Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aca77526-67ae-3ae6-8d1c-853b5faef8d0.roa
File: aca77526-67ae-3ae6-8d1c-853b5faef8d0.roa (raw, json)
Hash identifier: SF0TwNc9peoa3f1CCFFkB9Pq7h89GXc95Ed1c75rZvE=
Subject key identifier: D6:4F:2E:E8:9C:73:CA:DE:9A:0F:BC:AF:25:2F:C6:91:D9:55:B0:7A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1D6C8A9975093FCA1AB35000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aca77526-67ae-3ae6-8d1c-853b5faef8d0.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 47.128.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1d:6c:8a:99:75:09:3f:ca:1a:b3:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=cb2fc52a-4fda-45d2-8168-e0605b6d8da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:1c:0c:cc:e4:9f:9f:8e:71:6d:84:21:ed:
04:f8:a3:1b:94:42:bc:f3:55:84:6e:9e:a8:ce:f5:
6f:12:75:09:c0:d9:19:e7:97:d8:7b:25:c1:07:4b:
62:99:d7:87:d3:41:cb:3e:d1:8a:ed:4d:e9:34:71:
c1:33:11:f1:63:ae:2c:d8:77:5b:4d:1b:8a:93:c0:
b1:9c:42:c6:8e:e2:1c:36:40:de:38:18:45:57:2b:
dd:c6:ff:7a:40:12:63:34:84:0e:71:7d:b6:f5:1e:
da:7a:27:2f:9f:4e:55:f0:95:1e:4b:4b:19:ae:4f:
5a:25:37:69:29:e0:14:3e:f4:eb:ef:60:96:1f:20:
b7:02:a9:e2:03:d9:4f:16:8e:2e:2b:b0:84:47:48:
63:4e:9a:4e:a8:2b:13:c5:7b:11:26:5b:3e:1a:97:
39:8a:90:ba:d1:88:d7:01:11:c1:b6:e2:ba:19:ec:
57:ad:44:0e:04:b3:bd:d5:8a:8e:7a:b2:16:1f:f4:
21:8f:77:92:7b:3c:6f:27:dc:70:8f:c1:d2:9d:48:
1a:1e:fe:ab:d3:9f:b1:72:bc:98:4b:d5:9e:f4:b2:
3e:b3:76:ae:e4:99:06:49:c7:ee:14:35:a8:8b:bd:
a9:5b:93:9a:ea:16:78:e9:81:de:2b:5b:87:2d:6c:
af:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4F:2E:E8:9C:73:CA:DE:9A:0F:BC:AF:25:2F:C6:91:D9:55:B0:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aca77526-67ae-3ae6-8d1c-853b5faef8d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
47.128.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:2a:0f:f8:90:56:bb:c1:9e:70:45:96:0a:7e:ce:fc:23:4b:
8e:35:d9:70:60:ee:d2:a2:67:4b:b0:66:30:d4:87:86:eb:1d:
16:c5:b2:3b:f9:57:14:92:1a:08:21:99:15:90:70:c7:0a:e6:
9a:8d:4b:8a:cb:40:40:53:53:5d:65:ec:4c:f4:d6:b8:84:84:
76:83:90:1b:d1:90:87:91:fd:96:0b:12:42:76:54:34:3c:26:
a4:62:49:cf:20:e5:14:01:4e:6c:1f:b5:26:08:cd:8b:27:1c:
b4:bc:93:68:ca:18:fd:70:91:ed:0e:79:82:d9:72:cc:da:c6:
4a:24:15:fd:78:18:0b:12:15:b3:ef:8f:69:3e:bc:65:7d:ab:
29:62:22:cd:07:75:ef:8f:5d:65:cf:07:9f:fa:d8:2d:fa:df:
67:78:54:70:9f:53:99:85:47:e2:e0:92:7f:f5:ef:b7:0d:2d:
2b:34:27:63:11:b9:36:72:e3:7a:a9:44:bd:dc:fa:33:33:ba:
17:f8:07:66:a7:90:9e:0f:61:ba:bb:74:d4:80:f2:a0:e4:1a:
dc:35:93:6b:49:47:e6:67:4e:e7:4c:be:a6:e9:95:c2:23:5e:
37:4d:26:99:4d:3d:f9:fa:c2:9b:47:e8:ff:69:48:3e:4b:32:
d7:b7:47:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:34:07 2025 by rpki-client