Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/55e05431-14fe-37d6-a729-7ac766891a7d.roa
File: 55e05431-14fe-37d6-a729-7ac766891a7d.roa (raw, json)
Hash identifier: 9uUhbT4tZnKeAh1NXEeEZx0BJH7wj5Vg+p+3pbi22wM=
Subject key identifier: 24:C7:82:76:A0:DB:4C:D6:B5:8C:84:83:A8:B0:8E:F2:53:C9:DD:09
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EED5227B770032CBD0B885D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/55e05431-14fe-37d6-a729-7ac766891a7d.roa
Signing time: Mon 15 Aug 2022 12:00:00 +0000
ROA not before: Mon 15 Aug 2022 12:00:00 +0000
ROA not after: Tue 20 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 128.188.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:ed:52:27:b7:70:03:2c:bd:0b:88:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 15 12:00:00 2022 GMT
Not After : Sep 20 04:00:00 2022 GMT
Subject: CN=cd47d765-18ce-4b2a-b58b-0ce2b3406474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:39:8b:f6:a3:5d:1c:71:63:7e:f1:48:af:
90:f7:c4:fc:45:cf:fd:50:90:13:1e:0d:b5:71:8b:
7a:65:1c:a7:7b:01:5f:8c:eb:99:60:8b:da:7e:40:
6b:68:2b:5c:2f:3b:bf:3f:8e:0d:f9:68:c4:a1:a2:
ad:61:a7:d9:47:40:bc:ee:33:50:8e:90:5d:19:2f:
78:a2:bd:70:e1:e8:f8:21:22:a2:e9:f5:5f:1b:1e:
af:eb:fa:ac:b2:f5:64:48:b9:63:f4:2d:07:12:c0:
8e:e3:a4:71:01:a7:bb:95:2a:54:b8:56:d1:fe:5f:
72:c7:b8:c4:da:f7:b4:ae:ec:d2:c7:62:a9:d5:c9:
35:c5:8f:9a:c2:ee:a3:55:1f:ab:b7:fa:9b:13:1c:
02:61:49:24:c5:5e:45:9d:6e:cf:c6:df:6e:15:8d:
f4:a5:c7:6d:31:d1:7c:3a:7f:28:dd:37:a2:12:6e:
cb:48:60:52:a0:fe:f2:ea:06:79:40:4b:c0:f1:ca:
be:49:00:98:b3:94:22:f3:ff:f4:27:55:1d:d1:83:
4f:16:e7:8b:b0:aa:32:77:ee:1d:50:33:7e:d1:33:
1b:3d:8e:31:bb:19:b6:87:cc:4a:7f:57:07:64:0e:
c4:77:95:a5:03:db:ab:eb:dc:b2:35:f8:5c:42:24:
0b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C7:82:76:A0:DB:4C:D6:B5:8C:84:83:A8:B0:8E:F2:53:C9:DD:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/55e05431-14fe-37d6-a729-7ac766891a7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
128.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:fd:30:9d:f3:92:1c:4d:3d:a5:8c:00:49:35:cc:66:f2:33:
99:65:d7:02:85:a9:25:91:08:23:f8:50:d4:58:2f:bb:86:03:
4d:39:ca:c9:06:ce:0c:ee:58:09:de:f4:a0:d1:f2:96:d8:f7:
d4:75:3d:67:80:a3:54:f1:8b:26:64:22:15:41:4f:74:7a:69:
5f:a9:c6:36:c3:a8:77:8d:37:92:93:f5:7f:a8:7e:13:5b:6d:
cb:50:63:6d:65:61:df:1d:b9:b4:b8:d9:66:45:69:5e:92:ff:
13:92:1b:ca:a1:6c:04:cf:72:e5:02:0e:23:2a:66:c3:cc:ff:
02:83:94:07:b0:c3:13:3e:ee:9d:3c:dd:f0:25:bd:be:58:42:
5c:65:3f:07:c3:a1:e2:f8:e0:26:bf:fb:da:71:90:4e:d7:bb:
68:63:68:1f:97:79:7c:64:fa:5d:25:4b:78:87:86:57:5a:2b:
4c:35:76:47:08:d4:00:48:8c:7d:98:e6:22:b8:37:4f:40:1e:
57:29:56:08:fb:f9:a0:1e:11:a4:5f:d9:67:e1:7b:15:3e:5b:
a7:1b:1b:76:8a:f3:4c:ff:95:91:8a:13:2b:05:73:a2:de:90:
30:f5:0c:66:ca:2f:f8:91:d0:83:bf:22:2e:c2:17:9a:ac:54:
de:1f:4d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:32:30 2025 by rpki-client