Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b6be0e9-5522-36b9-b752-92bdfb0a0e2b.roa
File: 2b6be0e9-5522-36b9-b752-92bdfb0a0e2b.roa (raw, json)
Hash identifier: 9Bvtc8IKUyj9FystVxxM4BYHZmzpjpJ4MGmJQvj+qng=
Subject key identifier: C7:F2:10:09:89:99:DB:9F:5A:38:77:A0:63:7F:7F:4F:C0:BF:5D:12
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E29C115F43EDE4F7DC845B300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b6be0e9-5522-36b9-b752-92bdfb0a0e2b.roa
Signing time: Mon 06 Jun 2022 12:00:00 +0000
ROA not before: Mon 06 Jun 2022 12:00:00 +0000
ROA not after: Tue 12 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 128.188.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:29:c1:15:f4:3e:de:4f:7d:c8:45:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 6 12:00:00 2022 GMT
Not After : Jul 12 04:00:00 2022 GMT
Subject: CN=596bb9a6-c954-460c-8b7c-57a98a1a0737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:94:1f:5d:c9:cf:9e:9a:ac:7e:1b:16:ac:d0:
08:f0:2c:72:9b:cc:7e:b0:7c:93:6e:16:a6:ff:0a:
5b:1d:32:df:4f:ee:57:6a:b1:a4:0c:9a:9e:d7:46:
7a:5a:92:68:f2:e7:a0:74:fb:1a:28:83:10:92:63:
19:d9:8f:7e:cc:06:8c:e1:f8:ec:65:5f:48:dc:aa:
11:c6:b2:e3:c1:a9:3c:93:f8:3e:3c:1c:cc:29:fc:
c4:2f:7e:c4:34:38:5a:80:23:5e:e7:55:eb:3f:ba:
38:f6:3d:c1:1e:84:ea:68:ab:98:d2:5a:ec:c7:a3:
a6:77:49:c7:fb:e5:fc:36:5c:a2:a8:71:b3:ea:de:
e5:95:c7:a4:8f:7b:4f:cf:de:dc:f5:e9:84:ca:f3:
8f:1e:d6:8f:f5:2e:e4:fd:1f:d7:1c:8a:9f:e8:a7:
fe:fb:4f:cd:59:6e:c9:71:f2:1a:ad:94:1c:f5:34:
2a:57:c2:1f:03:46:be:1b:34:04:c5:13:06:4a:64:
43:b8:5a:29:39:d2:92:5c:59:76:42:5a:a3:f1:c6:
a7:75:05:a6:c5:90:d7:33:2b:bc:fd:84:ca:51:77:
36:3c:a2:f9:dd:41:09:4e:f2:6d:89:40:95:1c:9c:
b2:9a:5f:b5:7f:81:8a:e5:bf:0a:37:12:e7:45:b3:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F2:10:09:89:99:DB:9F:5A:38:77:A0:63:7F:7F:4F:C0:BF:5D:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b6be0e9-5522-36b9-b752-92bdfb0a0e2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
128.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:dd:56:99:b1:e3:dc:48:cd:3f:46:d9:96:8a:23:5c:d0:ed:
d5:d1:07:9d:12:1f:7c:d6:70:ae:a9:6a:33:f4:d3:71:62:bb:
9c:74:0c:fa:ea:d8:c6:94:e3:33:48:2f:08:7b:55:c6:e7:8d:
fa:9e:e8:df:b5:64:04:f3:6d:ac:90:a5:95:ba:27:ef:51:2b:
07:44:d6:05:8d:08:53:eb:87:1a:7c:81:90:94:4a:8e:3e:e7:
b4:21:f8:e8:df:3f:b5:f4:ac:b8:09:90:3e:29:20:6e:3a:20:
c0:22:ff:e8:aa:53:8c:20:a1:10:41:d7:5c:1b:51:f7:c0:58:
34:a6:b4:c8:cc:07:f7:17:0a:a4:58:38:c4:71:d8:b3:e7:f6:
4b:74:5e:fe:a9:17:89:4a:22:99:00:bc:ab:ba:33:99:c0:a4:
de:da:4c:5c:ae:a6:db:d0:fd:cb:47:a6:70:78:f3:e7:58:ea:
32:92:fb:e6:aa:69:05:bd:b6:23:e0:9a:18:03:f2:05:ca:a0:
0c:bd:17:47:00:d8:ad:9b:b8:a3:fc:e7:be:41:2d:18:f1:92:
12:ac:e6:d3:d3:87:c6:1c:5d:3c:35:ff:9a:3c:94:81:e3:4f:
f1:bc:de:66:82:6e:79:bf:8f:72:ff:2e:9a:07:0f:77:f4:66:
23:b9:cf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:49:04 2025 by rpki-client