Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c79bc38-9138-3cf6-87e6-a3519ea1a289.roa
File: 3c79bc38-9138-3cf6-87e6-a3519ea1a289.roa (raw, json)
Hash identifier: N9DDvEYuZpni26ffI/+e0VcgqaueCfx/dadI7Dwvqbs=
Subject key identifier: 5A:95:B3:0F:38:80:33:83:D2:F9:03:2C:CD:21:D2:5C:87:45:5F:5B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D053BD2AB9B0DF14E3760AF00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c79bc38-9138-3cf6-87e6-a3519ea1a289.roa
Signing time: Wed 23 Feb 2022 05:00:00 +0000
ROA not before: Wed 23 Feb 2022 05:00:00 +0000
ROA not after: Wed 30 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 128.125.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:05:3b:d2:ab:9b:0d:f1:4e:37:60:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 23 05:00:00 2022 GMT
Not After : Mar 30 04:00:00 2022 GMT
Subject: CN=9b1b03ee-0b01-43fe-bf3c-18fe937efe65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:ae:40:58:02:b5:7d:91:0f:42:9d:61:5d:
e6:51:98:5f:17:56:2c:55:40:08:ee:b3:57:23:0e:
a9:79:de:30:84:7b:ec:57:71:27:e4:c3:3b:f0:e4:
45:d9:27:3f:69:1e:4d:d1:4f:33:e4:28:23:8d:88:
ea:4f:d6:e7:08:92:17:72:65:c6:0d:a9:d4:99:a5:
47:68:e1:b4:d4:0e:2e:0d:24:48:96:da:66:7d:43:
fb:72:d7:2d:c7:11:42:83:2c:80:51:30:40:6e:ba:
6c:7c:bd:17:c9:33:a1:01:f7:3b:69:3f:c6:38:b6:
83:b4:c3:9c:c7:71:16:e8:54:23:e7:6c:4e:de:36:
9e:a7:8d:d8:17:d4:3f:50:41:fc:47:d5:32:af:4b:
28:a0:61:62:64:21:0d:bb:f9:9f:c3:f9:54:8c:53:
32:95:02:1a:5c:c7:df:c4:c9:bc:57:92:6b:68:d0:
8e:2e:a1:7e:e5:2f:9f:e9:69:9d:12:98:e5:d0:6f:
a3:38:66:73:ff:bc:7b:7e:5e:65:13:5a:80:9d:6a:
80:82:ff:d8:6d:ad:ff:a8:a3:34:a9:ce:60:37:10:
f4:a2:d9:0f:62:1f:50:26:de:b7:e0:0b:57:68:9f:
ad:d8:96:82:56:1d:af:e5:b8:df:e3:fe:70:f3:3c:
39:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:95:B3:0F:38:80:33:83:D2:F9:03:2C:CD:21:D2:5C:87:45:5F:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c79bc38-9138-3cf6-87e6-a3519ea1a289.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
128.125.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:46:3a:39:07:62:d8:84:92:2f:b4:e3:1a:20:9d:5d:0d:ee:
17:27:5e:55:d6:79:eb:97:4b:f7:9e:0c:16:f6:69:27:ba:d2:
0a:5c:03:4b:fc:19:69:e6:8c:99:37:97:04:d7:25:45:87:7c:
d2:55:ce:9e:9a:ff:5b:04:b8:d6:29:eb:08:17:0b:b7:e5:9c:
8e:fe:28:33:90:74:86:c6:f4:6e:8c:35:4f:67:40:2a:05:35:
26:c0:45:25:b9:9a:66:99:1b:ae:94:e3:61:43:08:9f:dc:e2:
39:cd:51:c9:ce:b7:6b:c3:a0:50:94:61:19:e8:9c:13:65:db:
db:88:d3:a4:b9:10:99:bb:99:d4:9f:ec:fd:84:e6:ab:34:f9:
5b:40:b1:a7:70:1b:17:16:55:86:64:c0:66:d1:7d:9e:e4:ca:
b0:dd:fa:cd:5b:7d:b2:38:81:5f:4b:f7:fc:b5:71:cb:60:ce:
93:91:f2:26:bb:a2:d8:cf:55:2d:6e:d5:d8:8d:c1:44:71:5c:
db:d9:8b:68:83:23:c0:71:0f:58:11:32:c6:bc:af:c2:09:fa:
39:d9:37:9e:ec:75:0a:e5:d1:cf:e3:09:75:86:46:b6:fe:9a:
3b:e7:76:39:75:0a:2a:7d:31:00:d0:4e:d3:89:0c:b3:98:2d:
c5:e2:02:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:04:49 2025 by rpki-client