Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/849b54dd-5e6f-308d-814b-16621fa1a97c.roa
File: 849b54dd-5e6f-308d-814b-16621fa1a97c.roa (raw, json)
Hash identifier: UXnrM+nBoD0TaQ9MevnFDFPYT8MK4b4f+DlTlcqF8EM=
Subject key identifier: F5:C6:D0:56:52:D4:5C:98:E8:B2:E2:CC:7A:03:87:F5:05:D7:71:CE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409AB2423247E126E35EA6E1C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/849b54dd-5e6f-308d-814b-16621fa1a97c.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 130.101.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9a:b2:42:32:47:e1:26:e3:5e:a6:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=38a33888-7bbc-4031-a7f3-0b576d61b74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:56:04:3d:72:b0:00:ab:1f:68:6c:a4:51:
8b:11:59:31:f0:9c:3d:7e:a8:27:cd:65:1e:c4:81:
ad:0a:ba:2e:8b:6e:da:16:0c:46:2d:4a:9e:cf:fc:
94:60:d7:28:0a:c7:21:f2:49:36:f0:72:ce:0b:a1:
1e:38:38:64:ac:ce:92:16:05:0f:6b:79:38:3b:3d:
9c:30:7f:00:44:61:d3:c4:67:30:e7:73:62:d8:b5:
39:37:d3:4d:0a:6b:7d:e3:38:4b:5e:4f:f9:24:fb:
2e:1b:0f:9f:01:d8:1a:f0:89:08:38:39:dc:c1:71:
88:41:85:f9:92:7c:aa:2b:e9:0c:44:a8:be:cd:66:
d7:61:4e:2b:6a:8c:bd:b4:6a:bc:ae:26:98:43:10:
04:1d:f1:1d:4d:82:7c:34:01:c1:d5:c7:17:4e:50:
31:fa:37:25:d1:a8:f3:97:34:4d:17:16:02:69:26:
5d:43:28:17:78:da:2b:96:20:b7:45:9a:cf:c0:33:
30:11:89:37:09:27:db:3b:17:be:9a:02:40:15:77:
6f:35:2d:1d:ec:0e:02:07:61:58:d8:2c:bf:ae:5a:
e4:c3:2f:d5:7c:42:ac:04:71:63:c5:5c:2e:e2:05:
f7:46:e1:e0:54:b7:57:40:7c:8c:5d:16:fb:47:75:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C6:D0:56:52:D4:5C:98:E8:B2:E2:CC:7A:03:87:F5:05:D7:71:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/849b54dd-5e6f-308d-814b-16621fa1a97c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.101.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:fc:ec:5f:0a:77:df:7d:00:82:db:37:8d:21:d2:7d:d2:13:
05:2c:3c:c4:5c:d2:f2:ae:e5:c1:dc:f5:aa:44:23:12:2e:28:
66:80:f6:f5:88:fd:fa:23:17:99:61:23:94:5c:d2:ff:a6:9e:
fe:c3:4d:32:9b:67:74:09:c5:18:8a:54:52:70:00:d6:55:82:
51:8c:61:d1:fa:81:9c:09:d7:9d:6f:8f:fa:f5:ec:dc:6c:47:
fd:d5:9f:45:69:f9:a8:90:cc:93:6b:45:79:18:ce:87:3f:5b:
08:ce:85:d0:62:56:4a:4e:73:1a:14:37:16:88:ae:7b:5f:ec:
e8:76:69:21:ae:4f:25:26:5b:1e:e5:c9:23:6f:97:73:a5:bf:
05:fc:40:25:8b:56:78:93:2b:e9:61:20:e3:1f:64:51:fa:83:
e8:42:fa:74:6b:f3:c0:22:bc:26:f4:63:e3:20:fb:0e:ed:8a:
98:fd:d9:52:38:99:3c:26:63:f3:8f:cf:04:86:74:4e:cd:f5:
ed:5e:80:cf:d9:d1:43:cd:38:bd:e3:63:e9:7b:df:61:42:28:
d6:45:c3:56:df:7f:37:7c:ee:e3:16:75:a6:7c:75:40:bc:03:
c5:80:d7:b5:58:a1:9f:40:63:16:56:ce:27:a4:d1:84:51:9e:
47:43:1d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:38:51 2025 by rpki-client