Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c72257b8-622d-3b22-807f-04a8c411a83b.roa
File: c72257b8-622d-3b22-807f-04a8c411a83b.roa (raw, json)
Hash identifier: 1aBiFmmTlHHEZbsv3sh1pGzFK8uOSck8P6hMDxhROB8=
Subject key identifier: EF:D6:D3:FD:10:87:53:55:CF:9E:C3:92:12:CB:99:6F:31:7F:3F:73
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B020C602A46D7BCD7BD97880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c72257b8-622d-3b22-807f-04a8c411a83b.roa
Signing time: Tue 24 Jan 2023 12:00:00 +0000
ROA not before: Tue 24 Jan 2023 12:00:00 +0000
ROA not after: Wed 01 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 128.125.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b0:20:c6:02:a4:6d:7b:cd:7b:d9:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 24 12:00:00 2023 GMT
Not After : Mar 1 05:00:00 2023 GMT
Subject: CN=6f8cdfbc-0a89-4784-8d17-9b22fa3e8fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a2:21:29:1e:c0:9c:e8:d8:c0:cb:84:a8:cc:
de:1a:55:62:86:5c:35:c5:b1:c6:a9:95:fd:9e:f5:
6d:47:23:f3:68:fa:a8:71:ce:e2:15:6f:39:18:0c:
16:a1:7c:7d:bc:4a:e0:b8:50:9e:7b:0b:66:c9:06:
c3:66:15:40:3a:b8:37:79:33:7c:ba:44:7c:63:b9:
9a:bc:1e:92:de:f9:81:57:ad:ee:32:ab:81:f2:3a:
9a:ab:37:64:47:fa:3b:fb:a5:27:50:56:c7:d8:b4:
3e:89:61:e6:fd:dc:9c:39:b8:db:14:88:58:d8:87:
69:9e:2e:21:47:49:df:d0:19:9b:1e:2f:52:c6:6c:
f3:78:93:a8:12:fc:2d:ec:59:f7:dd:7a:d4:18:02:
60:4b:76:02:48:ad:2f:b9:c2:32:26:3f:82:f4:c6:
65:1e:53:d1:14:4e:4a:ff:42:9c:09:48:95:4e:6f:
94:e4:fa:ba:6f:33:ba:a2:7f:df:a1:bf:ec:09:cc:
bb:b0:fc:63:8d:28:38:6d:45:52:7c:05:23:77:eb:
44:9f:86:5f:6a:f5:11:91:7c:6f:4a:01:32:fe:88:
f9:cf:bf:cc:c7:4c:d3:53:f3:cb:b5:b5:7c:68:c6:
c2:17:c0:df:6e:63:c0:75:68:0c:6b:33:10:4e:99:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D6:D3:FD:10:87:53:55:CF:9E:C3:92:12:CB:99:6F:31:7F:3F:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c72257b8-622d-3b22-807f-04a8c411a83b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
128.125.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:22:45:d9:99:58:1e:7e:f8:26:2a:1e:c7:2e:3b:7b:42:f2:
80:6a:e3:69:e1:41:4b:e0:c1:91:f8:2e:a5:a4:4c:2c:70:6d:
06:be:1b:c3:85:25:97:3c:8d:8c:d6:85:9a:bb:78:a4:ac:98:
01:d0:8b:11:cc:dd:27:71:aa:92:13:b3:9c:a2:df:1a:81:8c:
70:01:d7:c5:9a:a6:40:00:80:95:36:9f:f8:0f:0d:3d:3c:5f:
84:62:24:4e:6c:a9:11:81:83:1b:4c:16:71:de:0b:29:5e:ac:
a7:ff:86:10:02:f4:46:ef:4b:37:a0:ba:99:49:87:d0:52:8d:
67:db:a6:c5:91:17:5f:f8:7e:12:b9:63:47:8b:bb:fb:7d:f0:
07:36:1b:b0:be:b1:62:60:f5:fd:14:71:c8:d9:86:84:da:11:
b5:55:ed:7b:f9:62:5e:f0:0b:ee:96:35:d7:60:82:94:09:b9:
8f:27:c9:63:88:d4:1d:d4:78:83:6f:ae:2c:c1:6c:06:f8:3f:
44:6e:31:88:65:81:82:ae:9b:b3:6f:84:85:a8:24:a6:70:e2:
db:86:48:4f:af:c8:dd:ef:e2:07:14:e4:ca:c1:e4:4a:fd:da:
3d:51:f5:6f:8a:4d:38:f0:35:43:eb:0d:7b:c8:d1:9f:3b:4f:
f6:60:8f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:58 2025 by rpki-client