Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d58991fc-f791-3202-b663-59899971edba.roa
File: d58991fc-f791-3202-b663-59899971edba.roa (raw, json)
Hash identifier: o+9tctlSHBy0pfRAM9RjZte/9rKi8L+b3yZpfQN3VsE=
Subject key identifier: D2:BF:0E:10:37:4C:40:BC:52:D7:66:BF:24:75:73:DE:89:E1:98:2D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7E58965AA39114D7E1275E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d58991fc-f791-3202-b663-59899971edba.roa
Signing time: Thu 06 Oct 2022 12:00:00 +0000
ROA not before: Thu 06 Oct 2022 12:00:00 +0000
ROA not after: Fri 11 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 47.128.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7e:58:96:5a:a3:91:14:d7:e1:27:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 6 12:00:00 2022 GMT
Not After : Nov 11 05:00:00 2022 GMT
Subject: CN=f450e905-7acc-4e91-9cc6-d15cf5fec90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:47:ac:cc:55:ee:42:40:d9:7d:da:e1:ff:f4:
72:3b:eb:9c:87:90:c4:f0:50:44:8a:f5:66:50:d3:
5a:e5:b0:a6:d0:9e:9f:3b:5d:71:7e:8e:c7:cd:44:
f3:3f:71:bf:0a:ec:48:42:1c:57:75:36:2f:21:ac:
b3:4d:cc:7b:c3:4a:0c:b6:60:d1:c8:c3:93:64:c4:
9f:49:67:41:ff:af:db:ad:72:d3:e4:2f:26:38:18:
94:3e:74:f7:e2:bc:7c:a2:ef:88:66:08:ec:77:9d:
5b:d5:0d:dc:75:86:d2:81:7c:bf:b6:e8:b6:a0:8f:
2f:0c:39:47:da:8e:20:85:f5:77:ee:25:17:06:73:
e7:90:25:da:91:b6:4f:69:62:f8:fe:45:d7:5c:ab:
d9:e7:22:66:15:77:a8:1a:60:71:16:63:c5:b0:9a:
f1:43:0e:97:5f:3e:0d:49:31:3f:63:61:c6:65:e2:
1a:4b:78:9c:2d:ba:bc:29:d4:b2:dc:d0:fa:04:e6:
34:37:88:34:da:72:be:49:0a:44:96:7b:51:f2:cd:
33:3c:d0:fe:4e:d8:8c:e4:ec:4f:fd:bc:19:e8:34:
cd:3e:ea:02:36:60:ab:5e:fd:f8:1c:bc:73:48:35:
87:64:bc:88:10:ce:4c:07:ab:4c:5e:b7:64:25:4a:
d4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BF:0E:10:37:4C:40:BC:52:D7:66:BF:24:75:73:DE:89:E1:98:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d58991fc-f791-3202-b663-59899971edba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
47.128.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:f2:22:44:4d:24:28:c1:86:fb:28:bf:ae:a2:e6:a0:71:2b:
af:c0:5f:a0:41:52:59:1f:a9:be:f4:83:9c:2e:20:d6:53:05:
fc:1f:d8:9d:7f:fd:e1:6f:75:27:0d:a0:dc:d9:53:6c:06:9e:
62:41:65:35:64:fe:90:c2:bd:3c:29:a8:8a:69:37:32:43:82:
d4:bf:6f:f5:ed:43:41:a4:e1:b2:67:9f:5f:ae:0a:ad:8e:23:
ae:73:e3:81:b8:06:b4:07:b4:57:85:49:b6:d4:88:09:13:63:
ec:d0:3a:d8:7d:aa:ec:55:9a:2d:ba:02:c9:e6:e0:4a:f7:ec:
07:c0:b3:90:30:96:72:61:65:6b:96:1a:19:41:6b:41:63:72:
e9:56:99:bd:56:dd:e4:49:43:82:39:15:69:14:82:61:06:7f:
59:89:b5:f8:67:07:19:73:b4:a1:65:ad:5c:74:58:77:53:2c:
64:7d:d0:68:17:41:8b:27:2d:47:54:38:d0:e7:11:93:5d:c8:
d5:de:3a:9e:28:59:4f:a6:8b:4c:d1:dc:64:b1:b0:49:35:29:
9e:1a:87:49:22:2a:0a:ef:d0:76:0a:a0:18:25:24:97:3a:3f:
90:87:b3:b3:85:f7:27:26:f0:fb:c7:81:dc:59:a1:ae:97:30:
32:b7:2c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:15:18 2025 by rpki-client