Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/045e0f5b-0be0-3909-9d3e-6626a32e9450.roa
File: 045e0f5b-0be0-3909-9d3e-6626a32e9450.roa (raw, json)
Hash identifier: Z1J9i+FiU+qdo7TXQbwG0NEv1/I8NsF1OxpXGZ4fhtI=
Subject key identifier: AF:A5:9C:FA:F9:E4:09:50:82:96:B4:89:E6:F7:40:45:B0:33:53:57
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EC6694A1A88E4E7DEA48CAF60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/045e0f5b-0be0-3909-9d3e-6626a32e9450.roa
Signing time: Mon 01 Aug 2022 12:00:00 +0000
ROA not before: Mon 01 Aug 2022 12:00:00 +0000
ROA not after: Tue 06 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:c6:69:4a:1a:88:e4:e7:de:a4:8c:af:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 1 12:00:00 2022 GMT
Not After : Sep 6 04:00:00 2022 GMT
Subject: CN=c7461306-8a40-4590-bf6d-1c9c9ec6714a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:65:b1:aa:9e:cf:55:07:fa:68:fa:c6:90:
69:9c:50:57:2a:03:a2:34:5a:ac:8f:9a:f4:45:38:
37:bd:ee:42:e3:5a:88:ca:55:02:e9:fe:51:1a:c1:
d2:92:79:20:88:88:9e:96:f5:ad:3a:b9:31:e0:90:
bd:ec:16:b0:9f:08:33:e0:b0:b1:60:b6:a9:0e:22:
4e:a7:f8:0b:dc:e3:e1:a6:5c:7a:54:2c:7f:fe:67:
04:67:a6:da:8a:5c:ba:02:5c:e6:62:53:dd:93:da:
52:c1:91:df:42:05:c0:6d:97:11:ee:29:53:2a:f2:
d2:77:2e:a1:2d:e5:10:7b:04:15:1e:2c:79:26:49:
d0:e1:0a:5b:75:ce:f0:7a:b0:e3:df:6b:eb:5e:ca:
58:24:85:1f:c8:b8:ee:e9:8d:65:b5:b2:ef:7e:9b:
ae:68:67:c9:d9:47:7a:e8:cc:ad:2a:06:0e:6e:d3:
cf:30:67:c9:06:10:8e:53:2f:e6:e5:3b:49:b2:fc:
14:d6:e6:f5:de:4b:49:9a:a5:24:5c:01:bf:67:45:
4e:5f:bc:12:0d:8c:40:04:29:b8:74:0e:0f:06:98:
fb:3c:b2:99:1f:b9:6e:2a:3a:31:e7:13:1d:2a:2c:
c0:51:23:43:d9:f4:d4:f7:05:ab:d7:cb:de:e7:dd:
07:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A5:9C:FA:F9:E4:09:50:82:96:B4:89:E6:F7:40:45:B0:33:53:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/045e0f5b-0be0-3909-9d3e-6626a32e9450.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.136.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:4f:07:46:6c:c9:b3:98:15:1b:df:bb:3d:86:f7:9b:c1:d9:
b5:66:18:b2:de:c9:08:82:d6:a9:b4:ee:22:42:6d:4e:d9:79:
2d:d7:ec:e6:13:f2:0e:c0:74:98:1f:eb:a9:8b:7b:dd:23:24:
1c:ee:4e:c6:1f:ea:f0:d6:d6:ad:9b:bb:d9:20:f6:be:3a:23:
e2:e1:5e:f5:ab:d9:77:ab:c8:20:34:53:02:a0:a4:97:91:d8:
78:51:02:a4:ff:81:6f:7a:cb:4f:d1:a1:62:ba:3c:24:8b:a6:
00:b2:a7:1d:3a:ef:a8:90:15:8f:50:63:67:1a:21:1c:2b:32:
b8:3a:cf:f9:ad:ed:81:49:78:73:07:05:d6:92:f8:d9:17:89:
f2:2e:89:92:1e:3d:0c:0d:5e:83:87:94:8b:d1:9d:23:f5:86:
6e:78:1b:f8:47:98:25:a7:43:b2:6a:b4:4a:68:30:37:04:4b:
45:0c:30:c7:ef:72:47:f0:b1:13:e6:ca:80:50:c2:8f:6a:2c:
68:27:8f:c0:2b:70:8f:23:b5:7e:c6:ec:06:cf:9f:9f:46:20:
b5:d4:b2:33:51:b1:b9:12:a7:87:15:92:1a:7d:8f:85:45:2e:
cd:df:8c:21:6d:25:35:10:70:45:fd:ec:03:6a:ab:04:35:ee:
b0:1b:dd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:48 2025 by rpki-client