Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2834a891-43d4-3d02-bf57-ffb4a48d4525.roa
File: 2834a891-43d4-3d02-bf57-ffb4a48d4525.roa (raw, json)
Hash identifier: 738UBXkvKkXCa6nnYNyulYe6fTrZt/AVWcA2x425TUY=
Subject key identifier: A2:D0:6B:92:F8:B9:88:CE:69:7C:E6:76:91:E3:0E:AD:75:C0:D6:F7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3BB9203C6F0B8158205A7580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2834a891-43d4-3d02-bf57-ffb4a48d4525.roa
Signing time: Mon 12 Sep 2022 21:51:07 +0000
ROA not before: Mon 12 Sep 2022 21:51:07 +0000
ROA not after: Tue 18 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.135.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:3b:b9:20:3c:6f:0b:81:58:20:5a:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 12 21:51:07 2022 GMT
Not After : Oct 18 04:00:00 2022 GMT
Subject: CN=23bae8ad-f9a2-4c60-8003-88f2bb034646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:df:3b:2f:99:ce:ac:e3:e7:c4:7b:64:ad:ce:
4a:2f:ee:b8:c7:08:9f:08:e6:94:a8:eb:a0:21:e4:
3c:71:fe:ad:8e:71:e4:d7:ce:20:51:66:46:d8:b0:
99:e2:82:9e:83:05:5f:f8:8f:84:e5:3d:bd:ae:0c:
55:8a:c0:fc:a5:b4:a4:cf:55:6f:e9:ac:d2:5d:49:
70:82:df:8c:51:83:3b:9e:2c:23:7f:ac:17:df:31:
6f:5f:e5:6d:85:2d:06:76:d3:cc:5e:4d:19:05:87:
1c:74:77:4d:b9:67:a9:9c:26:8c:c1:52:be:eb:85:
f9:0e:ec:72:49:9d:db:a5:2b:e5:b2:ce:92:44:9b:
e0:30:5e:21:cb:08:8f:f3:0d:4e:52:aa:51:70:15:
7f:f5:07:e1:2a:9c:ae:99:d0:d4:27:75:43:e1:5e:
02:52:06:a5:b6:82:9c:84:f7:4a:d7:be:75:27:26:
81:1f:08:91:44:20:ba:f6:11:1a:3d:95:4c:73:cd:
b5:4d:60:17:86:ab:f8:c6:e7:1f:02:59:cc:02:ad:
10:bf:80:d7:82:92:f0:e4:0b:0b:8e:15:5a:97:45:
68:71:9b:9b:db:71:a4:29:98:5b:19:c1:03:fe:52:
cf:54:1d:6e:b8:63:5a:2a:30:aa:9f:fb:13:e6:34:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D0:6B:92:F8:B9:88:CE:69:7C:E6:76:91:E3:0E:AD:75:C0:D6:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2834a891-43d4-3d02-bf57-ffb4a48d4525.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.135.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:ca:09:ee:11:d4:2c:de:54:5d:29:17:e2:85:5c:93:ca:f0:
f2:90:46:58:43:74:1b:8b:b7:6d:62:32:49:05:97:6d:09:e9:
39:c3:ed:05:ee:50:83:ed:b2:d7:f7:d9:4c:10:ef:6d:3a:db:
1f:d2:40:c0:5e:23:49:79:c6:ac:04:b7:97:d7:ba:28:0f:73:
e7:af:0a:c1:9b:4b:18:a7:0d:d4:a5:92:63:7e:13:b7:10:9c:
dd:ca:76:f7:09:e5:00:78:d4:c4:e1:a9:9c:a3:8b:fc:29:b3:
e3:90:73:77:92:a5:08:2e:66:4f:9e:53:85:46:54:16:c9:39:
fa:2a:5b:67:69:c8:85:6f:93:36:a5:06:e0:2a:a2:3e:17:2e:
cd:6e:e8:6d:cb:74:d1:29:26:c7:8f:10:ed:df:cf:29:0b:cf:
95:23:c4:aa:2e:51:5b:78:0c:4e:3a:b6:a3:61:c1:ee:76:0a:
65:35:0f:16:9e:61:0d:44:1d:76:a2:4e:80:2a:d9:bf:e8:3a:
8e:d0:e6:ef:20:ee:64:67:82:f4:c7:5b:c9:cf:d3:c8:7f:a1:
77:32:1c:57:5b:10:71:5d:b7:f3:24:31:a1:b1:51:c7:c2:cb:
9c:d8:09:32:8c:5b:1c:7f:d5:e0:20:b1:86:11:84:5a:d5:2c:
ff:7c:ac:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:57:25 2025 by rpki-client