Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df3e98ff-e957-383b-b873-41526c5776d6.roa
File: df3e98ff-e957-383b-b873-41526c5776d6.roa (raw, json)
Hash identifier: LKZpG/gfkcRCma5wuSDy4mGR9iSnHSH6LRtK/FhQlK4=
Subject key identifier: 99:31:20:B9:D6:4A:28:CE:37:89:15:1F:91:B8:CA:6B:5C:4C:63:86
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6C42F497B8AF5D7D33357180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df3e98ff-e957-383b-b873-41526c5776d6.roa
Signing time: Thu 30 Jun 2022 12:00:00 +0000
ROA not before: Thu 30 Jun 2022 12:00:00 +0000
ROA not after: Fri 05 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 128.181.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6c:42:f4:97:b8:af:5d:7d:33:35:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 30 12:00:00 2022 GMT
Not After : Aug 5 04:00:00 2022 GMT
Subject: CN=7619784e-26e9-4e00-bf29-1696cb8ce12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:4c:da:a8:e2:01:9c:d2:c0:a6:e0:4c:95:
85:b3:f9:47:7f:cd:ab:55:fb:65:ef:ae:b0:a5:88:
fd:31:94:5e:42:fe:10:cb:fb:ec:5a:5d:d8:4a:6f:
23:7c:3d:a9:b1:fd:e2:90:ac:20:e0:79:2c:d2:80:
60:bf:66:89:ec:ee:56:f2:0c:4b:a7:b8:c4:7a:e0:
c5:cd:15:91:b5:c3:1c:9f:2b:09:c0:c9:5c:07:7d:
d3:00:07:4b:4b:e0:6c:e3:30:3f:95:68:7d:bf:88:
f3:2f:09:81:86:31:0d:4b:46:44:63:54:2d:ff:7a:
d9:06:8d:70:37:7a:4a:3d:fe:d2:37:73:e6:bb:cf:
d1:c8:36:8e:2f:9b:42:2e:d0:30:32:bd:85:96:e9:
b2:75:b5:7f:b9:05:06:99:e0:86:0f:f6:c2:cf:f9:
93:d6:94:8e:c1:83:56:fc:39:ec:6c:c2:45:23:4a:
17:4e:23:4e:4f:8c:66:18:5c:e0:7d:0d:a8:64:0b:
de:f9:e1:d5:98:49:b1:06:16:e3:a4:1e:ee:88:b9:
4c:d2:c3:b3:23:f8:4a:7a:4b:58:3a:4d:d7:65:a1:
92:e0:aa:6b:c9:3f:5d:7e:9c:bd:1c:20:95:e4:4d:
7b:43:c9:a5:74:f1:3f:31:9d:e8:9b:47:29:b9:fc:
28:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:31:20:B9:D6:4A:28:CE:37:89:15:1F:91:B8:CA:6B:5C:4C:63:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df3e98ff-e957-383b-b873-41526c5776d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
128.181.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:52:a5:4f:a6:69:f0:af:e2:49:4e:f8:4d:de:8d:7e:44:76:
5d:f0:12:b7:98:13:fe:cd:b5:6a:2f:29:67:6b:26:38:7e:ca:
1f:7d:54:3b:1e:08:16:ab:f5:41:12:c1:4e:77:b5:d9:45:c1:
e5:2e:57:a3:40:32:36:1c:d6:1b:f8:e6:ac:64:85:78:fc:b1:
b0:a6:c6:be:3f:f1:0d:29:45:03:dd:f0:d9:74:9a:23:b1:ca:
7b:51:0d:9c:39:b6:19:03:02:e7:d2:2b:d0:29:51:21:5b:5c:
52:a7:85:fb:0c:4b:b0:3b:a0:32:e6:53:28:b7:56:cf:26:57:
38:7c:97:18:d8:b2:1b:6b:07:cb:a5:00:7c:cf:b9:da:91:d4:
00:bb:90:4d:0b:a9:13:1e:e1:70:f2:87:fc:67:99:bf:f4:4b:
e3:89:2d:a9:7f:2b:7c:c6:66:f0:9f:42:5d:78:b1:fc:5e:5c:
a0:47:85:32:87:5d:f6:2f:6d:d4:c3:1d:b7:13:d2:e4:62:31:
1d:6a:f5:e2:d2:92:e7:f5:1b:a9:a3:2e:0a:31:b8:b3:a0:6a:
9d:be:a9:cb:4d:a0:97:74:60:06:ba:1d:38:5c:ed:95:4c:ea:
d1:a7:a8:16:e2:56:b9:76:1b:07:5c:05:e5:11:3b:8a:35:ac:
b2:74:68:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:24 2025 by rpki-client