Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a14e07a-12dc-309c-8a12-ca2ce546e3ba.roa
File: 0a14e07a-12dc-309c-8a12-ca2ce546e3ba.roa (raw, json)
Hash identifier: CarFh5TJF850/NyofCTfqEP7Nch43u6aeMrSFW5XqHE=
Subject key identifier: AE:5C:9B:7D:74:AB:3C:CA:F4:5D:08:69:F0:0E:B2:8D:AB:A3:D3:87
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E01120BF1C759964C0B079DC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a14e07a-12dc-309c-8a12-ca2ce546e3ba.roa
Signing time: Mon 23 May 2022 12:00:00 +0000
ROA not before: Mon 23 May 2022 12:00:00 +0000
ROA not after: Tue 28 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.16.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:01:12:0b:f1:c7:59:96:4c:0b:07:9d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 23 12:00:00 2022 GMT
Not After : Jun 28 04:00:00 2022 GMT
Subject: CN=05da8833-336a-4186-bbc3-3245e4bac2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:80:fb:89:d4:7d:2b:06:43:0e:0f:91:1b:
5a:05:08:b2:43:12:9d:fb:fe:bb:ad:2a:55:da:8e:
0a:7f:cc:5d:e6:ac:e3:3c:28:aa:ec:ee:53:fe:bf:
20:8a:d8:69:49:ef:da:42:9c:ba:35:26:4d:fc:9a:
65:40:6f:8b:49:95:3d:03:24:9f:b2:eb:b9:e4:2d:
f6:3d:87:21:6f:80:4d:ae:ae:c1:8b:ba:15:36:24:
38:78:3b:83:90:5f:a6:b5:04:03:13:62:99:6b:78:
75:c2:99:65:c2:db:21:60:c3:7a:c4:e5:77:39:5f:
b7:df:6e:3c:6e:e0:19:82:e5:44:da:1a:a5:61:6f:
5d:81:41:f7:70:02:37:8a:8b:ba:cb:10:88:fd:96:
37:1a:dd:51:0c:71:90:b3:31:31:bc:74:b3:50:7d:
ea:cc:54:50:80:2d:8e:34:16:b2:0b:95:f1:d5:7a:
e5:05:bb:6a:5b:3c:0c:1e:7d:11:aa:ca:e5:c4:44:
99:05:cb:a1:3b:b4:1b:cd:21:e6:c7:c6:95:e3:6f:
4e:24:51:49:2a:5d:dd:52:b1:1a:7b:be:dc:3f:04:
8c:f2:af:28:f8:e7:d1:32:b6:0a:69:e8:c5:6c:89:
0f:d9:da:7a:35:47:6d:bb:ff:9b:ee:18:ca:05:ab:
95:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5C:9B:7D:74:AB:3C:CA:F4:5D:08:69:F0:0E:B2:8D:AB:A3:D3:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a14e07a-12dc-309c-8a12-ca2ce546e3ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:af:1e:70:f5:0c:95:0d:60:05:76:8c:40:21:c7:57:68:58:
09:51:37:78:67:7c:b1:b8:2b:a3:ce:bf:da:7b:65:3e:1f:51:
0c:3c:e0:ab:95:ae:b7:7a:ef:5e:19:90:a1:2f:1c:87:e2:92:
d3:15:33:c2:8d:99:40:e9:dd:b1:f7:00:cb:af:1f:72:65:bb:
27:de:91:16:05:50:33:c2:ff:a1:62:39:f2:b6:c1:08:85:09:
6e:ac:de:62:fa:4a:7a:03:ee:83:56:1d:aa:18:65:18:98:ad:
b9:4d:6a:af:57:96:43:e7:35:43:ae:ba:58:2b:c1:c7:ab:a9:
95:c8:ad:74:e4:ed:04:7c:a5:1a:70:cb:a1:e1:ef:76:23:a0:
d1:1d:85:8d:ee:53:2e:db:7c:e4:b4:9e:3d:26:ae:8e:b7:05:
c4:48:10:d0:56:ef:4a:68:d2:b7:d9:c5:c7:c0:30:ec:0a:32:
4b:97:32:d9:a6:ee:c3:2d:85:57:e1:79:cb:73:b1:c3:93:b5:
1f:00:05:b8:70:eb:d7:cc:2f:d7:9b:05:c0:a2:1b:a6:c2:c2:
b9:5c:48:ec:3d:1d:78:06:a0:5c:13:9e:7c:bf:aa:7e:85:83:
53:e2:ab:fb:bb:0b:f1:c0:84:99:a8:96:ac:c4:44:81:b9:e7:
77:e1:10:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:08 2025 by rpki-client