Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4188c0c0-6f9b-3dd1-a5aa-91ba7f20ad31.roa
File: 4188c0c0-6f9b-3dd1-a5aa-91ba7f20ad31.roa (raw, json)
Hash identifier: FgLf/d05IFkCsWkxKQa2Q+khupqgrvyJKgklqvc9hW0=
Subject key identifier: 61:E3:9D:E8:86:52:11:C7:DF:0E:F7:00:88:93:FE:0D:1A:E6:DA:0C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF63EBBFFB38676F9C6842040
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4188c0c0-6f9b-3dd1-a5aa-91ba7f20ad31.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 129.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f6:3e:bb:ff:b3:86:76:f9:c6:84:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=2d6d71ef-5fce-40b4-88ae-d129c723e9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:75:ee:cb:78:12:79:ec:63:a3:70:76:35:
c7:78:6a:99:34:9c:fd:81:0d:17:91:ad:20:cf:f2:
46:c4:ae:6e:67:86:ac:57:bd:33:b7:38:ad:4b:f1:
73:a5:f6:d0:f0:6e:d6:78:cd:73:9a:23:6f:e0:43:
02:14:b2:5e:cf:26:3e:7e:94:91:d0:cc:7c:8e:be:
98:23:56:31:74:42:93:bf:58:d7:90:fb:53:15:f3:
13:2f:79:37:63:cb:a6:f9:04:70:9e:a3:bd:26:72:
29:d7:ab:26:33:ef:3c:3f:3a:57:f6:1c:ec:84:7d:
4f:1f:6d:49:14:1d:24:3e:50:66:00:29:f5:a5:44:
c0:dc:45:bc:1c:ac:cf:0e:b4:69:e9:e7:7b:10:fe:
4b:8c:4c:fd:11:80:e0:7d:4b:ae:c7:3c:7e:06:8b:
7d:a9:2f:38:8a:9d:09:f4:98:27:50:f5:47:5c:9f:
61:45:bc:51:73:15:08:1e:b5:4d:3f:20:09:00:d2:
b4:e9:fd:32:4c:cd:8f:74:10:34:9b:c0:e8:80:ed:
97:44:3e:44:c6:32:70:ac:97:a5:da:d9:a3:c6:45:
e2:a2:64:1f:7b:36:27:89:83:3c:d9:1a:2c:72:6a:
65:03:57:09:d1:46:89:8d:1f:94:ab:05:10:46:2e:
6c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E3:9D:E8:86:52:11:C7:DF:0E:F7:00:88:93:FE:0D:1A:E6:DA:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4188c0c0-6f9b-3dd1-a5aa-91ba7f20ad31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
129.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:74:31:5e:ac:b3:d7:90:4e:e4:3b:94:af:4d:e8:f2:53:32:
64:77:5a:5d:27:1d:5f:82:c6:01:69:87:5f:a9:e0:1d:27:92:
3d:6e:96:ec:5a:92:30:1c:bf:f8:05:9d:a9:9e:90:43:6a:24:
e7:99:da:68:94:a8:62:07:24:fe:a3:1d:3c:0b:84:2d:bb:b1:
ca:b5:92:5a:5d:67:19:db:57:65:82:00:cc:85:30:dd:6d:ff:
d5:a9:2e:42:96:31:b7:92:b9:ca:21:4d:a3:e5:d0:28:43:dc:
b3:c2:ff:36:2f:4d:d9:db:e8:41:e5:a5:2e:86:1c:d8:6d:24:
a6:f3:28:53:2b:b0:da:80:86:9f:42:c2:e8:28:7e:b8:17:dd:
31:71:7f:68:87:80:4b:a5:d7:c1:f1:51:72:a8:3b:3e:15:f2:
f4:ce:ca:9d:29:57:25:02:fc:5b:ea:76:59:b3:2c:61:b4:30:
2b:03:bf:84:ab:02:57:d7:d8:8e:53:0b:f6:d8:8d:bb:f4:7b:
5d:23:f6:b6:3d:99:51:f4:34:2c:2b:48:a1:47:eb:5b:c8:5f:
4e:64:82:8c:37:7a:dc:91:25:cc:d7:4e:af:4c:06:d5:84:62:
c9:4c:66:21:92:7e:72:23:ea:d0:07:6d:2f:c6:68:1d:c3:be:
f2:dd:6a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:07:00 2025 by rpki-client