Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4038b63c-b978-3b1b-a2e3-b53178dff091.roa
File: 4038b63c-b978-3b1b-a2e3-b53178dff091.roa (raw, json)
Hash identifier: 4rG5QuzsW0ZsjiUwVIK0HL0IEjLhVFqt8Gq/BY9mbTU=
Subject key identifier: 06:D7:13:4A:3B:16:65:CB:93:09:EB:02:E5:E9:AA:95:17:43:91:30
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD767A3B8397F47A48486600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4038b63c-b978-3b1b-a2e3-b53178dff091.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 52.124.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:76:7a:3b:83:97:f4:7a:48:48:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=291a6aae-099b-4897-9fe8-5229b8b3f6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:85:c6:d7:e1:f3:94:f6:35:1c:02:e1:03:
4a:f6:55:1b:67:8f:8a:33:84:be:38:06:7e:fb:c2:
57:49:cf:a6:43:c7:90:ec:9a:1c:ef:5b:01:3c:f6:
45:cf:9b:19:81:71:96:17:1a:e4:b1:c3:22:80:3b:
43:52:9b:c5:3a:fa:03:b0:16:f5:53:d6:3f:c3:ec:
6b:e6:b7:72:8b:f6:98:fd:c4:93:0f:f5:e3:7e:6b:
3b:e3:69:1b:36:3c:46:82:31:0b:e6:0c:70:0f:62:
8a:4f:d3:3a:77:c4:44:44:02:9f:e7:45:8d:80:50:
a2:bb:e1:31:f8:d6:54:fd:6e:8a:b1:f9:22:36:92:
b4:bd:d4:d5:a8:47:73:46:de:8b:6c:7f:6f:3c:90:
01:eb:15:16:78:0f:a2:a6:61:5f:78:c7:c2:d7:4a:
0d:e0:4e:ee:5e:5e:b3:d6:c9:61:cb:5c:78:e8:8f:
6b:b5:25:97:58:d8:06:a9:22:47:14:66:f5:b6:e4:
da:1c:56:ae:d1:9f:b1:3e:5d:31:21:cf:68:fe:72:
7e:af:18:47:c9:0f:f1:15:c3:29:05:02:19:1c:35:
0a:02:03:e1:3c:d8:5b:91:10:4c:b1:62:c4:71:00:
ff:f4:61:69:1b:51:78:e3:bd:af:e2:f8:7d:34:2c:
57:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D7:13:4A:3B:16:65:CB:93:09:EB:02:E5:E9:AA:95:17:43:91:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4038b63c-b978-3b1b-a2e3-b53178dff091.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.124.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:d0:39:c1:56:0c:1e:4d:73:88:18:72:33:dd:1a:d6:b0:23:
39:17:85:ac:11:59:39:12:fc:a6:ac:85:d5:af:88:e2:6c:17:
3b:30:8f:2b:aa:37:6d:0f:60:c2:13:58:8b:30:e9:93:ed:a6:
48:79:69:81:6e:79:82:0b:d1:cf:4d:03:60:da:80:eb:62:1e:
45:f6:4b:88:f7:a7:f7:76:e9:b6:01:5f:f2:06:98:d4:5f:64:
9d:d1:fc:1f:55:b7:c4:0e:41:f9:22:49:4f:b6:17:2a:f5:24:
ae:4a:bb:d5:2f:d2:4e:1c:8e:97:d4:2e:aa:bf:05:6e:a6:b9:
dd:1e:8c:28:9c:61:75:51:0a:bc:32:eb:39:db:3f:e0:75:76:
05:37:2b:4c:0f:77:1c:d2:e9:8d:5e:5c:2c:11:c0:98:f4:00:
51:f2:cf:66:28:8f:17:87:67:92:7e:0c:e0:28:37:83:04:3b:
6d:3c:ca:0d:dc:9a:44:17:b3:d7:23:3a:ae:00:da:91:c5:81:
89:95:0f:7a:1d:fd:6e:c0:a7:e4:1a:42:e2:20:a8:30:ed:bf:
b4:61:51:9f:b1:34:f0:50:6c:eb:c6:89:56:c4:84:92:d0:82:
3f:e3:1a:f9:11:a7:b0:1c:f3:f2:c4:64:3c:3d:84:9b:a4:c0:
f1:53:5d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:11:07 2025 by rpki-client