Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2651a639-ab44-35c4-8bd6-759ed6076e01.roa
File: 2651a639-ab44-35c4-8bd6-759ed6076e01.roa (raw, json)
Hash identifier: jR3eDTLp+vQkL7bEKWFJTK7HnqBXfxn2inBOP4YuhiA=
Subject key identifier: 52:6E:7A:7D:14:3D:AB:35:1D:CE:39:A6:D3:E4:5D:9A:31:6A:29:A4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840C1C03616DB32C7D640655F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2651a639-ab44-35c4-8bd6-759ed6076e01.roa
Signing time: Mon 30 Jan 2023 12:00:00 +0000
ROA not before: Mon 30 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 136.16.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c1:c0:36:16:db:32:c7:d6:40:65:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 30 12:00:00 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=5d2ac9fd-a36c-4c5a-a1e9-5c3f8bf24bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:57:0d:bf:36:55:72:4a:e0:b5:65:31:ba:e8:
c1:a9:c0:d8:84:b3:f5:ea:e4:7e:24:a7:49:96:e2:
73:e5:36:bf:73:07:2b:35:c8:1e:cf:3c:a5:51:2c:
44:a3:d8:08:99:9e:2b:c9:10:fd:a7:23:0c:82:3f:
21:c8:92:79:03:60:bb:9f:49:cd:cf:7b:1b:50:f7:
90:25:d6:d2:18:e6:39:f1:63:11:4b:a2:e4:d9:5e:
17:8e:df:24:e7:79:a7:de:29:7e:08:c2:5c:6f:25:
36:a7:0e:ce:c2:08:0b:52:82:2a:cb:d7:21:ce:07:
f9:fa:27:07:f8:d0:ba:a0:37:1c:b4:fa:27:cf:12:
53:97:45:b1:c0:b8:fd:25:7b:91:bb:1b:af:0a:f5:
81:ed:30:7f:91:26:78:57:52:8f:62:83:95:11:fa:
99:a3:18:fd:4d:cb:eb:22:dd:90:47:35:b6:66:a1:
14:af:a1:d1:39:c9:40:ee:74:ba:af:83:f3:66:ae:
53:b8:f6:97:ad:be:22:21:95:ff:32:dc:a3:d8:ac:
73:05:99:4b:48:78:40:20:75:f7:6c:5a:2a:59:fd:
3c:de:8a:78:59:67:49:bd:05:3a:a5:7c:b3:35:7f:
29:f8:76:6c:81:91:d2:72:6f:47:42:31:97:5c:b3:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6E:7A:7D:14:3D:AB:35:1D:CE:39:A6:D3:E4:5D:9A:31:6A:29:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2651a639-ab44-35c4-8bd6-759ed6076e01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:a6:02:c0:41:9c:2d:df:38:bf:6a:3f:80:43:bd:4d:33:76:
b7:f5:b6:43:c2:9f:70:3c:24:96:ae:6a:d6:f7:03:a3:b5:cc:
c1:00:36:25:47:27:b1:cd:2f:d2:6e:e4:1f:11:1b:ce:ea:48:
8d:2e:37:0d:12:b3:90:c1:d4:48:9d:42:ff:96:88:f7:86:25:
bc:af:2d:74:12:d6:e2:68:2c:a8:6d:72:bd:c7:2d:0e:7f:85:
e5:cf:8a:36:fe:7e:8e:bc:d3:cd:b4:a0:4a:fb:32:18:52:7d:
88:0f:3f:3d:e3:fe:56:b6:04:ce:3a:6f:bf:60:ed:e0:a2:5f:
65:7e:a4:e7:f5:d7:a6:3f:bd:fa:ca:32:1a:5e:93:c2:5c:1c:
52:cd:16:bc:40:87:99:fd:2c:c5:08:f9:8d:a1:b2:f2:de:f8:
ce:1c:66:f8:48:45:6d:00:f9:03:48:a4:0b:42:d3:8e:0a:b7:
d4:58:6a:63:fe:99:fe:22:a6:c1:d1:ea:9b:cd:3d:9a:d8:a8:
c8:5b:eb:e8:66:4a:88:d8:02:96:99:26:49:d1:2d:7c:57:72:
70:75:d3:3d:56:b8:2c:44:a2:5a:37:ab:87:07:6c:e4:58:c9:
9a:72:aa:8a:49:13:cd:f3:87:d6:cb:21:20:3f:ae:02:47:28:
c2:e6:20:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:56:16 2025 by rpki-client