6e:4a:80:a1:77:f4:9f:
c4:e3:33:e9:bc:a1:ca:a6:3d:cb:38:4a:a6:aa:ce:5d:56:46:
dd:7b:8c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:20:39 2025 by rpki-client