Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/071a1863-0563-3bc2-b85c-7b7b06c784e2.roa
File: 071a1863-0563-3bc2-b85c-7b7b06c784e2.roa (raw, json)
Hash identifier: 37X/YSptZfeFL9eVroEv+WNbbh9ORJy9I2HKcibbeBM=
Subject key identifier: 7A:08:0A:A2:86:38:C6:88:FC:83:03:EC:13:F4:59:C4:B2:FC:31:D6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE4935E24FBD700C2483ECB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/071a1863-0563-3bc2-b85c-7b7b06c784e2.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.124.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:93:5e:24:fb:d7:00:c2:48:3e:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=b834964b-3055-4218-872c-7cc4a9ade0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a6:ce:9f:41:06:9e:a7:70:c8:4f:a1:f7:74:
85:d2:74:e0:65:44:7d:d5:f8:c0:cc:b2:f9:8d:98:
66:3a:10:94:7b:8c:05:26:8d:2b:91:e6:3f:01:5e:
e5:cf:36:64:0d:19:03:55:e9:15:00:c6:f7:3a:06:
88:73:78:c6:d1:0e:2d:ec:81:c1:1e:a7:78:c1:91:
7b:28:4d:97:29:58:7d:01:ec:05:25:95:8c:9f:44:
c6:7c:7f:76:55:8c:d3:4d:c3:2c:b7:1b:c8:d3:b8:
d6:19:c8:b7:d3:5a:2c:04:8d:6d:e4:13:94:c1:30:
a1:4c:00:3e:fa:9d:e7:b7:8e:51:88:5f:b0:4a:03:
d6:91:f9:1e:01:53:b6:2d:6c:1c:5d:49:bd:06:7f:
44:15:d0:f9:29:78:6f:01:e1:f5:3d:65:27:af:e8:
e9:4e:b1:0b:3f:e4:2b:6c:2e:70:82:cf:0d:1b:c1:
75:8c:2f:d6:d5:13:ed:b1:2f:66:e2:84:e2:3e:7f:
98:8c:dc:c7:6a:ac:a5:56:06:7e:04:fb:a1:07:ef:
77:55:ee:54:48:da:41:d4:81:38:fe:aa:dc:c4:f5:
87:d4:5d:92:75:c8:2f:2e:f3:eb:35:0f:51:43:a5:
48:f7:50:fb:e8:57:0e:1a:a3:df:04:99:c8:9a:f3:
b4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:08:0A:A2:86:38:C6:88:FC:83:03:EC:13:F4:59:C4:B2:FC:31:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/071a1863-0563-3bc2-b85c-7b7b06c784e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.124.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:28:44:cc:07:69:84:bf:c2:e7:d9:a4:ce:81:11:6d:8b:ad:
77:b9:93:b6:eb:ae:89:00:ea:27:e1:43:33:8e:bc:0e:e6:12:
d5:c2:47:20:63:52:e2:3a:1f:ea:0a:ba:a9:77:54:a3:42:89:
c8:77:93:1a:48:15:d5:13:98:45:86:46:90:a1:41:a5:a0:62:
19:1f:cd:b0:d4:68:ac:81:82:a1:34:27:06:a7:34:86:b5:fa:
ef:1e:ae:17:20:04:70:c1:9b:c3:90:1f:71:8e:fe:cb:d0:61:
a1:17:cd:8b:c5:fa:33:0b:91:24:e7:27:2b:a9:50:cd:ef:d7:
06:fe:2f:ab:e7:22:b4:14:c6:63:3e:29:ab:da:cf:52:07:e1:
02:af:91:5a:42:88:cf:e8:c0:76:71:a6:d5:0b:13:79:38:83:
76:79:10:da:2a:03:a5:bb:6f:e4:af:b9:dd:9d:8b:0c:82:2d:
97:eb:cc:dd:0f:21:19:94:66:58:f0:b3:00:e1:1c:77:e9:2e:
46:3d:7f:6c:be:5f:2c:47:fe:5e:83:91:e9:25:85:43:c9:72:
bd:6a:41:fb:47:ef:44:24:2c:14:cd:63:ea:8f:b2:f5:15:a4:
35:ba:df:fb:84:1e:9e:08:6d:ca:63:71:3a:8e:1b:3a:00:2a:
8a:3c:62:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:14:09 2025 by rpki-client