Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/09c1074f-8c97-353d-941a-d890097328d8.roa
File: 09c1074f-8c97-353d-941a-d890097328d8.roa (raw, json)
Hash identifier: YXMPhZojM+F9i/+gSoBJvy7c/mvm7FfkFJGsDiz2u60=
Subject key identifier: 87:5C:00:02:36:F8:D0:73:B8:E2:68:06:1D:6F:D3:55:DB:9B:ED:5F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E510ACD91E769814A1EF81710
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/09c1074f-8c97-353d-941a-d890097328d8.roa
Signing time: Mon 20 Jun 2022 12:00:00 +0000
ROA not before: Mon 20 Jun 2022 12:00:00 +0000
ROA not after: Tue 26 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.135.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:51:0a:cd:91:e7:69:81:4a:1e:f8:17:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 20 12:00:00 2022 GMT
Not After : Jul 26 04:00:00 2022 GMT
Subject: CN=232e0b6f-6305-4f11-b3c4-39a023c340b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:90:e9:73:fc:36:a3:32:9f:34:d5:d1:69:
35:df:e8:66:f9:bc:7b:d3:54:52:8d:35:cc:3e:d6:
c6:48:3b:a6:6e:f3:5f:32:1b:1e:cc:23:52:6b:04:
9e:57:69:03:2a:69:2b:5c:10:d2:ef:23:f7:58:03:
b0:da:0e:8d:db:52:bf:d8:76:99:9d:74:83:bb:12:
97:3f:8f:7c:92:ca:58:8c:4a:9b:2b:5e:b4:2f:c9:
4a:d2:a2:d7:42:73:10:49:2c:64:7e:b5:2c:c5:31:
14:7b:ff:5a:0f:4a:5d:49:ea:86:56:e9:53:44:c3:
93:14:5d:16:0f:54:49:27:f2:2c:14:37:10:d4:46:
97:a4:6d:d0:c7:8a:71:52:97:5c:5e:3b:0e:a6:3d:
ee:c1:4f:35:36:7c:dd:fd:11:a5:61:f1:79:15:73:
b5:c2:6a:fd:0f:84:fc:59:8a:cb:90:b3:aa:39:ef:
80:eb:d3:59:27:86:9c:c1:ed:00:06:03:c6:b0:f8:
d9:a8:b2:02:d5:69:dc:bd:eb:e7:25:fc:0d:57:8b:
44:a5:40:53:3a:ab:17:b2:5c:91:01:9b:91:db:ed:
90:fa:0f:ba:d2:e9:21:c8:8f:14:9c:42:d6:4b:12:
62:10:54:29:4d:32:cd:45:65:00:53:b3:92:d2:a4:
b4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5C:00:02:36:F8:D0:73:B8:E2:68:06:1D:6F:D3:55:DB:9B:ED:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/09c1074f-8c97-353d-941a-d890097328d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.135.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:a8:ee:b9:04:5a:46:1c:d9:de:5f:2c:f6:2e:14:61:97:98:
c6:09:92:b7:a5:2c:27:3b:b6:cc:78:81:19:90:4f:05:79:8b:
1e:d3:da:46:03:94:2e:f8:0f:0e:73:a7:75:ae:90:5a:67:b2:
24:71:0d:dd:2c:b1:ec:b7:10:0d:c4:cb:a5:44:c3:57:09:c1:
ae:65:0e:3e:65:67:07:9e:67:84:cf:7e:16:24:81:85:30:73:
72:bc:96:cc:d5:7c:1c:29:d6:d4:bb:e5:35:dc:4f:ba:e5:d9:
1a:fd:76:ac:a2:45:8b:f7:71:ba:6b:96:af:96:1f:43:23:9f:
64:89:62:2e:8e:58:f4:49:fb:c4:78:5e:e2:a8:6f:38:cf:bb:
45:c0:da:97:84:23:29:4d:b6:e1:d4:09:63:c5:56:c0:4f:cf:
be:bd:46:7c:f8:2b:c9:e7:16:92:14:ac:ba:b6:f9:3a:b4:ef:
40:d6:1c:90:36:d0:3f:fc:6a:23:0c:44:1a:f1:53:5a:90:fe:
d8:2e:06:08:60:b2:e5:2e:68:af:65:2a:ef:b8:7a:25:a2:3d:
29:a0:7a:5e:2b:b0:2b:e5:1b:7e:f5:ce:ba:b1:67:cf:13:6f:
08:d6:b3:0e:c8:46:67:4b:cf:3a:e4:74:b5:02:8f:4a:eb:79:
74:74:33:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:16:12 2025 by rpki-client