Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d304cbe6-4db5-38f7-9ca3-42b7cc217caf.roa
File: d304cbe6-4db5-38f7-9ca3-42b7cc217caf.roa (raw, json)
Hash identifier: PnZCclp1qwokWijmJwtOPFn7fgcC7g3HJFb16RTkiKs=
Subject key identifier: 00:24:2E:D3:F3:AF:BB:5C:56:F4:F5:80:C7:D8:BE:4F:47:35:CC:8A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D3D723D4F06A51B77207D0F40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d304cbe6-4db5-38f7-9ca3-42b7cc217caf.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 19 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 130.101.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3d:72:3d:4f:06:a5:1b:77:20:7d:0f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Apr 19 04:00:00 2022 GMT
Subject: CN=f7e87d82-87cf-480e-a1c5-7c981af3d74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:38:a0:ba:2d:1e:ff:f6:73:4b:4e:6a:77:
58:f0:6b:db:c9:a8:97:10:b4:7d:20:41:d0:5d:ec:
04:50:ee:16:7d:d1:f6:95:c2:5f:29:e0:5c:f1:45:
05:54:a5:a7:70:8f:ac:a9:c1:db:e1:db:bc:99:15:
27:2e:36:89:f6:77:1a:5e:24:f5:cd:b6:cf:8b:dd:
15:c4:69:d5:be:d6:b8:8e:ed:1f:96:12:55:5d:86:
33:cf:4d:0e:e3:e8:b8:97:e4:50:57:ab:c8:71:30:
b3:67:9d:0d:fb:78:fa:2a:ee:d8:8d:43:d5:82:18:
3d:72:2b:5d:44:1c:70:3e:d9:99:b9:4c:82:15:69:
9d:ec:22:9f:b3:8c:40:0e:96:9d:8c:9b:60:e8:ea:
d9:78:64:5d:8f:2b:ed:f3:9a:d1:ea:a0:c2:f1:d9:
88:d8:c7:c6:dd:7b:4e:d9:d7:51:78:b4:7c:d6:bb:
6f:1c:dd:7a:3b:bb:77:6d:a4:f0:f6:24:aa:81:ad:
30:b0:33:45:88:1c:8e:43:dc:9b:cf:4b:c5:c8:1e:
7c:c6:6e:54:47:2a:69:1d:34:95:34:92:4b:b7:e5:
dd:e9:30:21:b8:48:28:a6:31:9f:84:39:bb:01:33:
42:f9:9d:1c:85:dc:34:1c:4f:f8:b3:df:77:36:73:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:24:2E:D3:F3:AF:BB:5C:56:F4:F5:80:C7:D8:BE:4F:47:35:CC:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d304cbe6-4db5-38f7-9ca3-42b7cc217caf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.101.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:d0:32:2c:64:f3:1a:56:95:64:76:76:9b:ea:21:12:c9:7c:
19:d4:0d:23:9b:b8:07:34:02:85:c7:29:14:cb:2a:4f:58:bb:
57:07:b1:3d:7d:d3:82:26:c6:83:9d:97:4a:9f:4d:c3:dd:d7:
d3:a2:d0:9e:7e:1c:8a:e8:d3:81:6a:0b:2b:8a:b1:fa:58:9d:
1d:29:d7:d3:a7:5a:c4:ab:ef:0f:ca:9f:34:22:60:60:0e:48:
e4:c2:24:e7:e0:98:4a:cc:1d:7d:c2:10:ef:15:8b:20:a6:d5:
a1:ff:d1:3e:ac:33:d9:b7:70:70:c5:87:4b:6d:48:40:91:d9:
e7:6d:78:49:d9:9b:4e:c0:4f:66:b9:96:c1:57:7c:44:36:2c:
01:fb:d7:30:1b:55:2b:3f:1f:7c:59:1f:fc:29:9f:0b:ca:4a:
e8:ee:8c:44:ce:99:9b:a5:83:f2:6a:db:51:52:17:fe:a4:1a:
55:7d:7f:39:6e:45:d9:f6:f1:0b:ef:5b:cf:62:9d:a1:35:90:
3d:36:1c:2e:fe:fe:e3:e4:84:7e:3c:c4:89:12:b2:a2:5f:c5:
72:8a:55:79:e7:c8:1a:2a:e5:cc:d8:c9:fe:9e:88:66:99:0f:
a9:5e:6a:df:c8:cd:f1:fc:67:b1:3e:dd:6b:93:c1:10:67:bf:
66:20:1a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:17 2025 by rpki-client