Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4b9d171d-ec95-378d-b5ad-389c159a4736.roa
File: 4b9d171d-ec95-378d-b5ad-389c159a4736.roa (raw, json)
Hash identifier: S/YjpXcz+iNtbXDx9UzLn1qEO+ptfb9SCbLCT64g7s4=
Subject key identifier: 9B:43:FB:03:CE:C3:EC:51:3B:A5:82:83:46:82:7C:7E:A0:5D:B1:47
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D8B96E0EE5C9A7110BCD88A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4b9d171d-ec95-378d-b5ad-389c159a4736.roa
Signing time: Tue 12 Apr 2022 04:00:00 +0000
ROA not before: Tue 12 Apr 2022 04:00:00 +0000
ROA not after: Tue 17 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:8b:96:e0:ee:5c:9a:71:10:bc:d8:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 12 04:00:00 2022 GMT
Not After : May 17 04:00:00 2022 GMT
Subject: CN=96a0b148-6285-4d61-b168-e0e0176a18f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:47:73:46:6d:96:92:28:d8:56:c2:5d:08:b4:
cb:c9:9d:98:75:9b:1a:d7:2c:f4:98:b6:2e:ca:30:
ce:aa:b9:31:58:5f:03:52:cc:2c:a1:30:23:02:f1:
1c:4d:94:84:97:54:c9:1b:ed:02:a0:27:c6:95:6e:
4d:9b:34:b7:1a:8e:32:62:b6:d8:31:16:bf:4e:37:
b1:9d:7b:73:40:d9:d3:73:e8:47:75:71:15:ae:10:
84:59:fa:ff:27:39:51:5e:8c:f6:b9:f7:77:4b:fe:
31:28:31:52:4a:52:3d:c9:51:cb:ba:a7:26:de:b0:
a2:9a:24:27:6c:82:73:a2:fe:07:8a:10:15:d6:09:
ea:74:53:43:af:c1:1a:a2:6d:80:24:e6:be:80:22:
3d:f7:d5:12:09:51:9d:c0:ea:9d:cf:1a:8a:7c:bf:
57:28:a7:91:83:d1:84:00:ca:51:c6:51:69:08:39:
34:8c:28:de:3c:92:68:5f:ce:96:cb:0a:0e:38:58:
79:82:9b:b6:84:56:fa:0b:af:30:1b:24:1e:2c:4b:
ba:c6:b2:72:fa:cf:b5:e8:66:81:70:0b:47:e9:18:
e6:33:a3:d6:99:9b:fc:bc:f7:9b:3b:61:de:37:c2:
a5:a3:e6:70:be:9c:76:5b:84:c5:3a:88:41:6d:cc:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:43:FB:03:CE:C3:EC:51:3B:A5:82:83:46:82:7C:7E:A0:5D:B1:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4b9d171d-ec95-378d-b5ad-389c159a4736.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:71:74:3a:b2:96:85:a7:88:89:46:09:67:9d:8c:fe:13:03:
87:25:9d:9b:fc:a2:d7:e9:f7:cd:97:79:00:d7:89:c7:0c:f8:
a4:94:be:25:59:38:8e:4f:42:00:c8:95:eb:38:87:87:0b:3b:
78:61:70:33:9a:92:18:45:92:67:16:39:72:0a:6a:03:d9:db:
0f:ce:6c:28:90:78:95:ff:32:a5:47:c1:65:ee:39:02:ff:e4:
9b:7f:ad:cb:ee:85:6d:e1:29:54:cf:0c:9a:0c:24:5e:ee:c3:
3a:eb:e9:d3:18:6d:2e:80:c7:bf:71:cd:64:bd:c6:b4:0e:70:
de:b5:22:39:3c:70:f4:5e:c5:7e:66:cd:fd:a6:ec:12:e9:54:
f7:5a:ee:46:3b:ac:d4:a9:5e:b3:f7:e0:2f:84:7d:8f:38:2a:
9b:26:74:f7:db:c0:f5:38:9d:e6:e8:e7:81:e4:e6:71:61:60:
96:c0:67:e7:14:22:ba:b8:83:68:7f:ef:9d:d0:b5:78:3c:4e:
d5:59:e4:e3:43:db:11:f4:c9:97:a2:ba:b2:33:ab:bf:1c:39:
37:80:3f:c7:67:e5:2a:83:ad:59:4f:d2:86:1b:b3:5c:e8:35:
34:24:42:1e:f4:13:22:0f:4a:95:58:a1:e8:3e:02:bb:41:cb:
9c:08:c0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:47:31 2025 by rpki-client