Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b1f950f-60d7-30aa-9dac-7ee22816dfc7.roa
File: 3b1f950f-60d7-30aa-9dac-7ee22816dfc7.roa (raw, json)
Hash identifier: CLqFbl5xHmI5bjyor2qLl75KANT8l0yGLT8YEenhjkU=
Subject key identifier: A7:DA:0F:1F:12:EC:1E:D2:67:39:F8:BB:AC:8F:D1:AA:23:64:33:34
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F837E7453144408DEB88D5D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b1f950f-60d7-30aa-9dac-7ee22816dfc7.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 52.119.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:83:7e:74:53:14:44:08:de:b8:8d:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=be65bd44-07f0-411b-9e96-eb2dcb3bdaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:45:5d:d4:ed:73:59:b2:18:1f:c8:ea:54:b6:
77:e2:82:45:5b:80:db:96:10:95:f8:37:3c:ee:ff:
50:33:b0:16:e2:1c:86:9d:de:97:27:95:d4:9e:8b:
d4:18:a1:3e:9d:7d:54:3e:57:c9:ef:37:42:4a:f7:
2f:62:b9:1f:c2:1e:4b:60:e9:b9:3a:7f:a7:9b:ba:
9e:ce:bf:c7:37:76:fd:5f:b2:90:9e:42:b0:98:fb:
d0:b3:0c:52:be:f0:b1:1f:d2:09:7c:ad:7d:eb:8d:
1d:db:e2:68:e0:b7:ee:87:9c:59:9e:44:5a:6e:3a:
cb:ad:48:fb:ba:a7:2a:c3:ae:a7:89:32:b2:97:e9:
80:11:57:b2:43:e5:bb:ce:2e:e6:86:3f:f6:e5:8a:
fb:db:92:84:c7:90:16:93:09:1b:b0:29:7c:71:b9:
3f:06:f8:ba:92:72:4e:10:e9:75:c0:3d:a0:79:ca:
ee:e3:02:cb:3c:85:b1:28:d0:36:3f:d0:1c:fc:c6:
3a:34:df:e6:c7:ba:f2:65:85:af:e0:0c:c1:18:bd:
f5:27:4d:5a:40:f5:f3:56:05:38:17:e3:81:31:c1:
3d:9c:d6:3c:20:86:1b:1b:92:3c:6e:40:4b:be:42:
f5:6a:d5:06:05:73:17:0f:6e:5b:c1:3b:5a:39:ef:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DA:0F:1F:12:EC:1E:D2:67:39:F8:BB:AC:8F:D1:AA:23:64:33:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b1f950f-60d7-30aa-9dac-7ee22816dfc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.119.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:df:d4:12:7c:93:89:90:b4:fe:51:36:1f:8e:58:eb:9a:ca:
a0:bf:e3:ed:99:07:34:f8:eb:97:9c:bf:66:9b:c0:09:14:0d:
d9:83:53:34:92:c8:fc:40:18:c1:bc:0c:bf:76:2a:22:79:e0:
94:8e:67:8f:d0:50:23:d6:74:7d:7a:e7:93:cf:2c:5e:e8:b4:
87:43:30:23:bc:52:b4:db:f4:e0:6b:97:e6:60:f0:b3:a1:82:
78:db:dd:74:95:c1:fb:62:f6:dc:0c:65:29:f1:8a:d4:2d:8c:
c1:a5:24:71:1f:98:aa:42:2f:01:6b:79:7d:f3:49:80:1b:21:
b0:cf:91:e3:9d:b2:c8:40:12:87:a4:32:d9:c9:26:a6:e2:d9:
1b:9b:29:04:50:93:c4:2c:47:8b:07:ae:42:3c:12:1f:5e:2a:
34:2b:65:10:0a:e1:59:52:cf:27:a5:4f:cc:2c:33:ce:d1:41:
5e:5e:6a:f8:cc:06:8c:bb:fb:3a:12:c5:51:b9:68:0b:ee:fb:
8f:f8:2c:26:01:1a:97:5f:9f:41:b9:6a:3d:fc:59:4d:79:62:
9e:81:0a:4e:7d:69:bc:2d:6c:e8:64:0f:09:0b:f8:05:8f:14:
d3:c7:41:65:23:b2:42:94:50:10:ae:6e:1f:d1:aa:61:9a:ba:
ae:cb:77:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:44:03 2025 by rpki-client