Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b5eb9eef-ba64-3798-8c36-7ebdb335a80f.roa
File: b5eb9eef-ba64-3798-8c36-7ebdb335a80f.roa (raw, json)
Hash identifier: EOSCOdtmjhuF/ktKVrJjD+7cYmJvA0QgYrCzxdbAXDU=
Subject key identifier: FF:A8:A1:FB:55:94:A0:16:3C:6E:1B:70:16:17:DD:75:CC:02:5E:5C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF831CB5B5EBF4993E26CD980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b5eb9eef-ba64-3798-8c36-7ebdb335a80f.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 130.71.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:31:cb:5b:5e:bf:49:93:e2:6c:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=b9f2fb60-cc3a-4b6a-ae21-c9a73e787d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:05:57:34:18:8b:a7:20:1a:2b:af:f9:7c:6c:
c3:4a:fc:ea:fd:c8:af:d4:3e:1f:51:e8:35:73:f7:
6f:f1:ea:8e:6b:d9:c5:23:ca:e6:54:3e:4e:f9:bf:
8a:ae:44:e5:61:9b:ce:1c:67:71:05:6e:db:df:f2:
1b:8c:20:6f:97:67:85:bd:54:aa:f5:a5:ce:cf:8a:
73:29:64:3e:4f:66:43:80:3d:84:7a:e3:58:a0:13:
42:fa:5d:14:e8:c9:a9:ec:c6:95:e6:77:06:15:e6:
d6:de:90:7e:70:0d:9a:c2:b3:e7:2f:94:0a:10:a8:
bb:00:e4:b3:ff:7f:a5:51:8c:50:86:30:1b:bb:fb:
0f:dc:40:43:4d:6d:51:0b:4f:ca:bf:69:aa:9f:74:
a4:b4:ce:ce:c1:80:6a:e5:e6:62:16:20:2b:c8:3c:
c2:9c:fb:26:d7:6a:4e:64:31:a0:84:14:0a:62:d5:
e8:60:22:37:1a:f4:76:0d:bc:84:f4:b6:2a:fc:71:
15:0e:8f:24:9b:dc:af:d1:a7:51:37:1b:c3:7d:1a:
9b:0b:12:28:47:e3:99:42:fd:fd:ca:42:7b:17:fc:
ad:5b:29:b0:44:71:b9:d3:ed:8a:74:35:b7:79:e3:
d3:c5:91:e4:db:df:24:37:9c:75:8c:48:07:66:d5:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A8:A1:FB:55:94:A0:16:3C:6E:1B:70:16:17:DD:75:CC:02:5E:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b5eb9eef-ba64-3798-8c36-7ebdb335a80f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.71.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:45:0e:87:71:1e:85:a7:e3:e0:87:f6:41:d5:1d:c4:2b:0c:
22:fc:40:e3:32:3b:32:71:1e:75:64:29:f6:4b:57:31:0f:e2:
b8:f2:71:41:c3:1e:49:d6:d2:2a:ae:1c:2c:91:83:4b:44:75:
c7:d2:53:2c:9c:15:f8:1e:78:6b:d0:90:a4:dd:48:c3:8a:53:
32:91:03:25:ce:15:54:5d:74:46:c0:bb:1e:4a:3e:a5:31:89:
3e:ee:fe:9b:e1:16:4e:80:88:57:5b:7f:a1:5f:b6:4d:84:39:
d7:91:5f:16:ac:ef:9e:58:ff:89:7d:d4:1f:fe:bd:83:0a:09:
2a:d8:99:3f:c6:f2:59:b8:21:a7:19:5a:91:ae:c6:69:2d:de:
b6:1c:65:46:69:4e:48:b9:85:f4:59:c3:b1:ca:5b:f6:7d:8c:
3b:10:1e:71:b2:e8:b3:33:5a:49:d7:c5:9e:85:a7:d9:a2:95:
ba:a6:24:de:0b:d4:b2:07:1c:85:82:ac:f7:04:53:51:23:c9:
64:a3:0e:3b:56:9e:d3:09:34:93:00:53:cb:c2:73:87:3e:82:
ab:87:04:3f:c9:c1:f2:d5:ec:b2:21:9d:f5:b4:54:70:a0:6e:
57:0d:c4:03:ad:e2:13:0a:1a:04:2c:60:64:d1:86:8c:b6:5f:
48:bd:74:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:40:32 2025 by rpki-client