Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cbbeea8-0335-3c67-962b-7c5c18277252.roa
File: 1cbbeea8-0335-3c67-962b-7c5c18277252.roa (raw, json)
Hash identifier: 7lwMNeqbdHBqT93HH0Z54W0kFBEY1+H167y0l4hn8eQ=
Subject key identifier: 24:E7:E8:9F:87:B8:94:5D:B1:4E:43:83:79:CF:5B:9F:99:34:F7:D6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E22B77F8227461A6FB9C411E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cbbeea8-0335-3c67-962b-7c5c18277252.roa
Signing time: Sat 04 Jun 2022 12:00:00 +0000
ROA not before: Sat 04 Jun 2022 12:00:00 +0000
ROA not after: Sun 10 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 129.160.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:22:b7:7f:82:27:46:1a:6f:b9:c4:11:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 4 12:00:00 2022 GMT
Not After : Jul 10 04:00:00 2022 GMT
Subject: CN=07edd7eb-bc35-4b0b-9163-7a566d8d0c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:94:a5:08:69:d5:17:98:b8:3f:ae:b1:f8:48:
7f:3b:6f:ce:5a:e6:65:a6:2a:c2:c6:79:98:10:fd:
a3:79:34:55:31:4e:44:2d:07:e8:a7:0e:b7:bb:4e:
63:6e:8c:93:a3:ea:50:b6:2c:cb:b1:4e:9a:2f:4b:
84:3f:40:09:83:41:80:1f:67:e0:39:e6:c2:5a:23:
f1:39:70:be:36:e7:e5:c4:01:6f:d3:51:f2:c0:a2:
51:cc:45:86:43:6b:b0:f2:af:72:1c:89:95:a0:9a:
90:74:90:04:bb:9e:83:4e:94:40:31:c9:eb:f7:9d:
bf:8f:6b:47:d6:1b:2b:20:55:3e:e8:ca:9d:01:10:
4e:a4:a9:9b:17:eb:45:cc:65:45:96:d5:1a:5c:c1:
4b:3c:a2:d0:4b:8f:44:d1:82:3f:cd:0a:f6:0a:cf:
73:64:2b:a5:1f:46:53:f4:37:f8:5d:1a:5e:ae:30:
fa:3d:08:86:ec:52:98:10:20:b5:4f:d6:b3:ea:f4:
8c:2e:7f:c1:61:06:b7:6b:a1:90:32:4d:c3:d3:a9:
a9:50:70:6c:2f:b5:6f:cd:9e:a2:cb:0a:82:7a:b0:
59:2d:81:7f:32:96:fe:fe:6f:57:35:92:d4:45:06:
11:9b:74:75:e9:f7:dc:f1:c7:a9:f9:6d:06:bb:04:
ff:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E7:E8:9F:87:B8:94:5D:B1:4E:43:83:79:CF:5B:9F:99:34:F7:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cbbeea8-0335-3c67-962b-7c5c18277252.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
129.160.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:6a:88:5b:47:2b:c3:a1:51:af:7a:26:8e:de:8f:f5:86:4b:
9f:b7:59:e4:2c:ec:aa:4c:41:aa:41:c7:29:0f:e1:c8:d0:bd:
46:b9:90:9d:cf:54:7e:9f:b3:eb:25:d9:b6:17:d0:77:b0:75:
d3:e6:f7:49:37:8c:2a:93:6c:d6:aa:12:b9:05:56:8e:81:98:
29:36:53:63:30:5b:6b:f6:6a:7c:61:61:77:d2:e2:51:3a:0d:
11:4b:f6:85:a2:6f:9e:45:c5:71:6e:4c:0f:ad:e1:34:88:55:
00:d7:e5:7b:7d:d4:32:02:09:8c:cb:47:b2:89:1e:43:8f:7b:
3e:1e:a5:b0:bf:d9:2e:18:85:03:af:96:38:c7:73:f6:1f:63:
26:68:1a:16:85:3c:df:2d:e9:bf:26:99:20:b2:83:f6:32:e2:
b4:14:b8:13:2e:a8:cd:5f:4d:29:3d:58:4c:f9:6a:21:fd:a7:
2e:f5:48:e7:75:0a:b2:4b:0b:fd:51:12:01:69:43:b0:b3:02:
4e:eb:68:51:7f:b7:05:55:01:80:8f:30:27:45:e8:7b:60:ac:
82:98:ae:33:eb:9f:16:97:ab:d8:1b:33:9c:e3:9d:eb:79:2b:
06:47:0c:e4:86:42:03:e0:fb:b9:fe:73:69:3a:1e:08:a4:b8:
40:08:17:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:13:33 2025 by rpki-client