Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2809eaeb-d10e-396c-b262-a43c7be3b606.roa
File: 2809eaeb-d10e-396c-b262-a43c7be3b606.roa (raw, json)
Hash identifier: UZyq4xrIW7Bb3zC9ltvQqpV2bg8ndrP6zaf7wqv4+hY=
Subject key identifier: 5D:37:C6:50:54:3E:AB:30:3C:57:A1:53:06:97:8D:13:6B:6A:46:E8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E4F3D4778F7687D29DF032E40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2809eaeb-d10e-396c-b262-a43c7be3b606.roa
Signing time: Mon 20 Jun 2022 12:00:00 +0000
ROA not before: Mon 20 Jun 2022 12:00:00 +0000
ROA not after: Tue 26 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 130.101.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:4f:3d:47:78:f7:68:7d:29:df:03:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 20 12:00:00 2022 GMT
Not After : Jul 26 04:00:00 2022 GMT
Subject: CN=5bade25e-13e0-4d98-b42d-152278d4b36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8b:33:57:dd:70:d1:68:30:8c:4f:fe:61:8e:
dd:46:45:d8:40:00:7a:bc:a7:bd:3e:c5:29:f7:24:
16:fe:5b:09:72:eb:27:87:ea:03:d9:fa:0a:16:6f:
33:cd:cd:c7:bc:d1:60:8a:4d:16:bd:5a:19:aa:aa:
41:98:0e:5c:9a:0f:89:b9:52:23:4b:8f:78:c9:db:
99:c8:b5:84:45:c4:6f:30:a4:99:c7:0c:42:e0:01:
1c:70:e7:b9:8a:85:ff:1b:75:33:ad:2b:8c:6b:9f:
7b:eb:fd:3c:78:6d:2a:3c:c4:36:f9:d7:d4:88:20:
1b:4a:b5:81:b2:c8:8a:35:81:3e:03:40:f7:91:11:
0c:bf:42:c5:73:13:ac:9e:f1:55:c9:eb:32:2d:c9:
c4:46:e8:42:9d:f3:76:ca:56:02:82:c7:07:1a:45:
f8:00:46:20:99:aa:4e:8a:30:6b:3d:55:cd:1d:2d:
2e:ba:76:d3:15:cc:26:af:6b:f0:bb:bd:c8:c2:e3:
3c:1b:ae:8e:9b:b5:94:8e:ae:b6:5b:7d:80:71:16:
e9:26:eb:fb:0a:86:7b:81:25:84:59:00:31:94:bb:
80:fa:68:2d:08:ae:dd:b1:b1:8e:44:f6:71:3e:82:
bc:b3:fd:7a:c8:53:ea:a3:70:74:5f:6c:37:9a:93:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:37:C6:50:54:3E:AB:30:3C:57:A1:53:06:97:8D:13:6B:6A:46:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2809eaeb-d10e-396c-b262-a43c7be3b606.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.101.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:d4:ca:bb:1e:3d:7e:d8:6a:d1:11:df:5c:9c:04:8c:8e:8e:
66:e0:bf:ae:42:c1:cd:53:3a:18:a6:20:db:ef:a8:b9:37:d7:
e4:d4:24:13:75:51:f1:ac:d3:7a:a6:48:0e:12:05:5a:62:ae:
d0:a9:41:8f:3a:cf:21:08:5c:ed:9f:3b:2e:83:a6:21:8f:88:
be:88:69:df:30:51:7e:a0:69:81:34:11:b8:c8:89:00:84:b8:
77:02:59:2e:f4:5d:26:6a:05:04:7c:22:5d:5f:ed:a7:27:99:
9a:ed:0c:eb:30:1e:04:4f:8f:87:53:3e:04:ab:c9:2d:b2:41:
07:cb:05:fe:92:4a:7b:90:68:8e:0b:c7:24:35:8b:03:42:3c:
56:43:6f:f8:7c:d7:0e:e1:70:c1:f1:5b:f8:20:c5:39:ba:9f:
46:0e:6a:e6:a3:87:68:2a:2d:91:c5:1f:ce:2f:7d:47:36:9c:
5a:40:68:19:d7:ad:c0:fc:62:a7:68:7f:63:3f:5c:bd:c0:62:
22:59:83:50:60:3c:8a:05:f7:21:9b:1c:65:7c:c6:c6:5f:89:
b2:a7:44:1c:36:20:10:f2:74:67:d5:18:bb:d6:98:3b:3c:ce:
0c:1a:e2:eb:c3:6e:d3:78:8c:de:26:38:9b:03:f0:96:95:d6:
6e:28:47:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:24:27 2025 by rpki-client