Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dbd7a082-d715-337c-b46b-b95498fd0204.roa
File: dbd7a082-d715-337c-b46b-b95498fd0204.roa (raw, json)
Hash identifier: NKuHBgwpcGr1RR0lR5BEAh4fuskk5ri3Qc3Ip+Q399Y=
Subject key identifier: 7D:04:3F:24:8B:E8:A3:5A:4A:21:ED:1B:8B:4C:F9:CC:13:91:3F:F4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D2C589D57CC086D62C9DD5600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dbd7a082-d715-337c-b46b-b95498fd0204.roa
Signing time: Wed 09 Mar 2022 05:00:00 +0000
ROA not before: Wed 09 Mar 2022 05:00:00 +0000
ROA not after: Wed 13 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 128.125.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2c:58:9d:57:cc:08:6d:62:c9:dd:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 9 05:00:00 2022 GMT
Not After : Apr 13 04:00:00 2022 GMT
Subject: CN=20fbbdca-674d-4230-bf54-9b0d5cbf0682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2f:b4:5b:34:8d:57:af:5d:ae:d8:01:69:6b:
14:c4:42:d9:ea:63:99:2f:8d:d6:1c:94:1f:60:87:
6d:d0:aa:38:70:c6:05:42:fe:c2:63:65:a6:08:e4:
3a:15:29:12:bc:45:39:a8:69:29:77:2f:dc:89:76:
2f:a3:98:1d:61:6e:b5:80:53:c6:52:55:c6:db:6a:
66:01:4e:d7:8a:db:f7:57:25:06:3d:c2:5e:8a:12:
93:ca:d0:0c:ff:e1:8e:2b:05:3a:e8:5e:fa:e6:bc:
6b:96:30:17:da:5d:39:ba:69:42:39:dc:09:86:25:
2b:ea:25:cd:3f:a2:2f:02:85:6d:df:3c:37:61:ee:
04:34:f5:80:d1:76:e4:eb:cc:03:a8:9c:45:b3:fa:
25:68:6f:59:3b:53:dc:ff:73:b6:20:d9:5f:36:8c:
e8:ba:d2:cf:d8:00:49:8a:62:f0:2c:ed:ff:ce:97:
5d:03:ea:32:43:c4:0a:83:71:35:c3:3c:18:7e:72:
6c:1e:53:87:6d:5d:22:a2:04:6f:89:5c:f4:ee:3b:
f9:e9:f2:b5:5a:c9:e0:ca:21:33:cf:ab:94:e2:69:
d0:8d:00:34:68:58:45:e0:0a:8f:59:62:b4:ed:92:
2c:33:67:64:c5:44:68:fa:e1:46:4e:dd:7c:b1:d9:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:04:3F:24:8B:E8:A3:5A:4A:21:ED:1B:8B:4C:F9:CC:13:91:3F:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dbd7a082-d715-337c-b46b-b95498fd0204.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
128.125.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:78:42:81:e8:2d:5e:c0:72:8a:4a:38:7d:a4:18:95:77:05:
9a:a1:be:32:5d:20:ea:15:a6:8e:df:9f:f2:12:e9:81:8f:0f:
5f:ae:fb:eb:ea:d1:51:78:f3:e0:80:40:75:30:cb:1a:18:c2:
6d:ba:68:2c:2f:8d:d3:db:a0:38:60:0d:9a:99:03:17:f4:d9:
0d:20:7c:a2:0d:59:af:d7:06:cf:3d:ac:9d:51:57:b3:df:9b:
87:5f:f3:60:a7:b5:e7:ad:80:42:b0:d3:eb:2f:d0:7b:fc:47:
10:14:27:98:45:57:7a:76:17:1d:8f:26:25:48:54:45:3e:36:
6b:1f:c0:96:dc:4c:4d:66:19:82:2c:60:79:4d:73:98:c7:b1:
8d:a2:63:d5:03:8b:ee:1a:73:ab:5e:2b:e0:1e:21:78:5d:c0:
b2:b1:10:e9:f0:30:8c:28:9d:3b:33:eb:47:7b:23:0e:25:46:
c9:35:56:0d:62:b0:5c:80:0d:72:a4:21:c6:75:9b:67:fc:2d:
d3:55:d4:fe:fd:dd:e8:b7:af:77:c7:74:71:b8:48:08:f8:43:
10:e5:23:23:1d:0d:27:d5:65:29:11:81:5e:22:89:6f:64:14:
44:10:cc:82:52:6e:a3:e1:2a:c3:3c:ee:28:3b:16:1b:39:c5:
05:0f:d2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:52:40 2025 by rpki-client