Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/730b00eb-d1ce-3b0e-9a37-3144782ddcbb.roa
File: 730b00eb-d1ce-3b0e-9a37-3144782ddcbb.roa (raw, json)
Hash identifier: X8hMROR4qbhNkRuZgs/g2EW8mlYKXpbffoYKvSAuz7Y=
Subject key identifier: 0C:D1:F8:4A:53:C2:0C:9A:1D:AC:58:BA:82:FD:AF:1B:F8:CF:98:CC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F55B8928FEF45FBBFBCA26980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/730b00eb-d1ce-3b0e-9a37-3144782ddcbb.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.124.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:55:b8:92:8f:ef:45:fb:bf:bc:a2:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=b5e77f57-45b9-42de-bbc5-dd40fc6e5683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ba:b2:c1:42:e3:0e:9f:28:8b:fe:7c:fe:42:
b0:4b:eb:76:ff:1b:c7:7f:a3:47:a1:d1:76:11:92:
cc:5a:a7:b1:3a:43:97:e4:cb:10:41:0b:49:db:01:
54:56:72:d5:64:a3:57:0a:97:f4:b6:b7:43:95:86:
5a:66:2b:99:26:47:0b:e8:c4:75:cb:ed:02:7e:54:
80:90:6e:01:41:54:4d:7f:a5:85:b2:a5:26:c8:34:
23:49:28:f8:b2:b2:39:45:28:07:4b:b1:a5:98:8e:
fe:ea:ca:7c:26:d9:67:bb:0e:a2:b9:5a:8d:37:c4:
8e:36:93:ae:c9:3b:73:02:59:af:99:d5:0e:6a:d2:
de:07:5c:3e:6b:b4:94:c7:51:90:f4:1c:c7:1d:48:
49:23:b2:1b:02:3b:73:ee:a3:d2:59:c3:2f:5a:c8:
5f:5c:80:2c:6e:74:e3:a4:eb:5a:a4:03:85:3a:c3:
ca:92:9f:f8:82:89:79:83:2f:f0:0b:b6:4d:34:33:
90:29:ad:e5:96:df:45:b2:3e:7b:1c:59:8b:ae:aa:
37:48:51:fc:1a:5e:c9:b7:95:1c:c8:be:6d:8e:1f:
8f:0b:cf:17:d6:8e:b9:e8:dc:6b:0d:f4:98:64:b9:
42:c0:5d:89:30:0b:d5:fa:76:07:1a:8f:4f:9e:c9:
8f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D1:F8:4A:53:C2:0C:9A:1D:AC:58:BA:82:FD:AF:1B:F8:CF:98:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/730b00eb-d1ce-3b0e-9a37-3144782ddcbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.124.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:19:f2:a7:8c:ce:63:0b:68:74:00:5f:3b:07:23:47:ea:a7:
52:31:8c:14:8e:45:01:78:4f:7f:59:5c:61:f1:81:b0:e2:a7:
27:94:52:9c:30:dc:f8:c0:24:65:ca:83:a1:62:22:66:c1:4a:
1d:d1:de:7a:c0:d8:20:91:7d:64:28:3d:e6:42:6a:ca:69:c4:
e4:cc:30:4e:29:8d:8b:e6:f9:ee:b9:78:f0:9f:11:70:a5:96:
e1:58:60:85:8d:d9:ca:b3:55:e7:1c:87:64:28:ee:10:f4:ba:
6b:2a:26:11:86:b0:f5:ea:52:e4:5b:85:69:d2:3e:9b:09:05:
5c:1e:cb:f9:4b:74:de:69:cd:21:c7:b1:ff:4f:33:19:98:94:
1d:13:cf:81:c9:d8:4f:8a:00:3c:25:18:a3:3b:aa:43:24:0a:
25:c8:08:19:79:51:43:8e:d8:d8:71:cc:fa:48:20:bf:5b:af:
20:65:81:52:af:cc:b2:90:e6:40:4d:4f:50:fc:02:1d:fd:65:
7e:85:1d:33:da:e2:9c:ed:41:31:08:a1:37:82:81:dc:4e:1f:
4b:4f:6f:72:9f:7b:de:8b:57:d6:d3:0d:82:8b:64:a3:c9:3d:
cc:03:c5:65:42:5f:0d:87:2a:38:d4:9b:95:e0:3d:ff:30:4f:
ce:99:91:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:39:37 2025 by rpki-client