Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0cb28805-8306-3b5f-8571-1b073cf49344.roa
File: 0cb28805-8306-3b5f-8571-1b073cf49344.roa (raw, json)
Hash identifier: 0C+1hcnsKxExxsip3yS6TqReD0s+Ks+0LmX/UknPHCI=
Subject key identifier: 9E:68:0F:60:2A:2E:15:5A:B9:BB:61:0F:92:2A:02:D8:40:48:A8:29
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E70F1BFCB191F6462EE50BD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0cb28805-8306-3b5f-8571-1b073cf49344.roa
Signing time: Sat 02 Jul 2022 12:00:00 +0000
ROA not before: Sat 02 Jul 2022 12:00:00 +0000
ROA not after: Sun 07 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 129.160.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:70:f1:bf:cb:19:1f:64:62:ee:50:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 2 12:00:00 2022 GMT
Not After : Aug 7 04:00:00 2022 GMT
Subject: CN=6ff62c75-a22d-40d8-bcc7-404c101d8112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:61:b0:0b:4e:ad:b7:4c:5e:37:76:e9:23:
f6:55:38:2a:4a:70:9f:7e:bb:0f:b2:35:02:ed:6e:
18:81:ad:8b:c4:6d:8b:a7:b0:d9:f1:a1:24:b7:ce:
15:3c:d8:b0:5b:81:e8:9d:a4:f6:06:49:26:e4:19:
c1:ae:b1:ba:cc:08:11:ce:70:76:98:77:89:d8:e9:
97:f0:b0:02:aa:09:d3:27:c0:bb:97:92:62:13:af:
97:57:e7:bc:74:86:2b:e5:08:02:fd:76:c2:13:a9:
d8:c3:77:f3:40:2a:ce:80:7f:ce:d4:21:9f:08:e5:
f1:92:12:2c:d2:c9:c0:bf:f6:f9:70:8f:82:a4:21:
cb:d2:14:c9:47:76:d1:e2:61:92:23:5e:b7:04:74:
86:66:81:c4:8e:89:0f:bf:bc:79:1e:b1:c6:8c:b1:
38:6a:9b:90:63:2e:29:37:92:32:a9:5c:4d:5a:5b:
3b:2f:c4:e1:0c:96:62:88:a9:4b:e0:9b:5e:45:ae:
6e:c1:84:dd:4a:db:63:7d:ca:27:5e:48:12:1b:9b:
ce:8f:54:db:19:5a:f6:18:ee:c4:99:8f:be:6d:df:
4a:9a:2d:6d:76:bb:15:1b:0f:df:dc:5e:ba:30:49:
88:f3:35:f2:82:a5:16:5b:aa:31:c5:41:0c:99:a6:
c8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:68:0F:60:2A:2E:15:5A:B9:BB:61:0F:92:2A:02:D8:40:48:A8:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0cb28805-8306-3b5f-8571-1b073cf49344.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
129.160.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:eb:38:5a:90:c0:a6:96:16:66:dd:5d:9c:09:45:cd:ab:cb:
1b:6b:93:7d:cd:d1:90:7a:61:b4:bd:f0:85:fc:db:ee:cf:94:
51:81:b6:7b:79:e3:ab:34:e1:c8:6a:e6:c1:70:49:22:7d:6b:
96:b8:bc:24:17:c1:7f:08:dc:b4:c3:dc:5c:f1:60:76:5b:cb:
23:24:50:20:14:13:36:c5:1a:a9:ea:64:36:95:9a:c4:f6:8b:
84:84:fc:09:87:ec:ab:70:ff:76:9c:a7:76:12:2d:12:72:8d:
6c:54:61:ec:14:ca:a8:75:d6:c0:08:ef:5b:f5:a8:88:e3:cc:
f9:8c:10:3b:f9:f8:f0:cf:be:58:52:aa:8d:fc:11:38:84:0e:
ba:b5:cd:18:8b:48:68:a2:75:d0:98:19:6f:a8:09:d8:82:fe:
62:33:5b:80:27:7d:58:8e:b0:46:0f:68:f9:57:4f:4c:a2:74:
bb:f4:f7:04:06:2f:d7:be:a1:99:d6:40:fe:07:bb:05:57:2d:
00:6c:8a:2b:a4:53:e6:19:c4:c4:13:9b:74:5c:51:5b:3c:84:
15:1d:c1:e5:28:03:4e:ec:ed:fd:6a:26:81:b7:ec:ce:65:4e:
8e:00:81:2a:8d:9a:ee:b9:ee:d6:54:98:c4:bf:34:15:02:e1:
7d:c3:20:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:56:35 2025 by rpki-client