Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b537c5d-567d-36b4-b816-b813681f9228.roa
File: 1b537c5d-567d-36b4-b816-b813681f9228.roa (raw, json)
Hash identifier: 8TWbUEe0LBBBeYtLwFGvjiKOtFYA4vuKILW6NE9S0Ic=
Subject key identifier: 06:AF:F8:CF:8B:22:1D:15:2D:88:4E:84:56:01:D6:AA:0D:BE:B8:9D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DC8F22D93C9764695F109C380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b537c5d-567d-36b4-b816-b813681f9228.roa
Signing time: Tue 03 May 2022 12:00:00 +0000
ROA not before: Tue 03 May 2022 12:00:00 +0000
ROA not after: Wed 08 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 3.128.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:c8:f2:2d:93:c9:76:46:95:f1:09:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 3 12:00:00 2022 GMT
Not After : Jun 8 04:00:00 2022 GMT
Subject: CN=e68c163b-65f1-4c67-bc54-85b480a5fa4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:20:73:5d:ff:44:98:15:3f:2c:2a:5d:24:90:
c1:28:2a:3f:6e:5d:92:f6:d0:4d:54:5a:cc:12:1e:
51:92:ab:fa:09:db:c5:e1:8c:97:01:60:32:cb:18:
fa:f2:7f:25:5a:c6:09:47:91:5d:ef:ec:47:cf:1a:
f2:ea:7a:4e:bf:31:c8:74:7a:64:ac:41:42:d2:e8:
87:9c:a3:4d:a8:c5:e0:cf:5d:a7:cc:79:58:f2:0d:
09:b5:0f:5c:dc:17:e0:3c:5f:28:fa:b2:75:fa:7e:
30:1b:c7:af:71:9b:f9:97:73:5d:6c:cf:6b:85:26:
f3:de:a2:cd:05:83:9a:a1:60:45:76:9a:bf:3b:69:
9a:78:0d:05:a3:18:3b:a0:d2:d7:92:65:2a:56:77:
98:e6:02:b3:3c:c3:53:bd:a2:e7:a6:b5:fc:34:f7:
b2:3b:8d:28:fc:aa:00:09:d7:5c:ff:8d:51:81:73:
74:2f:7e:57:ae:89:ac:22:85:d2:b2:da:d3:7c:f4:
c9:2d:5b:57:fc:cb:c7:b9:31:8c:26:cd:a7:e1:62:
b1:92:d4:78:4a:14:55:56:91:27:89:7b:2e:4d:c1:
f8:0c:10:2a:f7:31:d6:24:a7:74:ef:50:93:2e:05:
98:c7:fb:bf:dd:be:0d:6b:79:09:70:55:c5:e8:16:
8c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AF:F8:CF:8B:22:1D:15:2D:88:4E:84:56:01:D6:AA:0D:BE:B8:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b537c5d-567d-36b4-b816-b813681f9228.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.128.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:c9:75:4b:04:e5:95:ee:b0:dc:3b:35:d8:bf:b5:dd:78:85:
9c:f7:bd:c0:23:0b:dd:85:08:f4:35:55:9d:51:ce:27:8b:01:
3d:6d:6a:6c:49:f3:6d:24:89:9b:b1:1e:f7:15:e1:9f:fb:21:
96:ca:2e:54:ee:ce:48:cf:8d:10:9c:09:73:c4:ff:0f:8b:da:
75:a8:a7:77:23:03:f0:2c:5e:39:09:d9:13:b7:3a:6b:a0:6d:
58:30:f2:fc:e3:24:de:d3:ee:1b:3d:18:bd:38:21:af:dd:25:
a9:4e:f3:34:08:bb:29:8e:47:4c:c9:97:b0:ba:be:68:02:3d:
c0:9d:d8:d2:cf:25:53:51:6b:87:69:c2:a7:c7:4f:1d:1f:2f:
55:1a:b5:00:84:48:8e:9c:0b:1e:b7:d4:90:ee:0e:e2:6d:88:
6d:3e:b9:c1:cd:bf:eb:ab:7a:f2:08:29:b1:5d:a0:31:8f:cc:
a8:71:18:c7:59:38:d8:2a:a9:cd:fc:ba:4e:8e:08:8a:ff:53:
6c:85:2d:9c:aa:b9:02:e5:a8:6a:c4:1b:40:1c:9a:3e:1e:0d:
e7:28:fb:5d:e7:a5:88:2b:54:7e:07:10:22:09:50:98:7e:e2:
1d:02:0b:20:39:03:28:72:f0:f6:9d:7c:39:d3:a1:58:a9:58:
50:26:16:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:51:36 2025 by rpki-client