Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7fb5a46d-78d1-3e38-8858-538eefb7c096.roa
File: 7fb5a46d-78d1-3e38-8858-538eefb7c096.roa (raw, json)
Hash identifier: jrCQPkRzCEna3srXXkZr8NTozB8n00BQ/ByZcslSU/M=
Subject key identifier: 33:17:A3:3E:91:79:EC:13:17:D2:6A:8A:15:D1:D2:83:53:53:94:C1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584019420EA06A200DDA52726500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7fb5a46d-78d1-3e38-8858-538eefb7c096.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 52.124.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:42:0e:a0:6a:20:0d:da:52:72:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=44377aea-cef5-420a-a784-40da45257d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:b5:0e:5c:92:1b:9d:e2:ed:bc:0a:4d:c9:
c6:61:9e:7c:1e:c5:4c:0d:fd:95:68:74:38:06:27:
f5:e8:70:17:ae:c7:0d:d7:49:ca:05:0a:b9:53:87:
c0:53:c4:1e:ed:f1:47:79:0e:d5:50:40:bc:eb:31:
d5:89:12:95:44:a2:08:ab:89:53:4d:71:2c:fb:28:
c3:ad:9d:76:40:af:92:c2:4e:53:2f:5b:39:59:f5:
be:22:91:4e:2a:75:8b:7f:e5:df:ba:c8:31:4a:55:
df:52:5a:59:49:94:28:94:b1:e1:73:d4:c5:8f:fa:
0f:5f:35:2e:91:c0:cf:27:c0:6f:d4:28:e5:55:da:
35:57:87:32:69:d9:30:65:38:8c:bd:25:5a:a8:9e:
c9:4c:86:cd:39:8b:3d:5f:a0:c1:cc:b7:ec:c9:9a:
41:0f:6f:22:bb:12:f5:5a:a9:00:be:20:4e:4d:93:
f0:66:e1:b6:71:68:d3:71:15:8e:4e:dd:d5:41:a4:
de:68:62:93:58:61:9f:c3:f6:ae:52:6f:d8:be:ee:
00:b6:b5:e3:07:cd:f6:5c:9a:01:bf:5c:a6:b5:85:
69:51:62:86:ab:8f:87:57:47:69:8f:ee:a3:ae:30:
b1:41:68:cd:26:42:c7:9b:bc:59:2b:25:0d:ab:c5:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:17:A3:3E:91:79:EC:13:17:D2:6A:8A:15:D1:D2:83:53:53:94:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7fb5a46d-78d1-3e38-8858-538eefb7c096.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.124.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:11:a5:25:57:c8:36:df:b4:ba:57:7f:ef:1c:da:0c:d6:c4:
39:a1:1b:64:60:01:5d:57:1f:35:54:d3:31:34:af:ff:b9:81:
71:6b:32:81:20:fe:42:08:f6:c3:f8:56:02:45:a9:fb:39:2d:
37:3b:5f:50:50:b8:a9:54:4a:d8:10:71:f8:93:8a:ca:9a:1d:
72:04:0f:50:0b:b3:05:0c:9e:43:20:c7:5d:c2:d4:69:61:f6:
69:4f:f0:e0:13:cc:47:a7:77:90:21:dd:7c:92:31:e9:e6:16:
8c:0a:af:ad:07:34:e8:a9:06:36:20:a4:e1:14:24:83:98:ef:
35:37:57:85:cd:6e:f3:3d:d8:cc:9b:05:5d:5f:39:bb:f5:a3:
b8:ac:8e:61:33:5f:61:fd:c8:60:d5:44:85:b6:4c:26:e3:18:
36:f7:b5:9c:6e:c7:72:c3:8a:35:a8:84:b7:bb:27:da:59:7d:
9c:e9:27:ad:d4:67:9b:bd:52:54:3b:28:7a:20:a3:86:e3:6b:
c9:ae:0d:7f:9e:94:12:d0:11:23:a9:cd:0d:da:45:6d:7c:12:
79:25:61:7b:b9:05:89:88:c8:ca:1b:1a:61:a0:7a:c9:c0:0d:
15:89:2b:a0:74:3e:05:97:f9:d7:ad:a3:bd:fe:64:c3:05:1b:
f5:bf:30:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:21 2025 by rpki-client