Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b023c264-775c-3a55-89dd-20c7d56554e2.roa
File: b023c264-775c-3a55-89dd-20c7d56554e2.roa (raw, json)
Hash identifier: mEfu9UQs9yxUxkqX1nNDRnd3+eSuVO07zJNNV6lwmDM=
Subject key identifier: 39:D3:1F:49:0A:81:14:93:EA:C0:6A:B8:09:51:64:60:9A:62:32:2E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F80F6C8F54426B26AC66F9280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b023c264-775c-3a55-89dd-20c7d56554e2.roa
Signing time: Fri 07 Oct 2022 12:00:00 +0000
ROA not before: Fri 07 Oct 2022 12:00:00 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 129.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:80:f6:c8:f5:44:26:b2:6a:c6:6f:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 7 12:00:00 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=cc9e9e60-0da2-41d7-9cae-8b503e867ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:70:0e:a8:51:a5:fd:e9:18:99:2a:a7:9b:
55:ca:e2:a8:7a:69:83:79:c2:fa:0d:ae:65:56:79:
b9:39:0f:08:5a:2f:ac:94:d8:a0:a3:cb:a4:d9:c4:
60:4f:a8:44:05:fe:f9:8b:fc:d2:1d:40:df:9c:6b:
75:5b:6c:5a:64:ca:85:c6:4e:60:8e:30:25:16:4e:
5a:35:db:a8:25:aa:09:24:7c:2e:0a:bd:f5:4f:a2:
17:d9:27:e7:68:86:d9:15:a3:94:db:ad:37:b1:d7:
be:ec:24:8a:c0:10:c1:89:0e:87:a0:51:7b:6e:25:
d7:d7:af:09:a9:99:6e:c6:6f:e0:b8:d7:89:7c:03:
7a:ff:e1:01:84:08:74:19:55:47:76:61:b8:c4:d1:
4b:c5:02:ef:4e:a8:11:da:96:cb:4f:2b:90:ac:44:
41:b7:6b:d9:32:b1:4f:61:7f:4e:71:b1:09:89:89:
56:db:de:d8:90:2c:6d:f2:42:4c:9e:9b:bc:82:7e:
b4:14:a3:90:81:0d:0c:a6:5f:04:02:e3:f6:02:35:
f1:73:65:55:c1:fc:81:e7:e9:ca:76:fe:c7:df:1b:
6a:0d:77:82:8b:ef:f7:9f:63:b5:a2:f6:3c:a7:96:
44:91:60:3c:48:e8:bf:c1:ad:a5:1e:15:83:bb:fa:
50:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D3:1F:49:0A:81:14:93:EA:C0:6A:B8:09:51:64:60:9A:62:32:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b023c264-775c-3a55-89dd-20c7d56554e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
129.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:bb:f8:c4:97:6e:b1:ed:e3:35:57:0d:1f:0c:f2:83:eb:57:
5e:d8:5c:6f:23:7c:28:3e:f6:70:76:fa:f0:d4:c1:0d:19:1b:
a7:34:1a:20:bc:37:b9:60:8d:6c:6b:ae:f1:2c:60:2a:2c:4d:
b1:ce:20:ab:06:41:f5:6c:38:aa:75:8a:5b:81:9c:26:a4:fd:
32:16:87:85:11:41:a3:d8:53:10:61:96:e4:10:04:16:6b:36:
a9:64:8d:38:92:e0:cd:65:58:f5:19:24:ac:ac:00:48:a0:cd:
29:2e:17:74:ec:2b:33:09:46:33:08:a4:21:d2:e9:f4:ac:9d:
e4:1a:0c:c4:f4:73:87:c2:f5:b7:1b:8b:d7:d8:74:13:c5:9f:
9f:c9:37:d4:90:49:18:cb:15:2d:64:e2:76:87:d0:2a:76:a9:
49:e7:bb:c7:1d:29:42:fa:26:26:f6:97:b7:96:1d:67:7b:25:
ec:82:37:2c:d6:b0:3b:0e:9e:3e:5d:27:4a:68:de:d3:a4:4b:
e3:f6:80:8b:70:41:ac:ed:8a:4b:66:49:dc:0e:d5:43:4d:dc:
1b:f8:b8:8d:50:ea:09:84:c1:8f:83:e4:c0:53:9c:65:6f:c4:
1d:de:61:3d:f6:89:b7:c9:f8:9d:66:40:9d:12:27:7f:a5:a2:
ee:2b:94:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:07:13 2025 by rpki-client