Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ed671c0-fe1a-3782-b3e3-4a1b414042c4.roa
File: 3ed671c0-fe1a-3782-b3e3-4a1b414042c4.roa (raw, json)
Hash identifier: R7DCJPchEYzPl8xj2q/J7OjFOKbzpIg2vz2JJIjMxDc=
Subject key identifier: F3:E5:CB:E7:1F:2A:1B:B0:4A:36:7A:E2:D6:AE:6D:6A:DD:95:8A:B6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584024A11DEC86D8CD22E1499000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ed671c0-fe1a-3782-b3e3-4a1b414042c4.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 136.132.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:24:a1:1d:ec:86:d8:cd:22:e1:49:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=d3da5a3a-8149-4ed8-9122-eed2829b4bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:1e:45:7d:c2:93:f3:bb:d3:f4:65:e5:f9:
8e:a9:77:e7:1a:19:13:ec:af:89:18:76:75:d5:d1:
b0:48:63:f9:24:79:42:c1:1f:34:ad:7e:4c:b2:72:
98:63:47:7d:1b:f4:6d:43:43:60:29:dd:1e:00:93:
e5:d4:fc:40:66:1d:fe:93:05:93:09:40:a0:60:98:
d0:0e:8e:c7:29:3c:81:39:60:66:72:c9:eb:ce:1b:
28:4b:ea:4f:7f:e0:41:13:c0:03:ff:37:b9:06:50:
d0:a5:3b:c9:20:f2:6b:f2:81:e9:ef:a9:68:02:40:
41:b3:18:0d:fb:ed:74:83:11:76:49:1c:1a:2f:3b:
60:43:4a:8e:fb:db:0f:50:b4:bc:cf:57:f1:b2:65:
5e:6f:48:ce:2c:41:47:d4:1f:85:0a:08:2d:8e:e3:
37:d0:c5:07:e6:e3:91:5a:b4:29:6e:93:83:01:a8:
27:e6:f0:20:11:78:6b:25:d6:e0:a6:fc:9a:ac:b3:
69:c2:03:1b:2c:ed:95:2a:dd:dc:13:ce:50:7a:a0:
3e:ae:81:a9:50:b2:a0:85:35:cd:49:ff:42:65:ac:
e6:4b:63:0a:57:f3:d4:ee:45:0d:f5:42:fe:6d:4d:
bf:3b:44:40:bd:7b:cd:e8:30:35:9e:ac:da:bf:c8:
a5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E5:CB:E7:1F:2A:1B:B0:4A:36:7A:E2:D6:AE:6D:6A:DD:95:8A:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ed671c0-fe1a-3782-b3e3-4a1b414042c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.132.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:8d:3e:51:1f:77:7f:d5:68:4e:47:99:2d:fa:9d:3a:80:a8:
28:99:bc:de:25:e2:e4:a8:0b:96:4d:ff:8c:87:40:90:ff:0d:
86:25:33:ce:e5:c2:12:a8:ab:ac:c9:cc:64:e3:94:b4:f6:32:
7a:7d:74:f9:00:ad:4d:91:77:3a:ff:15:09:c8:b1:53:7c:83:
8e:5d:ca:bd:7a:37:b6:1a:37:c4:58:b9:5d:fb:4f:eb:19:37:
d5:33:6c:79:e0:03:3b:b3:21:bd:7c:55:4e:c2:e9:86:59:5f:
f6:73:80:3d:59:fa:30:88:2e:f6:64:64:44:79:5c:b9:dc:5f:
13:1a:0a:d1:44:8a:52:d9:a3:e3:2f:49:91:d9:fd:ed:db:dd:
27:da:41:e1:02:97:3e:1f:f7:1c:88:73:4f:92:1c:3b:fb:eb:
53:9b:d1:0d:44:ea:7b:c3:7a:a9:13:68:3d:51:2a:c4:ea:d0:
d5:8e:10:b1:23:16:84:08:da:b8:40:e0:de:bb:be:99:f2:4b:
48:43:a5:df:df:ba:57:c2:55:01:06:d1:c6:3e:4c:12:db:38:
3c:cc:9a:42:a5:af:c8:b3:32:6c:bf:10:f3:28:92:4c:16:f1:
8a:55:8f:be:44:f4:30:d1:62:52:32:5a:c1:f2:8b:62:87:0f:
43:42:10:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:21:25 2025 by rpki-client