Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/179f195b-bd68-381f-ba65-9bb517ad1aab.roa
File: 179f195b-bd68-381f-ba65-9bb517ad1aab.roa (raw, json)
Hash identifier: ZOTqRy7p6qB5U60v3PFh7/+8vVNK7eaWgPZ320AEi9I=
Subject key identifier: DC:D9:71:B7:C7:34:BD:CD:B1:01:70:DD:6B:82:C7:64:AE:70:97:6E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584089040C075077F075564FD6C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/179f195b-bd68-381f-ba65-9bb517ad1aab.roa
Signing time: Tue 10 Jan 2023 12:00:00 +0000
ROA not before: Tue 10 Jan 2023 12:00:00 +0000
ROA not after: Wed 15 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 128.125.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:89:04:0c:07:50:77:f0:75:56:4f:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 10 12:00:00 2023 GMT
Not After : Feb 15 05:00:00 2023 GMT
Subject: CN=92ed6809-7504-40e4-8f7f-9535f62b46b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b8:53:cc:e3:62:a5:bd:9a:c2:66:a4:2e:11:
2c:21:0d:4b:60:10:e0:d1:69:81:50:ee:3c:b3:ca:
a3:0f:6e:93:a1:4d:7c:59:b6:6f:ff:bc:50:72:97:
11:20:cf:94:59:e9:06:df:95:ed:21:06:5b:5d:0c:
ac:d3:5a:9e:d1:0d:5c:9f:76:34:a4:01:fd:68:61:
ae:a4:50:77:79:d0:31:35:59:67:80:9c:b4:61:6e:
cc:cd:b0:26:02:69:c2:31:39:fe:8b:3f:6c:d0:70:
a7:72:74:13:81:3f:71:60:41:59:bf:84:64:c6:be:
40:7c:0d:ec:97:96:bf:d2:d8:e0:1e:9e:0a:82:e0:
e1:f4:c0:50:cc:e0:2f:fa:8a:06:80:71:f7:ad:aa:
9d:f2:f4:4f:c4:e6:80:dc:36:ad:ed:6a:b4:aa:21:
76:95:f9:9d:9f:78:d8:f5:86:00:13:b5:e5:ec:ec:
fd:55:67:7d:1e:2d:45:13:f0:4d:f1:a3:af:3e:b0:
07:36:79:82:55:9e:c9:78:b4:18:9a:53:eb:66:76:
36:d1:ac:9e:93:cf:95:ae:97:bd:56:38:0f:96:b6:
e8:51:6f:cc:07:66:0e:ea:fc:f2:3b:a7:f8:7f:b5:
4f:ba:61:19:85:c0:01:56:1a:62:bc:d6:24:07:9f:
01:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D9:71:B7:C7:34:BD:CD:B1:01:70:DD:6B:82:C7:64:AE:70:97:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/179f195b-bd68-381f-ba65-9bb517ad1aab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
128.125.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:b7:e4:12:70:43:50:7a:a7:65:a5:0e:5d:d8:68:27:aa:7a:
b8:43:67:0f:f4:51:19:73:59:47:2d:0c:19:92:44:cc:00:d5:
20:6f:fc:81:28:7b:1d:e1:5f:14:ba:e8:11:c0:30:ed:0b:36:
9c:0e:65:be:d9:d2:8f:cf:0d:a3:99:0d:a1:02:a2:99:80:e4:
02:06:22:12:6f:cb:79:e1:fa:07:ca:92:dd:4c:95:f7:d0:90:
e0:27:ec:df:28:95:17:b7:a8:43:17:bb:5b:41:aa:69:8e:15:
aa:0c:e3:37:d2:31:3d:5b:87:81:27:b1:e0:4a:09:59:f0:81:
fc:6b:f6:59:d7:4b:f8:61:3e:02:1e:25:65:66:cf:7d:22:ef:
50:ff:14:68:c6:47:ec:61:5d:79:70:04:dd:e1:ea:80:5e:a5:
1c:6e:0e:eb:8a:0b:31:7c:f2:c5:d3:7f:b4:fa:a8:9b:cb:e7:
c9:80:9f:eb:56:6a:66:e5:28:9d:23:bc:21:9e:c2:70:9e:08:
fc:f6:10:20:6c:f7:ed:0a:7e:18:ba:98:d4:8a:88:3e:ee:12:
4b:38:b3:aa:a4:12:31:41:3c:8b:3d:bf:67:39:a3:70:e5:ce:
db:a3:1a:73:7d:1f:d8:fd:01:70:37:7c:97:22:42:2f:0e:62:
8c:3a:c3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:40:03 2025 by rpki-client