Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02ae94ce-6c89-3121-a858-be3945591903.roa
File: 02ae94ce-6c89-3121-a858-be3945591903.roa (raw, json)
Hash identifier: BmGj73q0ofdBvo3UhBtfHggJ6iK+ahYnuEnP6cdmPl8=
Subject key identifier: A6:A9:19:E1:AA:0C:E4:99:6E:B5:32:60:F5:4F:B3:13:9F:C9:BD:9F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0BA1AC42D5CBA443246E3C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02ae94ce-6c89-3121-a858-be3945591903.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 47.128.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:a1:ac:42:d5:cb:a4:43:24:6e:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=b6274805-5646-4d06-b985-a537b798e0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:e5:4e:85:a0:79:d9:91:f5:5e:e0:66:7d:
0e:41:1a:c8:85:c1:b3:1d:05:1c:29:6d:25:6c:55:
7f:40:89:df:c3:ec:4f:c8:49:19:16:2a:38:52:77:
65:a0:4e:07:15:22:8c:86:50:30:32:fc:33:a6:55:
f1:a4:5e:c5:6d:06:3c:df:b6:a8:a7:2a:de:2b:ea:
0c:91:90:b1:7e:c8:5e:52:66:e5:ec:a7:bc:a2:9a:
ed:05:7b:4a:29:3e:3e:a3:f0:15:18:95:e6:67:fe:
06:58:7e:ae:24:19:80:d4:fa:73:4e:66:d6:1e:98:
3f:a0:02:5c:8b:4a:a2:fd:a8:ed:ad:0f:ae:eb:93:
b0:13:42:19:f4:d8:2c:56:69:77:4a:5b:ac:24:9f:
dc:87:16:ba:cf:a9:26:9a:3e:78:54:0e:06:26:93:
22:ed:1a:66:c5:27:e2:c6:34:a9:4f:4e:fc:ed:0f:
b6:c5:28:5a:37:59:9f:1c:ef:51:fd:f1:8c:b0:f3:
f4:9b:e3:bf:78:c0:51:a9:28:5e:f4:7a:94:e4:31:
af:6e:d4:0b:f3:6e:f9:aa:ae:94:32:3f:54:1f:74:
e2:c3:bd:2b:b1:67:08:b0:95:57:d4:22:92:35:6d:
f2:84:2c:74:51:71:46:b8:8e:1e:97:4a:10:9e:5f:
f3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A9:19:E1:AA:0C:E4:99:6E:B5:32:60:F5:4F:B3:13:9F:C9:BD:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02ae94ce-6c89-3121-a858-be3945591903.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
47.128.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:34:e4:9c:69:5d:c8:15:02:c9:77:31:a0:54:dc:56:b0:60:
0c:a8:31:37:12:d9:e9:53:1b:97:e8:ba:3b:26:af:4e:0d:e6:
ff:2b:86:61:d9:2c:93:14:1e:08:2e:3c:c3:c7:d3:f9:1d:df:
e3:3f:b7:5a:d2:6d:75:e3:c1:76:3a:46:b0:a3:33:99:d7:01:
84:ac:c0:d8:54:bf:c7:d1:8d:70:c6:db:ef:cd:b3:47:45:0b:
b1:a5:74:49:94:2b:76:d5:e7:7e:2d:a1:3f:55:19:55:92:4d:
d8:e7:8c:cc:7a:64:4d:d8:74:fa:08:15:8a:1d:86:72:b0:c5:
20:9a:c4:19:8e:b3:e6:dc:ef:a2:44:49:0e:4a:0d:18:d6:89:
4a:cb:c1:7f:f8:1f:3d:5a:44:e1:14:c5:60:47:c1:69:62:71:
91:d7:90:bb:97:3d:6c:c2:df:b5:3d:08:3e:f0:a5:6c:18:9e:
e2:d4:21:82:61:37:da:c7:87:66:38:df:38:de:31:77:1b:a0:
bd:d2:b7:5b:9f:12:40:db:92:72:d7:fb:b6:b0:78:c4:3f:85:
31:29:5f:ea:a3:96:0a:df:fd:4c:b6:23:da:6c:1c:81:a1:bd:
80:ce:77:bb:86:8a:b0:55:0d:29:b6:8c:fa:6b:82:b1:c2:10:
4b:75:b4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:35:16 2025 by rpki-client