Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/469920d7-7ee2-3112-8b24-2addf3cfe85a.roa
File: 469920d7-7ee2-3112-8b24-2addf3cfe85a.roa (raw, json)
Hash identifier: iYsGRx5eM1ElDd7zk8+tgIoBNWLxdMBUPMEolRJUPw8=
Subject key identifier: 24:E3:35:F4:4F:CF:E2:50:58:B8:71:E7:BB:93:DE:97:FC:A3:B2:CA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840731E1055A90489F9282730C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/469920d7-7ee2-3112-8b24-2addf3cfe85a.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 136.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:1e:10:55:a9:04:89:f9:28:27:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=e9756058-f307-4bd2-8bb1-201e297b59c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:4e:2e:f4:70:cc:1f:5a:fc:fb:70:16:58:
e9:b5:f6:6e:3e:53:39:4a:b0:ae:1c:c8:25:de:98:
73:51:a1:23:65:24:0b:68:f8:55:7d:b1:d3:8a:e2:
b9:46:41:5a:12:3f:ae:cb:58:5e:ab:b6:b1:cf:18:
9e:73:70:6b:9d:64:cd:8a:a4:87:f7:fd:ac:4f:36:
f9:79:10:17:c3:77:f3:9f:ab:db:aa:83:4a:97:f8:
4f:92:98:02:cb:4f:0a:f1:71:1e:b3:51:5b:d5:b7:
42:4d:ce:0a:a7:6b:78:5d:30:35:a1:52:ce:80:16:
e6:58:33:31:b8:a4:a0:53:e7:74:c8:a3:cf:8f:37:
9e:26:8e:00:ac:55:eb:92:f1:5e:01:d6:8f:88:f7:
7d:69:64:82:91:ff:3b:7a:60:43:62:76:f4:72:4d:
38:1e:33:39:2f:95:3e:e7:8a:b9:8c:b5:9a:10:2e:
9d:7d:2f:69:0f:09:7c:e3:79:6b:90:b2:c3:4d:4f:
11:47:b4:8e:b8:98:80:47:79:d8:ab:81:35:06:92:
c9:c9:0b:fa:f2:e6:92:70:c8:5d:8d:ed:82:70:70:
46:2d:1a:eb:d6:34:52:99:8c:e1:ad:bc:67:fa:90:
68:5c:6b:8d:1a:65:c0:97:d8:78:f0:41:c3:b8:33:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E3:35:F4:4F:CF:E2:50:58:B8:71:E7:BB:93:DE:97:FC:A3:B2:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/469920d7-7ee2-3112-8b24-2addf3cfe85a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.136.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:78:92:24:b2:99:b8:41:d9:eb:ce:59:05:e1:71:eb:17:b0:
75:9c:99:8c:30:b6:33:6a:22:93:14:f8:ce:f6:db:75:b2:14:
14:05:ad:92:24:ef:00:3a:d4:51:fe:fd:20:e1:c3:9a:0c:bf:
d6:51:96:a0:58:0b:14:bf:c4:14:58:3c:23:2a:3d:67:f9:fb:
fc:e8:f8:f6:4a:e8:dd:cd:84:d9:d2:f7:fc:a9:11:c0:58:66:
90:63:54:aa:0a:6a:bb:08:61:f7:6a:cf:de:d8:d5:00:75:b2:
31:c8:69:b9:1e:ac:0e:83:58:06:8d:b5:ff:ad:35:87:f0:db:
14:b9:16:2a:b3:6a:60:34:c8:1a:76:f4:ed:c2:e4:57:f5:b6:
9d:89:3a:27:ef:43:01:4f:19:af:0c:4c:05:8e:bc:cb:96:29:
47:5c:8e:a0:46:6b:12:db:ac:c7:30:d5:c8:7f:33:ec:2b:78:
f0:4f:16:05:c7:c0:95:b2:8c:67:79:56:2c:22:f0:67:fb:66:
e0:26:c3:a2:de:06:7d:d0:21:ed:a0:94:51:f6:7d:95:8c:93:
ba:13:45:d3:1c:12:4a:bd:a9:37:af:11:73:7a:32:35:e6:d8:
ff:02:f4:f2:ae:e3:1d:68:5a:ce:19:1a:be:3a:ed:c0:a8:22:
0c:36:2e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:43:56 2025 by rpki-client