Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/128a3c00-c3fc-357b-ae2a-d156a26c3d33.roa
File: 128a3c00-c3fc-357b-ae2a-d156a26c3d33.roa (raw, json)
Hash identifier: 3FEZrrtCZKKfQBVss+WeoTeYNqkEOzD2nKFYwwLfOdc=
Subject key identifier: 20:C6:03:35:1F:C6:D4:F1:B7:DF:AB:9F:2A:F0:DB:28:AD:1C:BE:92
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D053B9EFE324E61A4D804C380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/128a3c00-c3fc-357b-ae2a-d156a26c3d33.roa
Signing time: Wed 23 Feb 2022 05:00:00 +0000
ROA not before: Wed 23 Feb 2022 05:00:00 +0000
ROA not after: Wed 30 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 128.125.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:05:3b:9e:fe:32:4e:61:a4:d8:04:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 23 05:00:00 2022 GMT
Not After : Mar 30 04:00:00 2022 GMT
Subject: CN=3ae96482-cc70-4873-9d1e-d7a4f1020cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:d4:08:bb:32:40:44:1d:84:a3:2b:3c:1f:
43:87:3a:db:4e:39:ac:25:3e:bb:32:08:37:52:8b:
c9:34:23:d9:4a:e5:05:04:42:83:f5:be:cc:ee:df:
ba:c3:f2:7a:16:85:9f:da:44:27:fc:f7:f4:11:14:
08:68:79:6c:37:9a:a5:87:a5:00:71:c7:96:35:1e:
98:c9:cc:19:b3:09:34:f4:c2:d4:53:ff:e5:06:47:
5f:92:99:8b:45:15:87:c8:b9:c8:8f:4b:bf:91:e8:
68:2d:d7:5b:06:b4:ae:57:8c:8d:e4:b3:05:ad:fd:
1f:b0:58:05:cb:f8:1b:ea:25:e9:07:f4:8a:d5:ca:
ef:ef:7c:74:19:ad:29:92:43:db:0e:bd:0f:a0:0f:
34:b9:c6:83:57:61:7c:04:2d:8c:6a:a3:62:3f:87:
22:5e:45:c8:06:30:39:d1:42:e1:a3:89:fa:81:6c:
9d:71:23:90:1e:db:64:70:f1:0d:f0:32:a7:f1:26:
81:ab:51:10:a1:9e:47:52:09:ba:d5:db:a9:f5:e1:
e0:87:e1:76:51:e7:bf:1d:0f:dc:bf:e6:a9:9a:79:
c7:12:96:93:a7:76:54:41:87:79:a5:4f:bd:b4:b1:
d0:4e:19:10:ab:94:84:e9:fe:30:d6:4a:7f:10:9e:
92:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C6:03:35:1F:C6:D4:F1:B7:DF:AB:9F:2A:F0:DB:28:AD:1C:BE:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/128a3c00-c3fc-357b-ae2a-d156a26c3d33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
128.125.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:db:c4:38:e0:29:23:d4:3a:ad:71:a6:16:86:84:8c:c5:60:
c3:1b:d2:fd:df:76:fa:34:4d:8f:49:b1:f4:b2:6f:9e:75:da:
5f:56:a3:4c:c6:36:e9:29:58:38:a2:e9:bb:ff:da:b6:cf:d0:
d4:84:be:02:1e:f3:16:9c:23:09:53:3e:8f:1d:b0:25:33:c5:
a5:7f:1d:b4:9c:84:e5:8a:87:45:5e:e4:cf:83:6d:2f:7b:81:
e7:17:3c:c6:de:65:d2:16:64:9d:97:01:72:0f:40:98:1e:52:
39:39:ca:c9:ac:c0:66:61:9e:bb:d3:66:6a:25:21:d0:f4:53:
07:b1:c2:cc:c4:8a:53:51:6a:28:b8:d4:af:9b:9b:4c:80:fb:
86:88:a8:7e:81:b6:d7:3b:13:73:a4:ff:de:70:e2:f6:b7:01:
91:fa:49:f5:91:47:8a:92:8f:9b:12:36:33:72:a5:3a:c2:da:
5c:dc:96:46:67:99:29:a2:50:d0:06:1c:70:37:45:84:d2:e0:
2c:7c:87:b8:10:e7:af:d1:26:d1:d2:9c:27:48:3b:12:72:cc:
55:21:2e:ea:23:ae:e3:9f:b2:78:b3:0e:e9:b7:4c:5e:39:17:
45:0d:22:3c:9e:67:5b:83:ed:fe:12:81:6b:ee:e0:fb:fc:61:
75:37:66:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:06:09 2025 by rpki-client