Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c7e084c9-3d39-32e0-8ebc-8ef4bd44e85a.roa
File: c7e084c9-3d39-32e0-8ebc-8ef4bd44e85a.roa (raw, json)
Hash identifier: 2JpLbdBb2qcU8yh8M6pT266FftdKM1VOnVweUycNr4k=
Subject key identifier: 4F:CB:7F:D4:57:7C:73:FB:16:E6:30:15:CD:53:CA:C1:7E:69:6A:D9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E77FB21790BC0C80783850940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c7e084c9-3d39-32e0-8ebc-8ef4bd44e85a.roa
Signing time: Mon 04 Jul 2022 12:00:00 +0000
ROA not before: Mon 04 Jul 2022 12:00:00 +0000
ROA not after: Tue 09 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 128.188.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:77:fb:21:79:0b:c0:c8:07:83:85:09:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 4 12:00:00 2022 GMT
Not After : Aug 9 04:00:00 2022 GMT
Subject: CN=53d29425-2a57-4afc-a436-3e0fb69c193c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:99:d6:10:64:42:0f:90:5b:7e:ee:f4:df:
c7:05:29:44:18:11:4e:02:c6:ff:51:57:29:c9:12:
41:9f:b0:ab:49:10:5c:27:3b:f0:71:7f:b9:cb:24:
bb:2b:d4:b7:09:f7:57:23:77:a5:b1:c2:49:d4:c9:
83:83:dc:dd:35:5f:20:7b:ca:4d:1e:24:a1:45:54:
f4:87:43:52:f1:15:20:e2:55:fa:6f:08:b2:ac:ff:
dc:7d:23:75:97:ad:19:6f:21:33:f1:37:ad:c3:af:
e4:36:9c:62:34:d9:5b:63:dd:e5:1f:ca:ea:19:ec:
da:28:06:5c:54:0a:82:49:f4:e3:e0:59:0a:1d:dc:
30:67:18:9b:2e:2a:a8:86:6d:fd:84:d5:12:e6:d4:
c4:33:98:16:93:73:f4:a5:7c:be:26:eb:cd:ac:65:
95:55:db:26:9f:28:6e:8d:d5:25:12:6c:d6:36:02:
1f:38:d3:6c:15:83:7d:28:38:fd:af:f2:4a:d8:1f:
b4:50:00:2a:9c:1a:ef:dd:81:bd:bd:4f:e8:84:c8:
9b:e6:28:f4:ad:4e:24:18:12:54:4b:85:a0:e1:5b:
05:9d:3c:7e:43:11:57:5c:d9:2d:ae:3f:e1:a4:13:
c7:84:1f:1d:15:3a:a6:52:74:65:51:a3:b3:c5:af:
3a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CB:7F:D4:57:7C:73:FB:16:E6:30:15:CD:53:CA:C1:7E:69:6A:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c7e084c9-3d39-32e0-8ebc-8ef4bd44e85a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
128.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:0e:9d:02:3e:34:f4:85:0e:5f:40:d3:f1:a8:7a:f8:31:89:
77:82:65:a5:05:24:24:96:06:f1:25:dd:6d:53:8d:02:61:17:
c6:fe:29:d2:f7:f5:f8:20:5a:90:cd:62:13:f6:1f:22:12:b2:
4b:6f:69:26:87:b2:d7:16:08:ae:2f:7d:99:30:a2:87:92:9e:
ae:49:1f:f4:0f:30:5f:7c:2b:c3:24:85:a8:5f:f6:a3:33:2f:
a6:2d:ec:cd:e0:b8:95:55:25:bb:19:17:79:47:fb:7c:5b:52:
09:f7:2c:17:46:77:de:e5:96:05:ed:95:5e:c3:4e:b3:22:43:
8b:9f:bf:79:13:e4:47:6d:8c:fe:92:7f:a6:d4:76:17:d6:3f:
c0:da:67:35:aa:06:9d:d6:12:b9:fa:49:a2:15:91:68:8e:82:
84:7f:fe:42:11:42:6d:e4:38:f6:f2:76:eb:52:db:33:fb:b2:
67:9d:60:98:a5:8a:ae:2b:cc:6a:76:57:34:b0:dc:07:d9:80:
21:8b:df:6d:dc:45:a8:2b:12:21:b5:68:41:d4:c1:00:be:12:
c3:c3:6e:0e:59:71:e7:39:8a:15:16:da:14:03:dd:22:23:69:
70:ef:6c:34:20:3e:c7:1e:54:b0:dd:67:11:ec:c8:17:34:19:
5f:3a:87:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:33:29 2025 by rpki-client