Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/47b99985-cc1a-30d0-93f7-9dcdcd169dc1.roa
File: 47b99985-cc1a-30d0-93f7-9dcdcd169dc1.roa (raw, json)
Hash identifier: h/IzRLhZIK+vhHb5+DqUyNZFn+91mpiOXGQECZSgF/0=
Subject key identifier: 50:30:E7:8D:D3:69:67:1F:AD:DB:C6:F0:7D:8D:93:6F:37:A8:27:F0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CC81B2E865E926518C880E020
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/47b99985-cc1a-30d0-93f7-9dcdcd169dc1.roa
Signing time: Tue 01 Feb 2022 05:00:00 +0000
ROA not before: Tue 01 Feb 2022 05:00:00 +0000
ROA not after: Tue 08 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 130.101.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:c8:1b:2e:86:5e:92:65:18:c8:80:e0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 1 05:00:00 2022 GMT
Not After : Mar 8 05:00:00 2022 GMT
Subject: CN=cf7163ed-6f13-42bd-8689-71cbdd9c1e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b6:1d:52:3e:42:27:27:a6:40:6a:ca:12:9b:
65:68:21:a4:e3:f7:8b:3b:cc:ce:a0:c6:48:e7:79:
e9:0c:65:c2:fe:4a:59:9e:80:b3:29:08:19:be:bd:
65:f6:e2:3e:24:df:d4:0f:b0:08:c9:58:0c:4b:f5:
ae:b4:82:04:22:cb:91:d2:11:0f:81:c1:05:00:bb:
78:fd:b9:bc:33:32:bd:05:a2:c4:61:de:67:95:2c:
6e:73:10:a4:a1:e4:06:2d:65:f3:4a:2d:6c:15:23:
ae:d9:19:d1:af:aa:ee:9d:aa:ff:d3:f5:fb:86:45:
f3:66:3e:24:9b:44:86:3d:94:24:7f:34:03:b6:20:
87:6c:ab:8c:ec:68:a8:ca:07:11:22:eb:55:10:18:
ae:d3:56:c7:ca:06:65:61:cd:6f:3b:95:05:6c:dd:
94:1d:31:e1:31:83:83:08:82:eb:26:0c:02:8b:0f:
83:1f:89:02:41:a0:e2:c9:cb:bc:7c:c8:b3:d5:1e:
4e:0c:4e:27:df:3b:3f:26:e9:db:73:6b:a0:57:1c:
e3:36:a7:c3:55:c9:3b:27:ee:4b:5a:91:67:b4:7d:
73:12:f9:81:2a:e2:c0:c7:68:ff:f1:c0:2d:72:fe:
e2:4d:2f:5e:01:72:71:7a:0b:2f:09:52:f5:2d:b9:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:30:E7:8D:D3:69:67:1F:AD:DB:C6:F0:7D:8D:93:6F:37:A8:27:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/47b99985-cc1a-30d0-93f7-9dcdcd169dc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.101.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:16:3f:31:a2:40:27:89:b6:ac:4c:ed:87:23:e6:7f:28:57:
e8:ba:ac:10:c9:da:16:38:b2:de:82:8a:45:a4:2a:63:45:6c:
48:48:d8:b5:35:d2:52:df:a8:33:27:b8:9b:3c:bd:1f:ac:b1:
61:44:e4:39:18:27:6d:ab:c3:7e:52:8f:c8:0c:af:af:e0:58:
3c:b4:5f:07:6a:ea:b7:fe:a9:7e:71:37:37:58:7f:a4:9e:37:
2a:a0:19:b6:7b:c1:46:fd:5e:5d:54:78:34:29:1d:8e:57:c6:
0d:34:1e:1d:be:5c:74:15:1d:64:30:8a:b3:b6:fe:2b:5d:ab:
bc:84:d1:37:73:ac:f8:4a:94:52:2b:f4:09:0f:4e:b3:b4:0d:
41:bd:33:ca:f8:55:83:21:0b:1c:01:fb:d3:1c:e8:5a:e2:0f:
7f:73:59:3b:2d:db:dd:78:de:74:9c:4c:43:d3:f1:ee:2b:48:
63:ed:f0:42:18:c6:0b:83:f4:fe:04:21:18:68:eb:88:bd:45:
7f:74:c7:b1:9a:b6:1a:27:f0:dd:31:f2:8e:d9:7b:42:8d:06:
37:bb:bc:c3:29:68:ec:58:b6:8e:d5:db:05:ae:08:a9:69:f2:
f9:49:e7:45:fc:4b:83:1e:c7:c3:c6:8f:c0:b4:35:13:95:cc:
0c:23:3a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:47 2025 by rpki-client