Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c5f7b6c-6105-3edd-b1d1-3e3e68bfdff9.roa
File: 1c5f7b6c-6105-3edd-b1d1-3e3e68bfdff9.roa (raw, json)
Hash identifier: FNiozSVEyfU8qtpb9SPI2yEt3Gf7X5sUZz5MKTwkLbM=
Subject key identifier: B6:87:86:EC:44:4A:96:61:0E:97:81:7B:8A:EA:D6:0B:0F:81:18:E8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCAF919CA7598E3B70DB32680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c5f7b6c-6105-3edd-b1d1-3e3e68bfdff9.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 52.124.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ca:f9:19:ca:75:98:e3:b7:0d:b3:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=cb9f3c05-8b39-4993-8134-45d4833b6f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:59:0f:00:58:d4:60:dc:30:d4:95:7d:7c:7e:
14:ab:03:ad:7e:2b:12:6f:11:5a:84:0e:fd:32:cb:
f0:cc:74:bd:a8:54:38:37:a9:7c:a4:11:57:f5:f0:
65:11:af:bb:1e:40:c6:6d:ce:68:ab:07:f0:b1:fd:
2a:14:50:45:20:11:99:8c:47:7f:00:94:a2:28:c5:
41:29:2d:00:0e:77:7f:bd:0c:b7:01:4e:e0:c2:be:
0f:f1:3e:78:15:0d:42:7d:cb:7a:72:98:3d:87:41:
6f:13:9c:fe:73:78:a5:f2:5b:b6:31:7b:47:bd:51:
09:4f:b8:db:11:fe:c8:f1:15:2a:3c:6b:54:b5:ec:
91:2f:87:84:bd:ab:df:c5:4c:da:33:c4:03:91:90:
15:4f:b8:43:f3:fe:36:fe:36:32:b5:36:bb:38:33:
49:78:c6:a0:87:bc:7d:1a:08:24:16:ac:ae:c8:e6:
80:39:74:f6:3d:4a:5b:b1:0e:da:18:5e:81:13:d0:
35:5a:d4:1b:d1:76:1c:55:b8:96:7b:0b:28:37:b2:
fc:42:ce:eb:b2:7d:6c:2c:51:45:a9:dd:60:9a:d9:
7f:9f:6e:db:c7:2f:88:d9:e4:56:74:90:7a:15:4f:
e8:6e:ae:9c:98:fd:55:ca:c3:d6:43:8c:34:e7:fc:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:87:86:EC:44:4A:96:61:0E:97:81:7B:8A:EA:D6:0B:0F:81:18:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c5f7b6c-6105-3edd-b1d1-3e3e68bfdff9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.124.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:20:cf:51:c2:3f:de:2b:90:87:a1:3f:2b:2e:b2:cb:3f:a9:
65:aa:e5:a7:51:d5:65:9c:52:2e:e3:dd:52:53:3a:ff:f6:f8:
4d:21:52:76:ee:19:a4:11:0e:46:a0:eb:5d:72:60:1f:e9:26:
67:19:3f:5d:4a:ec:3a:16:6a:c5:2f:61:8d:f0:f9:7b:88:a1:
5d:7b:a9:1b:a3:b9:66:f7:8c:dd:20:d1:fe:d6:ce:9d:8c:67:
45:2e:45:cc:92:28:c8:57:8f:da:2d:98:41:98:3a:eb:84:d8:
7f:08:78:98:2d:93:a2:bb:60:22:0a:5c:54:3c:c5:ab:d4:79:
b3:ee:16:9b:fb:8e:76:1e:85:ff:dc:ef:df:6d:79:af:59:be:
51:ba:b4:01:f1:1f:13:c4:09:5f:82:5e:57:c6:ce:cb:9e:52:
73:04:8e:0a:a0:e9:d4:13:2e:d9:4a:bb:b7:59:dd:47:2b:7e:
1c:a2:3d:3d:75:4d:c3:f5:4b:71:9f:b2:b9:bb:09:a3:cb:d2:
3a:2b:56:15:57:ea:f0:de:a4:ef:69:c6:c3:ac:0f:3b:97:f4:
09:b3:31:f6:43:23:54:92:69:54:8a:74:e7:03:b4:d1:c6:ad:
4e:e2:4f:d2:c4:07:8c:3d:27:f6:fa:08:5f:f6:d4:f0:2f:16:
9c:65:3a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:19:59 2025 by rpki-client