Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4474ee74-cb30-3feb-ae7c-50487270c1c5.roa
File: 4474ee74-cb30-3feb-ae7c-50487270c1c5.roa (raw, json)
Hash identifier: vpim7XBTRWwRlybd5qbMx+XUP3U3G1Ub8mwZtfHQFMg=
Subject key identifier: 60:6B:79:B9:62:C6:C1:B7:1B:E2:35:46:90:A5:21:27:9E:84:11:DF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D3D5C9573546FC3BE389ABAA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4474ee74-cb30-3feb-ae7c-50487270c1c5.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 19 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3d:5c:95:73:54:6f:c3:be:38:9a:ba:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Apr 19 04:00:00 2022 GMT
Subject: CN=573df57a-08f7-43e8-b16c-8b782b95340a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:69:20:74:d2:b3:8d:3e:5a:ad:b9:32:55:c4:
af:5e:52:c5:c4:50:43:c8:59:53:4c:41:85:46:da:
df:b1:f2:63:bc:30:fc:7e:3c:7b:6b:9b:a8:ce:1d:
df:60:78:e0:bb:bd:f1:bf:cf:86:e6:15:6f:e7:f3:
34:0d:80:f2:4a:68:a5:15:72:b4:0c:66:46:35:ab:
0e:ac:b1:78:48:2c:e0:55:f1:32:27:4a:6c:98:b6:
67:23:1a:7a:90:30:73:2f:b8:34:63:d3:f9:35:ef:
ae:b0:b8:9c:38:0c:7e:9e:4b:2b:57:bd:2b:19:d8:
33:b4:c8:09:46:a7:57:bd:54:2a:98:74:5b:5d:67:
83:6c:90:3d:c2:38:f3:2d:de:92:94:5a:d8:bd:8d:
b3:a9:55:a9:cb:d1:d4:60:48:9e:e6:48:6d:b1:bd:
46:ec:f1:81:1b:f7:4b:ab:12:26:fe:55:0a:48:63:
ac:0f:d5:82:be:53:3c:9c:8f:51:40:ef:8d:09:42:
ce:c4:f1:7e:de:a2:a2:18:ec:2e:20:76:ee:cd:a9:
ce:21:ca:92:82:58:d2:e4:a0:45:6c:f7:1d:f2:a1:
3c:c5:fb:cb:08:5f:46:38:69:4e:a5:1c:9c:5e:98:
3d:c1:7e:98:b8:90:0a:fc:fa:87:e6:b6:f0:f1:44:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6B:79:B9:62:C6:C1:B7:1B:E2:35:46:90:A5:21:27:9E:84:11:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4474ee74-cb30-3feb-ae7c-50487270c1c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.136.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:1b:4d:f3:e8:d7:23:19:05:f0:a1:1e:32:2b:80:8a:d3:55:
d9:1d:eb:ab:e8:75:4f:ec:a5:d8:46:0d:29:46:00:83:4b:5a:
52:60:de:58:d1:4f:0b:05:37:8d:85:6f:e7:13:9e:d5:e6:39:
5b:b9:63:ef:32:13:17:62:73:ce:90:8e:af:49:25:ee:0e:8a:
65:90:0e:0f:71:5e:c2:75:d9:0d:09:53:87:3a:99:5c:b3:5d:
84:38:e0:5e:ba:d0:5e:e8:0c:14:99:d8:84:ba:68:d4:45:b6:
80:ec:b4:4c:4e:cf:84:0f:5e:75:36:a1:cc:22:8b:5e:d2:23:
39:fe:88:a4:09:29:36:12:ab:7d:82:00:4d:f0:90:89:73:f2:
c1:60:24:6b:53:de:99:38:7a:48:5c:16:d3:d0:68:6b:06:3c:
1a:a6:99:be:dd:de:f2:30:71:24:93:e0:98:9b:f2:74:ee:a1:
63:ff:5a:c6:a9:ed:45:97:2a:98:26:78:04:2a:63:a1:bd:1a:
f0:53:7c:2c:74:78:f3:85:e5:96:ae:ad:07:8a:d6:fa:55:7e:
3e:e8:2c:7c:f0:94:bb:88:8e:c5:7b:fb:ef:9c:42:55:62:ed:
0c:87:f4:23:9b:d2:6d:a9:d2:7f:c3:3b:3f:ed:b0:a5:1b:f5:
4e:ad:0b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:21:53 2025 by rpki-client