Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/21f7cf66-05cf-30eb-be0e-80d79e592a6b.roa
File: 21f7cf66-05cf-30eb-be0e-80d79e592a6b.roa (raw, json)
Hash identifier: XgcFpZkuwJCeQOHlnP2ZnYUAfHSBV+CLWTmLFoMo770=
Subject key identifier: 30:85:FD:0F:A2:9F:A2:69:37:51:92:F4:56:0A:29:21:1B:AB:06:F3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F2F469D2A1096C3123049FF40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/21f7cf66-05cf-30eb-be0e-80d79e592a6b.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.124.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2f:46:9d:2a:10:96:c3:12:30:49:ff:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=906ae4d8-28f1-4fe2-a33d-28463bb73fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:90:53:25:96:53:c9:87:0b:f5:4b:64:6a:
b5:fd:d1:f9:98:a4:06:18:9d:a9:83:5e:61:bb:1a:
4c:1b:41:07:ce:9b:b0:f8:86:23:d3:be:5c:fa:97:
7a:c7:a5:16:1f:a9:27:75:e3:5b:a1:b0:e7:71:2a:
37:c5:be:71:a4:77:e1:1c:49:3d:80:40:5a:0a:d1:
ec:be:26:82:ca:97:5e:89:bd:0d:2d:4b:2d:99:d7:
49:b3:e7:39:ce:a8:6c:85:b4:49:32:ce:78:7f:1b:
56:75:52:e6:be:dc:1d:23:e8:9f:a2:b6:9c:ae:44:
9a:6a:35:cd:be:f2:dd:b5:fc:ae:d0:24:70:bc:73:
ad:f8:d1:59:87:1b:ec:17:25:6b:3a:6d:f1:ae:44:
66:11:17:f2:6e:32:4d:47:6e:bf:78:9b:0a:b9:fa:
da:97:87:b6:0e:7a:67:46:02:6d:a0:ef:80:a4:2b:
9b:09:d7:6c:37:b7:7c:19:b5:27:4c:ed:44:3c:35:
44:92:9b:5f:09:47:8d:33:6f:0e:16:a4:c6:d4:a5:
60:54:90:2f:fa:b1:d7:42:47:fb:a8:2e:22:9f:cf:
8a:82:71:2e:08:33:c3:63:e9:88:20:a4:59:b2:f4:
ce:29:eb:73:54:01:5c:c5:1f:d0:2a:50:8f:e2:39:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:85:FD:0F:A2:9F:A2:69:37:51:92:F4:56:0A:29:21:1B:AB:06:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/21f7cf66-05cf-30eb-be0e-80d79e592a6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.124.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:55:62:74:84:96:c7:4b:af:59:58:43:34:02:df:e1:ea:5f:
32:d4:8b:da:7d:52:4e:da:a9:3a:58:e4:fb:0f:4e:65:d9:cc:
96:2a:17:52:09:f4:10:22:7f:98:30:89:f0:33:0b:2f:94:f1:
d9:be:15:bc:84:a7:3e:b7:b7:64:d4:fe:0e:fc:29:4e:2d:57:
75:11:11:3c:a1:67:56:dd:12:d3:4b:2a:36:e4:20:e0:6a:97:
2f:83:fc:6b:fb:8c:0d:a0:38:5c:0b:37:9a:6a:da:83:b8:8f:
d5:96:f2:ee:41:02:9a:af:9c:40:b1:83:af:19:7d:0e:9d:64:
28:a7:c6:60:9b:3e:dc:e0:13:69:17:f7:37:58:1c:37:31:c8:
d2:29:91:4d:44:d5:58:6c:6b:bb:e1:f4:dd:c0:ec:b1:11:e6:
6e:de:cf:d4:27:4e:d8:ea:f9:04:b5:d5:0e:2f:31:7b:19:88:
b1:49:3d:1b:b1:3e:ef:15:af:40:17:fd:0c:a3:1d:74:dd:84:
05:19:fc:56:49:a5:24:be:9d:7f:b3:f3:a4:ad:31:4b:de:b9:
de:53:2b:b3:26:63:a1:de:a1:7b:36:5f:b5:9f:78:42:8c:2b:
2f:a2:23:79:ad:9f:00:3a:69:9c:67:89:c8:fd:32:18:f2:bf:
1b:7a:0b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:50 2025 by rpki-client