Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f432d828-c4b6-3c7d-82f2-f63a16fb6841.roa
File: f432d828-c4b6-3c7d-82f2-f63a16fb6841.roa (raw, json)
Hash identifier: zM/wNmy5IW4q7CpgzST4NF+pfqew51GnNZUaabLH5gw=
Subject key identifier: 9A:4B:CF:B2:4D:9A:AE:B6:5F:1A:2D:00:C8:4C:FB:19:A8:53:C9:3D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E92D2A61172519B9D3726DD40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f432d828-c4b6-3c7d-82f2-f63a16fb6841.roa
Signing time: Thu 14 Jul 2022 12:00:00 +0000
ROA not before: Thu 14 Jul 2022 12:00:00 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.124.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:92:d2:a6:11:72:51:9b:9d:37:26:dd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 14 12:00:00 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=71614f06-de8c-44ad-bba7-395bf23fdf01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:18:02:8b:65:36:c5:d6:86:a8:5f:5f:14:
8e:17:a5:80:ef:d5:eb:8d:a5:0d:c6:80:83:e4:a3:
ad:00:72:83:23:bc:b9:0e:ac:8f:44:7f:fd:ef:68:
c0:c9:95:70:81:7b:a2:9b:23:27:33:fd:01:c2:2c:
db:79:cd:87:27:9c:a7:aa:b4:ac:f8:07:46:3d:f7:
10:14:87:23:61:cc:26:a2:1e:0c:ca:db:ed:ed:e2:
a0:b4:24:8f:9d:79:bb:b6:80:56:b6:d4:83:a5:02:
ab:48:5c:47:74:b4:1a:6f:d2:3a:3d:63:60:d5:89:
1a:90:40:a5:ba:b0:cc:14:3b:ad:a9:93:3d:22:96:
ad:4e:28:c8:af:dc:f6:35:1c:61:06:60:4e:d5:75:
9e:63:a1:af:d7:05:ae:a5:db:46:44:85:ba:8a:44:
1b:bf:8a:96:95:5d:c0:d7:69:96:d5:5e:f3:f1:73:
75:e5:75:55:69:e5:8f:7b:d1:8f:f4:ca:5a:1b:f3:
f8:9e:c1:51:88:b9:e4:3e:4e:82:1e:be:09:55:f9:
68:d4:69:4d:bc:70:22:f5:25:cf:d9:d3:49:01:56:
6e:8f:15:ab:6b:ff:00:ed:c4:d2:41:71:e3:ec:bb:
01:10:76:b9:99:82:59:57:1f:b2:58:0f:c8:36:dd:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4B:CF:B2:4D:9A:AE:B6:5F:1A:2D:00:C8:4C:FB:19:A8:53:C9:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f432d828-c4b6-3c7d-82f2-f63a16fb6841.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.124.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:7e:08:14:ec:09:45:0a:88:da:88:e7:24:fa:ee:c5:57:3d:
27:82:e3:17:c6:02:0f:28:be:31:e5:e0:b7:0a:43:a7:90:17:
45:86:d5:21:46:e3:b9:cd:f9:3b:98:81:c6:51:59:e2:3a:a2:
f0:25:f4:0e:2e:64:cc:3b:e8:62:c8:04:82:96:fd:10:b8:e6:
df:6d:e0:ff:7e:bd:e2:7f:c5:b8:a2:c0:2a:40:5a:11:12:70:
e4:05:dd:8d:33:4e:e5:cd:24:45:cf:32:f8:36:0f:61:91:5e:
5e:0b:a0:63:0d:98:96:8f:1c:ce:d6:f1:fb:04:fb:14:2b:d7:
cd:02:37:f3:26:51:c7:f0:da:6d:2a:4d:c9:30:e8:56:03:1c:
ef:c7:4f:a3:c3:83:a1:a3:15:7e:97:d1:9e:be:65:f5:b4:1f:
9e:b0:fb:04:30:34:cd:0f:2b:44:46:6a:34:35:ad:a2:e0:60:
93:15:99:23:5e:8e:de:f7:8a:c0:7a:b8:3d:bd:a9:84:56:05:
0d:dd:a9:9d:72:b6:21:75:c2:24:c2:65:90:3e:e7:df:01:0d:
b4:a9:c6:5d:e0:41:0c:15:b1:c5:13:bf:85:1e:aa:27:bb:3f:
0c:0a:49:54:dd:a9:93:b5:78:40:ab:8c:8f:2b:ac:a0:12:ab:
cd:32:c4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:00 2025 by rpki-client