Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/569e7b6a-beac-3749-9fd7-c83bda7f1d9a.roa
File: 569e7b6a-beac-3749-9fd7-c83bda7f1d9a.roa (raw, json)
Hash identifier: SG4cORVhnsgR6OwpBtVfN/75EysUsq1tuCm+SR/E3wc=
Subject key identifier: D0:73:97:C3:86:C2:6C:E3:57:5A:09:CA:A4:A2:F9:DF:79:1C:E6:4A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EEB9B3BD96C55E3A06ECFB640
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/569e7b6a-beac-3749-9fd7-c83bda7f1d9a.roa
Signing time: Mon 15 Aug 2022 12:00:00 +0000
ROA not before: Mon 15 Aug 2022 12:00:00 +0000
ROA not after: Tue 20 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.20.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:eb:9b:3b:d9:6c:55:e3:a0:6e:cf:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 15 12:00:00 2022 GMT
Not After : Sep 20 04:00:00 2022 GMT
Subject: CN=027da4b3-3845-4f90-a00b-ab08b8ecf3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:86:cb:12:ce:ad:1e:62:1f:09:ef:57:e1:0b:
ef:15:98:5b:af:47:06:b6:d8:b1:5e:0d:c8:57:28:
7e:be:b0:6d:e4:10:21:a2:4e:9a:51:5c:1c:ab:ca:
bf:15:88:84:3a:40:8d:50:7c:f6:6f:e3:b8:95:28:
7f:4a:e6:e5:67:33:a6:af:f6:cf:0d:2d:51:36:df:
3b:c3:6b:df:c3:d0:f9:06:22:55:4a:e6:a5:47:f7:
72:93:95:bb:41:24:e2:6a:5a:4c:aa:95:b6:d2:e7:
59:3a:8b:a2:f5:93:84:31:33:10:a5:6f:e3:99:04:
cd:b7:23:dd:75:40:c5:75:17:dc:4d:92:c5:21:26:
f6:06:34:f1:23:eb:71:76:c1:34:78:e1:75:de:ab:
8d:77:ab:bf:b6:ee:d6:82:da:0d:52:31:f4:13:e2:
26:4f:5e:69:9f:81:0a:15:de:b3:23:5e:62:9c:61:
a1:3b:66:83:98:83:fc:ca:6a:00:bb:8a:fe:21:14:
32:e7:dd:fa:03:ed:14:d6:f2:3c:84:5f:b6:88:b5:
8f:44:9b:81:db:f6:14:62:56:23:d0:c7:54:99:01:
27:b1:de:59:d3:59:b7:ef:71:dc:4d:ad:b1:3b:98:
e1:fe:91:59:03:70:47:d8:ec:04:fe:47:aa:65:17:
10:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:73:97:C3:86:C2:6C:E3:57:5A:09:CA:A4:A2:F9:DF:79:1C:E6:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/569e7b6a-beac-3749-9fd7-c83bda7f1d9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.20.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:32:10:5e:67:aa:56:39:c4:11:d0:aa:b8:d8:07:50:df:d1:
08:5d:66:49:5b:2e:b0:9b:78:50:ba:d7:18:aa:59:74:e5:5b:
97:7a:b7:ad:85:30:b7:6c:b4:dd:3d:30:ef:84:8d:92:66:db:
bc:8b:72:b7:2b:36:41:4b:98:eb:65:57:33:75:85:3a:fa:b7:
e6:1b:e0:60:fa:ab:25:3b:29:1c:eb:0f:44:13:8d:4a:77:bd:
db:96:eb:a4:07:be:9c:0e:2d:c6:c1:d0:00:0f:b1:84:77:bd:
16:9f:14:4e:d6:d9:48:0b:f0:c0:fb:3e:28:6e:1d:02:3c:ad:
05:b5:ce:e9:3a:c5:04:2c:f6:61:e6:51:23:10:54:2c:70:06:
df:c8:f2:e9:2b:ab:c0:55:bc:f4:5c:ad:32:39:eb:f7:66:44:
71:9e:7d:93:f5:e1:e5:d4:99:c6:96:e2:20:ab:84:0c:46:07:
5a:fe:d5:28:64:aa:c5:8d:0a:f6:a2:e5:ba:51:24:19:ab:8a:
65:31:4b:2b:ff:5c:6d:65:a5:80:d8:a8:ab:82:88:8c:96:f3:
94:1a:96:c1:73:3f:70:37:39:ca:1f:38:bd:e6:74:d5:93:bb:
49:3b:e8:a3:78:1e:8d:8c:07:57:54:6c:a0:ee:5f:85:18:92:
b0:ab:60:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:33 2025 by rpki-client