Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cd56a78b-c669-3e7f-b0a1-4cd7e54c7e6b.roa
File: cd56a78b-c669-3e7f-b0a1-4cd7e54c7e6b.roa (raw, json)
Hash identifier: l1xEtwLz7e3ZgabVMniD97pBkgNhSBKxD/iVnnRMeC4=
Subject key identifier: EF:A2:66:E1:A2:AB:F4:2F:40:EB:9F:90:34:ED:12:B5:40:AD:AC:48
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D5A447A9BF53E79094B2A1900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cd56a78b-c669-3e7f-b0a1-4cd7e54c7e6b.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 129.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:44:7a:9b:f5:3e:79:09:4b:2a:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=96f877bf-e2fa-45d9-b48e-49ff6de996fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:6f:ba:b6:62:aa:48:ac:f9:6e:aa:b1:9a:
df:3f:31:f9:5b:2a:53:23:ea:27:70:a8:e7:65:ca:
1f:a9:58:ea:03:8d:93:a8:b6:fa:09:61:13:4a:f5:
84:51:f8:03:92:1a:f2:d1:04:c7:72:09:76:24:21:
8a:3c:5a:d4:92:53:a4:8a:7c:46:d4:c2:af:35:dc:
d9:e8:3d:03:4c:b2:c8:b6:ae:21:4e:e5:73:a3:bb:
fe:1c:d5:87:e5:df:01:e1:10:54:f6:33:45:0b:5c:
2f:23:e0:b0:31:d6:37:f6:6b:ce:5c:5d:d2:27:4e:
be:4f:af:48:a8:df:14:08:c1:d7:a5:dd:5a:00:88:
5f:2b:02:d0:f8:11:4e:d6:54:4b:de:aa:56:9d:1f:
2a:5b:6a:37:28:b5:0a:69:b9:10:fe:26:eb:7c:e1:
6b:02:0e:0d:6e:d6:2f:78:97:4f:63:7d:e4:8d:75:
3a:cb:71:c2:34:56:27:56:ca:f3:44:c7:3a:e8:ea:
30:5f:b3:07:53:76:8c:e2:bd:24:34:17:ff:7c:af:
27:f2:49:1c:0f:99:82:dd:d7:96:04:45:d5:d7:3a:
21:81:6f:45:9c:fc:35:71:cc:26:8f:2a:dc:de:bc:
2b:a0:26:08:35:24:10:07:76:26:d6:6e:48:22:75:
26:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A2:66:E1:A2:AB:F4:2F:40:EB:9F:90:34:ED:12:B5:40:AD:AC:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cd56a78b-c669-3e7f-b0a1-4cd7e54c7e6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
129.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:5e:dd:4c:39:e2:53:72:c4:94:a6:f0:2f:aa:7f:60:0f:d2:
77:c4:83:7d:ba:0b:89:f2:fd:fb:f0:7d:c9:b8:d7:a7:b7:74:
3c:ac:a2:3e:55:0a:bb:4a:43:30:eb:a8:cd:73:85:53:af:e3:
9f:c3:5a:51:f1:70:55:d4:93:7e:9f:f7:6f:c6:c5:2c:57:56:
46:47:82:b8:75:82:31:34:e0:f2:74:72:98:e0:1f:79:35:0b:
ce:a6:0f:18:86:43:06:f3:15:7b:b9:e8:b6:52:ca:99:c0:7a:
d8:ba:ff:c3:7e:cd:79:ab:65:f2:ec:fa:a6:4e:49:df:6e:45:
8c:9b:6f:23:37:ac:9c:7e:0f:59:f2:86:de:3c:12:d4:76:af:
e9:85:c3:8c:af:2a:36:7e:1e:9a:f1:d4:33:51:e5:34:cd:cd:
18:b0:e3:f1:5d:0b:f2:c4:32:78:9d:93:46:b3:92:17:b4:ba:
10:5e:dd:ce:97:07:ef:50:38:2f:62:b0:9b:7c:c1:ee:2b:15:
c7:bd:85:77:03:9d:0e:f4:2c:22:f1:ab:df:62:8f:25:46:1a:
17:bf:bf:d8:d9:84:e9:dc:e8:bd:42:fc:c5:4f:d9:6f:3f:8f:
2a:e0:1b:7b:98:1f:48:41:c2:6e:ba:19:3e:df:c7:d5:e5:39:
c9:ae:a3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:44:17 2025 by rpki-client