Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8ea2ad0a-d494-3db3-93a5-f6870facf904.roa
File: 8ea2ad0a-d494-3db3-93a5-f6870facf904.roa (raw, json)
Hash identifier: lLPsbHejxGrRFmmmN6LieBVo13QzR/VlKB8oAkAsbzk=
Subject key identifier: 5D:25:6A:B0:F4:CD:78:B3:C3:81:80:EC:AF:F2:3A:73:8D:E9:D9:59
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0A75DFE06B35412688952B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8ea2ad0a-d494-3db3-93a5-f6870facf904.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 129.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0a:75:df:e0:6b:35:41:26:88:95:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=3abe4df9-7cc7-40e5-97b1-874323b1a46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:56:01:db:45:0f:f4:d7:fe:18:0e:bd:8b:24:
3d:19:26:66:14:77:10:ea:ec:02:3c:a5:7c:f6:7e:
b1:db:43:49:6c:f3:e1:c1:86:2e:33:26:c8:df:7f:
c0:30:19:41:64:86:86:7d:bd:3c:fe:14:d9:0c:53:
3c:f7:91:25:27:3f:b7:7b:fe:d7:fe:c5:ad:e9:d8:
86:29:a9:46:bb:d2:93:39:d7:c3:db:4c:35:cf:9a:
11:be:45:ff:dd:1a:e4:e5:36:6c:3a:bd:73:91:5c:
74:ab:9a:27:8f:97:b0:85:22:92:80:15:85:ad:17:
d5:26:77:07:63:44:a4:a5:d0:15:33:41:db:14:f7:
21:f3:67:4d:09:41:38:da:2d:fc:cb:0d:dd:64:69:
ec:68:6d:c8:af:ba:72:47:2b:2b:7c:36:6a:4f:5b:
83:6c:88:04:a7:b8:f0:2b:c2:7e:7c:61:66:c8:33:
fa:7f:fc:c7:82:46:15:9b:d5:64:e3:91:a2:0b:c9:
f7:8c:1f:f9:5f:0d:58:34:98:1b:48:5c:33:64:86:
f1:2a:01:48:cb:53:14:b1:94:88:d2:e7:7a:29:5f:
ef:74:ab:99:6e:a4:7b:d9:c8:6d:ff:a8:13:33:2a:
e7:c6:c4:57:77:d7:9a:71:0e:83:8b:6a:ef:cb:d9:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:25:6A:B0:F4:CD:78:B3:C3:81:80:EC:AF:F2:3A:73:8D:E9:D9:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8ea2ad0a-d494-3db3-93a5-f6870facf904.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
129.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:dd:d5:b1:ff:94:ed:70:31:5e:16:19:ba:72:90:b7:7f:34:
bb:25:9b:7a:cc:86:a7:17:de:8a:f2:24:86:2a:ca:67:ec:af:
c6:11:26:89:18:13:58:84:f3:4a:08:27:78:ca:83:9e:ea:a8:
de:83:ee:69:84:56:70:c9:1b:8b:d2:d4:de:57:4b:1b:19:92:
97:ec:98:fb:44:ad:ea:a0:04:3e:29:17:0d:0c:ca:f9:f6:b4:
21:fa:a7:f2:2c:bc:6b:cb:9e:09:8a:ad:93:bf:41:46:71:21:
b2:9e:6e:4e:a7:00:0d:e3:a2:5a:b0:3c:54:c7:10:cf:08:01:
8d:e4:39:c4:69:74:f9:59:03:8b:fa:01:6c:51:fd:94:b9:91:
b3:8f:b6:af:e0:de:ea:09:c4:22:85:72:85:c2:2b:ee:92:a1:
dd:99:b3:13:e8:1c:63:5a:84:d6:c2:94:ed:ea:8c:a0:4d:8c:
41:e1:66:53:89:b3:e0:b8:6d:fc:03:9d:6b:0a:a2:d6:be:dc:
90:6f:52:d5:05:6a:ae:29:6e:7d:8c:ca:5c:0e:ae:97:3f:ef:
88:55:1d:78:17:36:d7:6e:3c:28:18:f7:48:bb:57:6a:01:dd:
59:be:37:7d:89:05:a6:63:7e:a9:fc:1c:81:c2:8c:d6:23:26:
38:17:5c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:39 2025 by rpki-client