Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/346428e8-3109-384d-b00f-2fa4be1890ec.roa
File: 346428e8-3109-384d-b00f-2fa4be1890ec.roa (raw, json)
Hash identifier: GN9GLIdBX7z0wDtK2q7LbwykAa82SkI8RIVp57HEemE=
Subject key identifier: 95:93:A5:72:1D:8F:C8:D7:0D:03:B4:AE:55:FB:5A:F9:40:63:B0:62
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409A58E406602CC0F8CB168580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/346428e8-3109-384d-b00f-2fa4be1890ec.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.19.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9a:58:e4:06:60:2c:c0:f8:cb:16:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=ce645562-cf43-4acc-8718-9b2ee493d6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:0b:da:c1:0d:19:e2:e5:76:53:16:34:9e:
8d:da:ae:97:7a:26:97:2b:c9:6d:c4:67:99:7a:04:
c6:4c:4d:2c:24:ca:ff:7a:ef:fd:fd:bb:ac:ac:b2:
60:9c:09:94:a4:f7:55:be:12:e3:9e:f6:0e:2d:31:
bf:2e:9b:ee:62:af:99:8f:29:e2:e8:95:a2:b7:30:
32:d2:4f:31:70:93:49:bf:da:d7:f1:ca:f1:28:0d:
98:86:1c:cb:21:eb:74:19:43:42:c9:02:e4:2a:d8:
4c:4d:2f:4c:97:4e:5f:2b:2e:f7:01:3f:f6:a7:35:
6e:25:c1:04:10:2b:4b:5e:4f:23:44:b7:4d:b9:ff:
81:43:ae:82:11:f3:c8:8a:13:04:b7:b2:9a:d7:ee:
89:13:aa:d9:5d:b4:26:74:a6:f5:94:ba:a1:3c:fb:
1d:bf:be:a6:07:d7:33:c1:60:06:80:d2:44:c5:8f:
d5:f2:46:6a:82:29:69:15:8d:0c:68:0c:26:98:66:
85:dd:19:e1:25:b2:2f:1f:46:c4:ef:84:8f:7a:eb:
e0:d1:cb:7f:ac:2d:bc:70:35:a9:4c:20:6a:59:f1:
2b:39:e6:40:b1:b8:c3:99:66:2b:16:d9:0f:77:57:
90:8e:7d:3c:85:c7:c3:ce:a1:f6:b0:07:0b:62:54:
02:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:93:A5:72:1D:8F:C8:D7:0D:03:B4:AE:55:FB:5A:F9:40:63:B0:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/346428e8-3109-384d-b00f-2fa4be1890ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.19.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:81:d2:2f:e6:e3:09:ac:28:7f:7b:4e:b1:87:05:79:6c:9b:
c2:85:fd:e2:84:ac:97:1b:f8:e8:4a:37:76:03:db:99:36:15:
e4:c5:c5:2a:96:cf:21:23:54:99:68:7e:58:1b:37:b0:e4:1e:
99:94:9f:5d:29:6f:ac:c2:3c:92:e1:61:e7:7f:7f:68:7f:b5:
a6:c2:31:22:6c:90:e2:36:97:85:45:3d:bf:8b:8f:ef:cc:9f:
46:44:0a:d1:f6:dd:f9:e1:b9:9a:23:5a:28:6d:e9:d3:3f:44:
75:8a:f1:5e:15:b0:a6:b9:bf:67:9a:93:20:a4:83:2a:4b:e8:
bf:04:8c:5b:3f:26:5c:05:18:8f:51:34:9b:ad:22:a3:17:fc:
da:6d:1b:7d:f8:4e:8e:34:b1:7a:76:0c:6c:87:6c:b3:5c:c7:
56:b2:9c:8d:b9:87:ce:b2:a1:58:80:2d:dd:a9:77:f7:6a:0e:
56:7c:9d:bc:b7:42:86:bd:64:32:2a:dd:b1:11:63:8d:67:ec:
b2:26:7b:99:d4:06:46:a3:4a:71:7e:60:0c:62:c8:2c:54:d6:
15:a9:b1:60:01:a4:86:f7:6e:97:c4:d0:58:5b:51:88:e4:92:
e4:48:33:ea:5b:35:1b:68:d9:5f:56:f8:4a:c3:4c:b4:ac:fc:
ea:2b:fa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:21:12 2025 by rpki-client