Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1a44c655-8e6e-3218-9291-d4e9018dacb0.roa
File: 1a44c655-8e6e-3218-9291-d4e9018dacb0.roa (raw, json)
Hash identifier: ndWgVIpg4CvWleoPMGeVK2rfpdZO6gK+L/GHs4+vgfk=
Subject key identifier: 72:78:30:EC:AC:AB:9F:64:37:BA:06:5A:36:31:7F:2B:49:78:D2:21
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DB480605813C0FC3703E877A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1a44c655-8e6e-3218-9291-d4e9018dacb0.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 31 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b4:80:60:58:13:c0:fc:37:03:e8:77:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : May 31 04:00:00 2022 GMT
Subject: CN=1f2586e3-f6b3-4fc9-99e8-2ff0647f5add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a0:20:90:8e:d1:66:00:9b:68:f6:32:84:e9:
e5:4d:c4:fc:05:b8:07:45:62:73:3b:94:46:d8:06:
6a:5c:fa:f2:12:0e:57:40:70:b3:97:3c:60:27:06:
a4:df:77:0d:e0:67:5c:e5:dc:47:7f:78:36:f9:d4:
c9:87:f8:cd:0b:07:28:05:7a:ee:dc:fc:20:36:79:
a9:94:c8:93:e6:26:5b:13:fb:d9:32:ea:5f:24:0c:
18:36:5b:8f:6c:8f:b0:40:60:51:28:4f:ff:46:41:
03:d0:a5:32:93:d5:d6:4b:40:e4:c4:9f:7a:8a:9f:
0d:eb:5d:ba:a9:8d:4b:c0:f3:9e:b1:2a:7e:a5:6d:
b7:49:b0:32:e0:15:f5:0b:8c:27:e3:5a:dd:76:91:
5a:95:fb:91:2c:53:9a:14:2b:e5:cc:da:50:23:0d:
a1:22:b7:57:4f:73:e1:51:f2:0c:5f:6d:4a:be:5e:
6d:6f:e1:65:83:7b:d8:e4:3a:c2:c7:54:fa:d9:5c:
0b:b2:4b:de:a8:5e:d1:b1:32:c3:22:42:35:3f:ab:
79:7e:95:ea:4a:cb:bc:9f:32:c2:2c:34:74:e7:db:
21:40:c4:eb:31:e8:9b:0b:67:15:d9:ba:e5:ac:e6:
46:6b:d6:19:30:d7:fe:08:8d:a3:7f:5e:4a:71:74:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:78:30:EC:AC:AB:9F:64:37:BA:06:5A:36:31:7F:2B:49:78:D2:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1a44c655-8e6e-3218-9291-d4e9018dacb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:85:bd:ef:c4:53:5f:2a:68:9c:19:ef:38:db:47:a3:32:6c:
08:9c:7d:f5:fb:61:df:a2:65:fc:7b:e9:da:92:11:c5:3a:9a:
b8:bf:e2:54:aa:9a:4c:8c:2b:bd:ff:44:22:59:96:cc:38:56:
2e:ef:f8:20:1e:d4:14:21:fb:fb:6f:35:c6:ec:5f:53:85:17:
fa:5b:60:96:21:e1:16:d2:d6:31:c2:6a:8a:7d:3c:5a:06:9a:
ef:47:14:87:0d:bd:27:0c:c4:84:3b:77:52:46:66:11:b3:da:
8a:eb:27:8a:d8:98:d1:ce:a5:4f:36:46:01:8f:41:be:b3:82:
3c:96:69:b9:6a:1c:18:03:c8:2b:b9:d2:06:bb:35:e9:6c:55:
f0:fe:f6:3c:c9:54:87:0c:dc:94:b2:2f:d1:7e:ce:8e:5d:7c:
c8:82:85:16:d4:2e:40:6a:74:15:ba:4d:c4:31:01:b2:04:a4:
3c:0c:15:32:6f:0b:e4:ee:b7:dc:8f:ed:03:c1:d0:a1:4d:bf:
d5:2e:e5:7d:12:59:ba:d4:09:c3:a2:16:46:d8:59:24:1d:87:
2a:46:4a:e2:8e:fa:fa:50:fa:30:1c:da:c9:99:d9:28:2b:c5:
91:73:50:8a:89:89:da:9e:b9:9b:25:c2:2d:a2:10:76:07:f6:
99:04:5a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:58 2025 by rpki-client