Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/25adeb6e-59f3-391a-a490-61844fa767b4.roa
File: 25adeb6e-59f3-391a-a490-61844fa767b4.roa (raw, json)
Hash identifier: YJu9O7ip9tNYQsrjykJnHXi4tu9Efa5m2Rf/5EOTBkE=
Subject key identifier: 6D:B9:0D:80:7C:73:D9:6C:A8:2B:74:25:B4:BF:7E:7C:77:56:5F:A4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DDBB3DF285E652F9371061280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/25adeb6e-59f3-391a-a490-61844fa767b4.roa
Signing time: Mon 09 May 2022 12:00:00 +0000
ROA not before: Mon 09 May 2022 12:00:00 +0000
ROA not after: Tue 14 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.132.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:db:b3:df:28:5e:65:2f:93:71:06:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 9 12:00:00 2022 GMT
Not After : Jun 14 04:00:00 2022 GMT
Subject: CN=4d47637f-9a31-4125-9e42-583a63c57612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:87:3d:5a:1f:c1:e8:c8:f5:5b:0b:2b:a7:3a:
47:1d:8c:23:54:ba:0c:a9:26:1c:79:4d:0b:fa:c4:
b0:1f:75:ef:d0:9d:39:21:ab:e1:f9:0c:99:79:f2:
de:cd:e3:04:94:fe:c8:4c:6d:db:26:1a:35:e7:61:
9a:1a:e9:f2:30:3e:45:8c:3e:95:6f:f1:fd:c6:1e:
70:3e:5d:ec:a9:7e:f5:db:ba:c6:de:f4:3c:0b:8b:
d7:c8:6a:bc:1c:70:a6:cb:7d:54:20:68:d1:4c:09:
3d:cd:6d:76:db:03:68:d6:8c:6d:ce:36:a7:a0:f2:
92:3f:e1:a0:3a:74:34:15:33:13:bb:f0:8b:ce:28:
00:c8:ea:9e:40:0f:2e:27:09:67:1b:c3:2b:cf:15:
e0:72:26:0a:9d:de:86:16:f7:e0:cf:8b:b4:42:f1:
58:ef:94:92:d5:60:29:49:94:a9:22:cc:43:63:17:
6e:5f:ae:a1:68:7d:85:8a:99:50:b2:5a:08:fa:96:
8e:cc:01:b2:56:d7:6b:40:fc:ea:0c:54:7e:26:8e:
93:10:78:90:7c:8d:c7:bd:02:fc:23:06:eb:3e:b0:
5d:5d:7e:68:d5:bb:e1:81:3a:b0:20:2d:27:97:2a:
f1:e4:0a:2f:27:8e:5b:60:39:e2:65:fc:47:b9:c5:
c1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B9:0D:80:7C:73:D9:6C:A8:2B:74:25:B4:BF:7E:7C:77:56:5F:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/25adeb6e-59f3-391a-a490-61844fa767b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.132.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:c9:56:5e:ac:c8:cc:35:fb:0e:42:ad:72:70:c7:12:25:46:
5f:00:7e:79:ae:13:f4:ee:f2:61:5a:e2:83:1b:d9:a5:14:b2:
2e:b8:e0:09:84:52:5e:65:a2:09:e2:53:ce:c0:93:bd:5d:ea:
f9:a8:9a:38:c6:a7:b3:5c:b2:f7:9c:cc:3b:0a:9d:87:0e:34:
62:f6:74:1b:04:5e:7b:e7:85:f0:45:bb:af:b7:de:18:7d:e0:
a2:ea:57:4c:f4:af:ee:3b:e3:97:32:12:c3:d4:df:d8:18:0b:
b9:e2:8f:c4:86:fb:9b:a7:c9:91:53:d8:81:cb:df:1e:f8:05:
1b:82:bd:31:b3:3f:8b:88:fd:7e:47:0f:98:19:71:86:15:55:
76:a1:08:65:6c:42:db:c7:93:f4:cc:b8:61:3b:76:10:d4:d4:
3b:0e:aa:7f:e8:4b:8d:4a:90:e4:f8:74:06:bc:5f:23:be:2e:
bc:3f:07:5d:6b:b4:f3:48:16:48:06:2a:65:5d:f0:92:5f:75:
26:3d:62:77:80:97:6c:c1:dc:28:8e:7f:da:0c:99:e0:08:c1:
5a:76:44:d9:75:6b:41:e5:7b:5c:a6:02:93:96:57:9b:76:5f:
42:11:ab:0b:0a:71:c4:3c:62:e6:10:23:13:02:af:72:fb:34:
47:67:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:12:46 2025 by rpki-client