Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bab7de53-0671-346a-8605-1e8809112a08.roa
File: bab7de53-0671-346a-8605-1e8809112a08.roa (raw, json)
Hash identifier: uPBrQeToDQp45T067vNOiBEdeY6MOuuS0CxdZuMefU4=
Subject key identifier: 01:85:34:11:68:F9:BC:03:6A:63:E3:34:A3:AB:00:3E:70:2D:0A:E6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CC80CA0D3C1781A53E6F9DF60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bab7de53-0671-346a-8605-1e8809112a08.roa
Signing time: Tue 01 Feb 2022 05:00:00 +0000
ROA not before: Tue 01 Feb 2022 05:00:00 +0000
ROA not after: Tue 08 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 128.188.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:c8:0c:a0:d3:c1:78:1a:53:e6:f9:df:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 1 05:00:00 2022 GMT
Not After : Mar 8 05:00:00 2022 GMT
Subject: CN=dcc58f0f-a841-4466-9423-ee7864cd2573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:d2:37:25:2b:e1:df:b2:f7:ac:90:66:3f:
a9:fa:09:04:70:c7:94:75:f0:40:6d:9d:09:99:12:
e2:9e:ad:36:cb:e3:d0:54:1f:8f:2f:94:18:d0:27:
3b:45:c4:a8:f5:0d:7f:30:f2:78:ac:0f:59:cc:9d:
73:50:44:20:b8:8c:37:66:f8:1f:b5:24:ad:ef:a8:
5e:8c:58:ee:e6:c8:e1:f4:d3:70:4a:25:21:5f:f1:
31:f2:ef:e2:bb:27:50:0a:23:1e:50:5f:a6:2d:5d:
45:66:df:9b:0d:aa:c4:45:68:ed:72:95:0f:00:ad:
55:bb:cb:e3:a8:27:9a:e7:67:72:ee:a9:70:9c:65:
e0:4a:89:15:e8:d3:aa:c2:ca:92:1b:b3:22:bd:a5:
18:7c:25:64:a2:7a:87:a2:49:18:12:a7:e1:c8:19:
7b:a2:f9:04:12:ee:ba:01:3c:d5:fa:97:1e:a7:7f:
8f:de:8f:9b:97:96:44:e2:17:24:72:00:52:e5:c5:
ee:ea:03:48:13:e2:0a:d9:f5:11:f5:0c:10:08:a2:
8e:41:2a:12:bd:5a:dd:8a:89:5b:05:75:a9:7e:57:
9a:65:fa:76:74:fd:c9:96:1d:21:67:97:36:34:02:
f6:cc:66:26:c9:3f:56:a4:9d:c6:82:ee:20:2a:d0:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:85:34:11:68:F9:BC:03:6A:63:E3:34:A3:AB:00:3E:70:2D:0A:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bab7de53-0671-346a-8605-1e8809112a08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
128.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:a6:93:08:0d:de:eb:18:58:14:ee:33:79:75:10:7b:54:87:
8c:44:88:5b:b1:19:b1:7e:49:7a:49:87:63:30:fd:be:ae:5a:
6f:be:42:f9:ff:dc:d5:d6:92:bb:b4:70:5b:06:05:9e:e9:cc:
94:02:e4:60:63:23:8f:b7:83:0f:86:67:64:78:e2:1d:af:9f:
d6:76:5c:dd:4b:3d:b4:3f:3e:f6:52:b1:55:bf:0a:32:7c:b4:
9e:15:b2:a2:ee:2a:59:cd:93:45:ce:82:ca:94:a5:af:36:85:
11:08:55:dd:bb:d8:c9:57:94:36:6e:88:0a:a5:39:bf:50:d4:
58:8b:ee:d9:bc:fc:82:b5:1e:02:45:1b:33:25:36:e5:7c:f0:
f7:22:04:a6:f3:87:00:3c:a5:7c:c6:f6:38:1f:f8:05:31:81:
22:76:6a:02:93:6b:a3:54:6b:9e:d1:31:aa:67:a6:c4:65:2d:
27:0f:0b:7e:e2:50:09:38:f7:07:84:7d:77:40:f0:ed:85:5f:
8a:88:23:54:12:eb:70:c8:d3:60:0c:59:63:c8:26:40:01:f3:
f0:1b:06:a8:c2:36:25:9a:32:da:2d:87:4b:22:13:58:cf:a4:
7e:5e:f8:0a:17:b9:99:35:7d:7d:a5:7c:75:b6:30:c8:81:ef:
6a:78:6a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:39:28 2025 by rpki-client