Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/74a0bec8-3885-3027-a217-4aec0d2af842.roa
File: 74a0bec8-3885-3027-a217-4aec0d2af842.roa (raw, json)
Hash identifier: FjQHMmmVbP6A6HcTeSN9DoiR6iWVyCBiPOjPXAsM9Q4=
Subject key identifier: 1B:08:38:D2:8D:37:60:B7:9D:A5:E4:13:5E:D3:62:F3:BF:0F:82:41
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584013C3545EFB79E914CE0F5C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/74a0bec8-3885-3027-a217-4aec0d2af842.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 128.125.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:13:c3:54:5e:fb:79:e9:14:ce:0f:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=362e2016-6173-472f-bfe3-387e464bd822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ea:63:9d:a0:d1:a5:7d:e3:76:b7:00:82:61:
47:d3:2c:fc:f4:7d:7e:da:ab:4c:00:c7:03:71:72:
da:c9:a9:d3:1d:47:61:82:29:76:64:ba:2b:71:29:
30:66:33:22:64:ef:90:a5:81:bc:a6:ba:72:47:9d:
b0:55:07:36:12:08:02:64:ce:12:e5:aa:f8:63:15:
f2:ff:6c:99:6d:5a:bd:ea:53:6f:08:5d:09:31:75:
6a:13:ad:5a:ac:da:35:5b:8d:3c:c3:5e:0f:89:63:
8d:a3:96:06:1e:fa:f2:28:8b:15:7b:3a:1f:ed:bd:
2d:fc:dc:3b:08:e0:40:c5:03:7a:de:ed:51:d3:20:
45:e4:08:3d:2f:4a:87:c5:66:9e:20:0c:b8:39:02:
51:da:78:d1:00:5b:71:8c:27:63:bb:88:3d:66:b7:
a4:ab:40:07:61:4d:4b:bb:17:26:59:0a:56:5b:d3:
c4:83:c3:86:32:0b:06:a4:c1:12:68:4e:f3:3b:c2:
ca:62:9c:f7:1c:53:ac:0b:98:be:fa:0e:00:c5:b0:
ba:7a:67:dc:fd:cc:df:88:48:93:aa:f0:8c:5b:89:
85:5a:96:2f:98:1b:36:e6:fd:d8:44:94:d9:5e:90:
d9:d5:a3:22:ee:97:95:25:27:e3:c9:5d:47:eb:24:
2d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:08:38:D2:8D:37:60:B7:9D:A5:E4:13:5E:D3:62:F3:BF:0F:82:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/74a0bec8-3885-3027-a217-4aec0d2af842.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
128.125.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:39:a8:ad:0f:42:a0:84:03:4b:d0:69:5b:40:7d:97:28:12:
93:e4:dd:54:49:38:63:1d:ef:88:98:51:f0:54:18:ce:a5:70:
9d:3f:f5:02:96:46:3f:c7:63:4a:83:93:5a:f5:d4:d9:98:4b:
6d:f1:7b:a5:d3:00:d2:33:f2:16:8c:92:41:91:b7:4c:a5:d7:
a3:39:ab:b6:df:e7:ab:06:74:8f:28:a5:4e:4b:ee:af:47:99:
0f:ce:28:66:40:cf:78:35:4e:bb:d4:c4:6e:b9:aa:30:20:20:
b7:53:dd:a3:70:d8:62:a1:12:98:3b:02:2a:23:f6:27:4e:8a:
a2:4d:93:81:8a:34:58:f1:f2:81:0a:c5:3a:29:22:51:68:05:
03:ce:c1:0f:3d:b9:68:b0:6e:09:68:76:8b:c3:f5:81:3c:32:
b5:d9:2a:02:98:ca:0a:ba:70:34:c6:ea:f7:b8:59:7a:3d:c6:
bc:86:09:bd:be:1e:f9:01:e3:0c:6b:f2:30:97:85:47:b2:20:
f5:b5:87:9e:33:7a:4c:b8:11:4b:78:2b:f0:49:fb:f4:54:ec:
c3:60:33:fb:6f:db:bf:17:c1:5a:ed:0b:0f:a9:b2:a8:26:b0:
37:92:7a:0d:8b:2b:76:bd:e8:34:9e:9d:69:cb:cd:42:4f:7b:
42:b7:27:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:24:03 2025 by rpki-client