Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9096c8d4-01fa-3284-b4e6-bcd4ffcb2f48.roa
File: 9096c8d4-01fa-3284-b4e6-bcd4ffcb2f48.roa (raw, json)
Hash identifier: K5nsH7IkGMk/qGHMa6qPnkN1DBitp9pgYDzPUDSV7iM=
Subject key identifier: 4F:BD:2E:5B:87:D8:B8:00:DE:B2:62:08:DB:05:EC:9E:87:D6:0B:5A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7747CF25AB766BD361901300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9096c8d4-01fa-3284-b4e6-bcd4ffcb2f48.roa
Signing time: Tue 04 Oct 2022 12:00:00 +0000
ROA not before: Tue 04 Oct 2022 12:00:00 +0000
ROA not after: Wed 09 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 128.125.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:77:47:cf:25:ab:76:6b:d3:61:90:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 4 12:00:00 2022 GMT
Not After : Nov 9 05:00:00 2022 GMT
Subject: CN=5754a7c7-80ac-48b1-b905-d6b2b4602742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3a:4a:1d:3e:04:f4:20:a7:dc:82:28:10:b5:
d3:72:8e:d4:b2:1e:7b:53:37:93:07:da:4b:e2:7d:
70:9c:8b:97:e6:f5:76:a9:b5:a3:a2:62:11:02:be:
67:26:96:76:61:37:ac:a4:92:fa:bb:b6:c6:f2:52:
04:38:14:70:d4:9c:7b:6b:9c:6f:b9:f8:d5:3e:00:
18:02:64:08:b5:51:e2:b3:30:88:e1:83:57:f3:4f:
db:21:ab:b7:97:0b:c9:63:53:6d:4b:93:95:41:3e:
ee:4b:d8:5f:67:db:e4:da:eb:ce:16:a8:e9:5a:f5:
0d:ab:15:8c:b4:31:28:da:36:a1:fb:ed:e8:b2:35:
d0:6b:08:58:79:c6:9c:d1:17:20:cb:5f:5a:ed:44:
24:47:12:47:17:34:41:8f:69:79:39:5c:a0:40:92:
21:69:3d:c6:30:7f:63:68:27:61:8b:86:b0:88:e2:
84:78:ae:01:a0:06:39:67:9e:3a:ca:b5:95:28:88:
ec:43:8a:8e:51:c3:43:a5:9d:05:62:b5:64:37:4b:
db:9f:b9:93:12:03:fb:fa:d9:1f:ff:6a:26:d0:87:
81:d1:e5:16:7e:4c:03:be:5d:88:17:4d:4b:d9:3b:
52:ff:ee:dd:55:a3:c2:d9:7c:23:90:9a:54:f3:44:
86:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BD:2E:5B:87:D8:B8:00:DE:B2:62:08:DB:05:EC:9E:87:D6:0B:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9096c8d4-01fa-3284-b4e6-bcd4ffcb2f48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
128.125.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:41:39:51:0b:00:97:c2:5b:f5:0d:95:18:79:55:60:9b:8d:
11:d3:31:c4:79:06:e2:55:32:4e:00:ea:f9:3c:68:3a:11:03:
78:ef:3e:fa:7a:5e:d7:98:67:97:ef:db:0b:0b:b7:d3:e6:13:
bf:f2:aa:12:59:6e:72:69:e8:20:f0:7f:22:50:62:d8:38:95:
ab:6d:46:6b:79:e2:4a:0e:29:b0:1b:66:c0:a4:0c:ef:6a:1b:
a5:8f:10:de:f0:b3:27:8c:fc:b0:8d:fc:03:c3:b2:14:ef:b0:
c6:c5:fe:68:2f:c5:fb:d6:ca:f9:cf:5c:9a:4b:a1:cb:f7:a0:
af:61:1b:ec:60:bd:05:de:5e:ed:11:a7:ca:ed:d0:d0:74:76:
cf:46:a9:da:a6:4c:2b:14:0c:19:5c:ce:05:64:3b:7a:46:1f:
55:85:96:17:ae:e8:7f:5f:ac:8c:16:4f:b2:bc:1a:5f:c8:24:
b5:c6:60:61:53:47:df:f4:93:f2:88:9a:d9:c3:b0:94:26:04:
c8:2a:0f:8e:ae:2c:3b:3a:49:b8:f0:0d:7e:6a:63:cc:89:24:
46:89:79:10:31:a4:81:05:a9:9d:0b:21:f0:4c:a3:d7:4f:f8:
d7:45:c8:79:38:29:a4:12:b0:c4:b8:19:d7:a5:e9:08:a0:9c:
d1:5d:55:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:27:11 2025 by rpki-client