Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a0e97e33-71c6-34c1-8e41-7e0f08422c90.roa
File: a0e97e33-71c6-34c1-8e41-7e0f08422c90.roa (raw, json)
Hash identifier: 3rf5IonM3nROGXh96P8CoA/exqO/ZiSEnj6Z1WoUhlI=
Subject key identifier: 3B:E7:62:C7:8B:16:F1:03:80:8D:BE:91:7A:97:E1:CC:0B:1F:56:D6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F081AA948FC704CC275F01B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a0e97e33-71c6-34c1-8e41-7e0f08422c90.roa
Signing time: Thu 25 Aug 2022 12:00:00 +0000
ROA not before: Thu 25 Aug 2022 12:00:00 +0000
ROA not after: Fri 30 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 47.128.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:08:1a:a9:48:fc:70:4c:c2:75:f0:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 25 12:00:00 2022 GMT
Not After : Sep 30 04:00:00 2022 GMT
Subject: CN=4c6212b1-b6f2-439b-9469-ee2675be0927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1d:3a:3f:12:70:3c:08:d9:2f:92:ce:d6:50:
48:4a:d2:3c:a3:12:90:3e:44:95:fd:62:52:9a:96:
8e:4c:0d:cc:5b:30:20:8c:50:e2:52:3d:73:1b:8f:
63:11:43:f8:b4:d2:90:e5:36:7c:65:39:eb:85:cd:
ab:7d:76:89:bc:61:83:79:8e:a4:ba:15:ec:8f:51:
5c:71:6d:93:78:38:1f:7e:19:4d:10:4a:e6:c5:ba:
1d:98:c3:80:3b:4d:d8:d8:c5:a6:d7:85:d0:2d:c1:
f0:30:3f:e3:d1:ab:10:d5:b8:8c:f8:09:5c:a5:b9:
77:53:93:68:9a:9f:fc:d0:ff:9d:14:ec:c8:f4:5a:
87:02:92:79:9e:fb:53:c7:03:04:1d:7d:74:f0:87:
65:68:03:0a:d1:9f:a4:6c:f5:23:69:5b:4a:90:50:
49:dc:a1:e1:36:3c:0c:b8:fe:e9:7c:2c:2e:fa:2f:
91:17:ed:b4:a5:e0:4c:bc:ff:eb:b7:3e:14:33:e7:
fc:21:1f:a2:aa:87:cc:41:c3:4e:87:da:a4:22:43:
82:9e:8c:21:35:b2:28:88:27:f0:5f:b7:ac:6c:c8:
04:fb:32:e5:e2:0e:32:6b:63:67:48:17:56:7f:fd:
b8:8a:58:c7:fc:c6:d0:f5:08:a8:d6:c8:9a:79:2a:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E7:62:C7:8B:16:F1:03:80:8D:BE:91:7A:97:E1:CC:0B:1F:56:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a0e97e33-71c6-34c1-8e41-7e0f08422c90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
47.128.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:ff:e0:fb:f6:56:ca:91:d5:da:84:c8:1a:6c:db:84:36:fe:
0d:08:92:bd:33:ac:d9:9b:d0:87:aa:0c:b5:16:1d:60:1b:ee:
23:72:09:d7:96:ae:0b:32:a9:0b:b9:68:73:33:a3:93:9a:06:
e5:31:b9:94:2b:c6:a7:2a:a3:5b:65:bc:fd:55:95:f9:6e:f9:
7f:a0:5a:12:4a:43:f9:ff:49:f3:fa:da:b1:58:c6:e9:fb:46:
64:57:43:b1:59:18:1f:69:7a:33:25:9c:ae:17:92:24:77:81:
29:27:03:27:da:29:e3:38:5b:f7:52:ec:3c:9d:ce:16:9b:24:
d1:d4:ae:7d:e3:fb:12:9d:15:03:13:42:29:89:61:94:d6:4c:
8c:54:f2:7d:6a:a3:c7:e1:ae:00:82:cb:12:5d:b6:f0:ca:63:
9a:e5:cc:73:30:8b:f2:84:01:d9:79:05:31:87:53:39:da:d7:
e7:33:6a:ea:46:8d:29:95:93:b4:69:89:84:eb:22:49:35:af:
ea:17:56:7b:45:2d:41:3f:bf:29:4c:2a:08:c1:8b:09:4c:d0:
55:20:e6:41:5a:23:e1:f9:a3:a0:a2:f9:48:45:7c:86:01:db:
a8:f2:e0:68:34:22:fb:71:de:14:9f:1d:49:9f:d8:5a:71:3c:
51:b6:a8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:55:50 2025 by rpki-client