Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7b7c131c-2529-3e91-8f74-0b9cfc89baf9.roa
File: 7b7c131c-2529-3e91-8f74-0b9cfc89baf9.roa (raw, json)
Hash identifier: JMhQE2f1JbxrObQ8P5CkEKOLYibboEhf/pOSkw1ERkQ=
Subject key identifier: CD:07:28:90:08:73:59:72:32:F5:90:A0:73:39:EF:41:36:36:96:F7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32CD4EC74C2B58FAE8A9A600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7b7c131c-2529-3e91-8f74-0b9cfc89baf9.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.124.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:cd:4e:c7:4c:2b:58:fa:e8:a9:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=a95e0ce2-b997-4742-a33e-9d8efe65bab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:50:5f:4d:85:01:cc:59:d9:db:d1:29:2d:d2:
86:ad:cc:60:aa:8a:2b:bd:2b:c0:7b:32:66:d3:7a:
ee:f2:43:83:3a:94:2e:5a:43:95:f9:59:80:8f:89:
d8:e8:da:1e:b9:56:d8:9c:32:d5:54:02:e3:d5:ad:
76:e1:70:77:f0:75:fc:37:3f:7f:39:25:0c:af:2a:
a5:36:1d:41:5e:2c:6a:90:71:74:fa:12:ec:43:3f:
45:0c:a9:51:a3:96:ea:dd:39:1d:02:c5:d6:e0:0a:
b3:1f:a3:cd:d7:f4:c6:d1:ce:b4:56:6f:65:4a:06:
69:5b:56:c4:a5:36:15:cd:38:23:83:d4:95:80:7a:
41:2d:aa:b0:31:a1:23:01:64:3f:e5:7d:cc:06:7f:
84:83:ba:ae:b6:d0:3a:b6:6c:33:d6:51:b6:bc:85:
d1:52:28:d6:a5:ce:e7:30:0b:e8:43:c8:81:c0:15:
0e:3c:6d:5f:2a:a2:61:8e:6d:40:a3:c8:ec:b2:d3:
2c:71:69:9e:ba:51:b0:52:96:ff:85:e0:f1:5c:5d:
df:a4:dd:fc:6c:f9:e7:b8:91:eb:76:41:b6:aa:d3:
8d:fa:15:8c:92:71:df:5a:25:79:38:f2:16:55:f3:
f1:ac:a8:58:99:cd:e0:27:54:b3:2c:f6:dd:1a:ed:
f4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:07:28:90:08:73:59:72:32:F5:90:A0:73:39:EF:41:36:36:96:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7b7c131c-2529-3e91-8f74-0b9cfc89baf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.124.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:bb:03:11:28:aa:8d:78:26:c7:71:18:4b:71:e3:9d:bd:af:
e0:3d:07:95:88:68:eb:8a:77:f0:46:e7:eb:45:d2:a7:b6:da:
22:35:1d:83:e4:ed:f4:36:e9:aa:1f:83:1b:ac:31:e9:fc:24:
8e:d9:da:cd:12:33:e7:5b:f3:ba:6c:48:00:6d:7a:a4:a0:5a:
55:33:74:66:cd:cf:b5:e2:2b:61:3e:43:f2:97:5f:a7:b4:8a:
36:8b:20:e4:6e:90:32:6b:73:18:de:d3:1e:b5:f1:b2:94:8a:
d4:28:cf:e5:e6:9a:eb:39:50:74:48:b8:57:ce:eb:b2:00:20:
26:f7:88:a6:d8:51:c2:ac:41:ed:d0:f5:4e:27:98:61:8a:35:
fe:b3:49:95:cd:6f:6a:a4:55:1c:62:55:77:d9:2d:59:e3:a5:
04:b1:a7:8b:19:66:92:db:de:fb:06:89:fb:bb:52:54:02:72:
23:68:5c:b0:5c:ec:52:46:cf:b3:51:30:e4:61:98:e1:1c:3f:
18:94:c6:7d:65:ea:d8:62:6e:0e:1b:5b:68:69:c5:94:4e:79:
fe:6a:38:30:ef:23:3c:00:6d:a1:16:cd:20:93:ab:c1:f4:4c:
23:19:24:37:3e:6c:f9:d2:af:c9:86:bb:0d:17:b6:e8:c3:a9:
93:7c:d2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:39 2025 by rpki-client