Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b18c306a-6488-36b9-960b-6dfc78057b6e.roa
File: b18c306a-6488-36b9-960b-6dfc78057b6e.roa (raw, json)
Hash identifier: 3UQOvt4EPlghlxcUjs2J1CSO9k+kwICX09uEYzboMCA=
Subject key identifier: 98:B7:F2:32:81:AE:F8:31:26:78:04:D0:81:10:0C:DF:C4:E8:4A:97
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404C00EC8BB4AF1F93AEC11E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b18c306a-6488-36b9-960b-6dfc78057b6e.roa
Signing time: Mon 19 Dec 2022 12:00:00 +0000
ROA not before: Mon 19 Dec 2022 12:00:00 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 130.101.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4c:00:ec:8b:b4:af:1f:93:ae:c1:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 12:00:00 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=b199f170-1407-4b88-9748-af06f97bd1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:c3:81:53:df:d9:56:a0:89:73:d9:1d:dc:
04:e7:2c:e9:fa:d8:db:34:90:b9:82:d7:04:c3:21:
fa:20:7e:bc:a9:ef:c3:c4:27:3d:1d:0b:04:27:d8:
63:34:f6:13:e8:4e:89:88:18:aa:71:e6:5e:a8:cd:
99:42:c3:86:15:e4:3e:df:ea:35:da:32:91:32:cf:
9b:a2:8c:57:60:7c:d8:1e:34:92:8f:a2:6f:a1:b6:
5e:d2:c5:4d:5f:b0:b0:50:7a:9b:9c:a8:31:b4:34:
cd:7f:e5:7d:40:e5:e2:fb:de:78:8e:a7:1b:21:2f:
9b:36:81:78:eb:43:50:1e:06:23:23:82:8e:f6:87:
5f:59:35:38:85:e1:a6:54:45:0e:15:f1:cc:c1:91:
93:19:95:0c:ce:3a:7d:c0:41:c4:ef:f8:d5:46:81:
a9:46:bf:ad:00:31:f9:2c:87:b3:1f:04:0d:dc:c4:
17:fc:ef:75:7e:33:9d:b8:f2:29:a5:62:75:d8:f1:
97:fb:92:06:c6:94:31:5f:ea:c8:84:8f:85:d7:79:
f7:31:39:d7:aa:46:ae:d3:0e:cf:08:e1:d5:9d:4f:
92:a4:40:d5:19:c8:84:29:26:7e:69:64:2a:4b:1c:
b5:77:c6:3d:30:ce:a8:6b:be:c8:c1:49:a0:bf:ee:
c1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B7:F2:32:81:AE:F8:31:26:78:04:D0:81:10:0C:DF:C4:E8:4A:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b18c306a-6488-36b9-960b-6dfc78057b6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.101.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:36:d6:39:f0:41:11:a9:78:3e:1f:db:94:63:6d:8f:39:83:
e4:24:87:52:bb:80:c1:49:d4:3d:d1:fa:bc:92:84:1a:35:c2:
a0:cd:0b:0e:61:86:68:2f:fd:e0:1f:c5:b0:27:b3:60:e7:95:
16:9b:1b:d2:10:46:50:b1:0a:12:0f:fd:7f:a1:3b:a1:17:08:
a7:3c:51:90:9a:9d:0f:db:8f:35:dc:a1:76:a7:b7:19:a1:72:
06:c0:a8:7f:eb:81:51:4b:0b:20:8f:ce:26:58:e2:3b:17:d2:
e0:74:35:f1:07:18:90:db:8d:85:ad:92:0f:68:8f:c5:0f:d6:
ea:d7:79:76:16:12:2a:cd:d6:c0:0f:90:28:b7:37:ef:c6:b7:
eb:c0:00:16:41:61:dd:d5:fb:8b:e6:3b:0b:17:cf:bb:c4:91:
2f:8a:da:84:7a:92:03:65:92:2f:16:e7:12:df:f9:3b:14:3e:
13:79:26:c4:75:63:77:94:9d:a6:f1:70:d4:25:b9:34:df:db:
a3:d8:76:ac:c4:be:17:5c:20:66:03:07:d1:09:31:35:6a:8c:
f7:09:0e:90:b4:75:a1:2e:d3:e2:62:59:b7:6d:88:f3:27:5d:
24:ad:88:a5:28:8c:e8:01:69:6f:dc:b0:ba:37:c4:b7:c4:ca:
78:19:96:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:15:15 2025 by rpki-client