Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0760ed5-a49a-3c70-ad6a-5ab55e57e312.roa
File: c0760ed5-a49a-3c70-ad6a-5ab55e57e312.roa (raw, json)
Hash identifier: JC07fKb8Oug2yodps3ykhIkEc2Vm1e1OchNDwxNuIQY=
Subject key identifier: BD:54:D8:5A:E5:C7:2D:0B:62:BA:E2:A8:D0:85:8E:7E:CB:1A:EA:FD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404C0112BBFBECC3873A452280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0760ed5-a49a-3c70-ad6a-5ab55e57e312.roa
Signing time: Mon 19 Dec 2022 12:00:00 +0000
ROA not before: Mon 19 Dec 2022 12:00:00 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 130.101.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4c:01:12:bb:fb:ec:c3:87:3a:45:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 12:00:00 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=938d96b1-f454-4c78-a550-8a300403fd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:09:aa:5b:72:af:29:6e:8f:d1:cd:f6:3a:
d8:65:fa:cd:50:76:f1:cf:8e:00:f7:82:27:ac:9c:
12:1c:b3:11:1b:78:99:dc:de:d9:f9:c0:87:26:cc:
99:b8:d9:b5:a7:35:d2:18:cc:69:d2:13:45:cd:73:
47:a2:70:1e:78:25:d3:6f:0a:18:0d:b0:03:f1:70:
b4:8e:6b:48:50:01:69:a2:0e:9e:20:95:cf:5a:d4:
8f:a1:e0:be:45:a2:ac:2e:9a:61:e2:c8:d6:9d:c5:
02:f9:e8:c7:66:8d:6d:b5:57:cd:85:0a:d4:48:f6:
34:c2:f4:da:01:95:03:54:31:a9:c8:52:5d:60:03:
1d:b4:8d:2e:00:4c:95:c1:e9:ba:c7:f2:6d:a5:58:
43:7b:14:07:3a:dc:dd:ec:4d:d1:b0:0f:3a:33:98:
a7:31:1d:99:aa:60:ff:45:a1:9b:03:7a:82:ee:47:
a1:92:e2:c5:33:e8:d3:54:b3:e9:c0:28:59:1d:c1:
2c:5d:25:9c:2b:55:77:2e:0f:7f:99:91:f8:37:1f:
d1:d8:04:28:7b:89:9a:c2:26:c1:06:a5:0f:fa:da:
e7:28:8b:47:c3:c8:89:e6:18:75:2f:25:34:a9:85:
00:ac:4a:c7:02:3d:b0:9b:c7:7b:26:a0:69:2e:4c:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:54:D8:5A:E5:C7:2D:0B:62:BA:E2:A8:D0:85:8E:7E:CB:1A:EA:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0760ed5-a49a-3c70-ad6a-5ab55e57e312.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.101.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:f7:52:17:da:8a:f6:e9:e9:d9:ea:6b:fc:ef:08:dd:7e:6a:
97:40:29:1f:e9:cb:2c:75:53:36:b4:97:b5:a7:d1:5b:29:c3:
72:7c:d4:79:75:86:fb:52:f5:60:ad:52:86:2b:95:50:80:88:
14:bb:4e:8a:d8:2a:8f:ee:a5:62:34:d6:81:91:53:7e:cd:3a:
75:aa:cc:d5:e1:7e:ec:64:6b:44:78:33:b7:8d:1f:ba:b4:de:
fa:0e:6d:54:9f:41:5e:ab:60:46:47:2e:63:3e:8b:39:59:4f:
48:8b:f3:3e:4b:5b:bb:b7:0c:bd:ee:b5:ee:db:04:fe:6c:26:
f2:2d:8c:dc:d1:63:ff:9a:2e:88:b2:f2:43:e9:5b:50:6d:e6:
21:d8:7a:db:3e:bf:53:02:85:41:55:c7:5e:22:c6:83:57:37:
20:2d:81:66:80:46:8d:a4:3f:fc:44:b8:71:52:ce:98:15:ca:
20:6b:18:04:0c:af:6e:5c:bc:88:0f:67:ae:d3:f9:16:b0:da:
e6:34:bd:e6:66:c9:e1:43:bf:57:18:ec:e2:10:fa:b2:a4:44:
20:6c:df:4b:2b:7f:8b:56:d9:c0:b4:38:18:1d:ae:ae:92:39:
71:07:1e:c8:66:aa:a5:c0:0e:6c:11:b5:d7:bb:37:c3:d6:5f:
87:ca:a0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:14 2025 by rpki-client