Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f60ab0f6-c266-38fb-9ac9-6a3523627fa8.roa
File: f60ab0f6-c266-38fb-9ac9-6a3523627fa8.roa (raw, json)
Hash identifier: 4kjPlUHfiP5tB+eBg4C6oejnOz5G0r8ZVrvUqL2Rvgo=
Subject key identifier: 44:98:61:9F:F8:B1:9A:23:B4:DE:F9:30:94:96:F1:73:C4:93:F8:89
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7E58A3082FC790640438E340
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f60ab0f6-c266-38fb-9ac9-6a3523627fa8.roa
Signing time: Thu 06 Oct 2022 12:00:00 +0000
ROA not before: Thu 06 Oct 2022 12:00:00 +0000
ROA not after: Fri 11 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 47.128.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7e:58:a3:08:2f:c7:90:64:04:38:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 6 12:00:00 2022 GMT
Not After : Nov 11 05:00:00 2022 GMT
Subject: CN=0e5551a1-0424-4765-941c-c95020a0e2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:7b:ba:dc:f0:25:90:4c:c7:c4:d1:eb:ce:
46:2c:8c:64:03:3a:9f:a4:b0:7a:be:0a:f0:0c:ba:
0b:a0:61:c4:fb:a7:3e:d8:6d:f6:02:32:73:a1:bc:
81:c8:ab:04:0b:6b:8d:11:e9:22:6a:1a:9d:b1:99:
96:05:27:2b:c9:1a:59:19:18:3b:c5:f0:71:ba:76:
63:00:34:31:0e:2c:cf:cd:7c:e0:b8:ec:bd:3e:ab:
58:02:0d:fb:f1:2d:02:4c:79:0e:5e:8e:78:c4:f1:
d0:3a:19:2e:94:e7:36:9a:fd:90:31:dd:a2:81:b6:
eb:5e:01:33:a7:ef:7b:28:e1:c2:5e:bd:8a:7f:3f:
4f:5e:51:8b:36:ae:30:c5:0b:72:9c:b9:47:ff:59:
69:db:4e:0f:59:8a:36:73:fd:8d:7c:db:ba:d3:56:
78:32:29:b0:df:4e:91:2f:04:38:a9:f9:7b:ed:68:
27:d7:0e:cf:c9:8c:a6:8e:2a:25:45:95:51:ae:81:
fb:d9:8f:8d:b0:cd:be:51:0d:14:c8:62:b8:33:3b:
25:38:9e:a7:54:ca:8e:8c:89:c5:e1:8d:0f:8b:cd:
14:22:f8:b8:37:38:06:45:3f:94:0a:48:a3:95:6a:
bf:f8:54:28:d6:68:a7:8e:b6:29:ca:43:37:47:2d:
af:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:98:61:9F:F8:B1:9A:23:B4:DE:F9:30:94:96:F1:73:C4:93:F8:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f60ab0f6-c266-38fb-9ac9-6a3523627fa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
47.128.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:31:32:96:ed:ff:f0:e5:e0:11:98:27:ad:20:22:2f:79:0f:
b8:d1:a8:22:aa:69:d4:c0:91:28:cc:db:01:6a:f6:0d:cd:6b:
e7:d1:ec:bf:52:aa:89:f7:3b:90:eb:da:6c:02:26:c5:46:8e:
ad:24:28:9e:83:6b:cc:96:3d:e7:70:d3:e1:32:50:c8:ca:48:
48:12:cc:e3:4d:9f:fd:a8:b1:7d:51:0d:4f:a1:4e:ff:4f:bc:
09:3a:b9:67:29:13:68:be:e2:ac:5b:8b:46:b9:99:fc:b6:fc:
62:b7:96:32:33:a5:b5:59:f0:7a:1f:69:98:5b:25:95:a7:d5:
ba:83:18:b0:95:0e:42:7b:de:7e:58:3a:55:62:c7:1d:89:63:
4b:51:c8:cb:d4:41:62:e4:37:16:bf:f5:7a:79:c9:8a:93:ce:
21:0f:36:5c:9b:f8:7a:5a:87:91:b3:37:cd:87:af:96:3a:f1:
48:ec:58:f7:61:c1:f5:4a:ea:6d:96:c8:79:94:ef:a3:ca:6c:
b5:d1:f0:54:b2:46:de:fb:ed:fb:3f:92:eb:88:93:7f:6b:f3:
5c:74:11:95:a8:a5:a6:a4:0f:26:42:ca:9c:5a:f9:3c:f9:a1:
7e:fa:64:f6:37:86:9e:ad:04:9c:79:19:84:c1:02:41:51:77:
c3:24:cf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:33 2025 by rpki-client