Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/591fdf1e-3cb7-370f-8245-54fd89f7ed94.roa
File: 591fdf1e-3cb7-370f-8245-54fd89f7ed94.roa (raw, json)
Hash identifier: xEOFFlLjl4I9IINppHrH9sCbksjw2a/cWAwPEWKao5M=
Subject key identifier: 8D:F4:52:75:16:23:ED:69:A9:BC:FF:87:AC:A0:C3:15:AB:19:DA:89
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F14946CE8304ED904D032A940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/591fdf1e-3cb7-370f-8245-54fd89f7ed94.roa
Signing time: Mon 29 Aug 2022 12:00:00 +0000
ROA not before: Mon 29 Aug 2022 12:00:00 +0000
ROA not after: Tue 04 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.3.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:14:94:6c:e8:30:4e:d9:04:d0:32:a9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 29 12:00:00 2022 GMT
Not After : Oct 4 04:00:00 2022 GMT
Subject: CN=e83fb70a-dfe3-4df7-b26f-ca20d160310a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:43:4b:14:98:58:28:33:8d:54:c8:b7:9d:e2:
96:4c:00:ea:e6:1f:90:d1:3b:87:fb:f1:2f:54:27:
e9:31:5d:1f:4f:bd:a2:f9:89:b3:51:59:88:0c:42:
d1:26:0c:b3:56:4a:38:a7:e8:92:ce:4d:dd:d4:41:
6b:df:0d:d2:52:bd:63:68:62:08:e6:7c:44:52:fe:
68:95:79:25:0b:50:9d:bf:49:53:8b:f5:32:23:45:
d3:b9:d0:3a:ba:54:2a:8e:eb:6f:db:bd:99:92:9a:
d8:ff:33:d9:1b:71:e8:82:e6:d8:ae:95:b0:54:aa:
ef:1d:2e:6d:f5:21:5f:69:42:6d:db:7a:1c:52:87:
f0:49:a6:f1:99:1a:34:c3:1a:3c:51:85:41:72:f1:
c3:38:97:54:71:54:c3:1d:ae:2d:52:70:50:fd:56:
03:41:29:b5:14:08:60:1c:55:63:20:d3:84:72:31:
37:95:44:e1:0f:95:d2:28:ba:50:de:37:f9:f6:9a:
41:e7:2f:44:3e:e4:12:8b:14:37:9c:75:40:19:71:
ac:1c:50:e9:42:bd:c6:ae:f0:7b:52:27:68:85:10:
8d:db:10:46:9c:63:0c:35:66:b8:02:8a:78:9d:a1:
3f:24:e6:ce:3a:4b:a9:f8:f1:47:00:aa:89:35:19:
c4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F4:52:75:16:23:ED:69:A9:BC:FF:87:AC:A0:C3:15:AB:19:DA:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/591fdf1e-3cb7-370f-8245-54fd89f7ed94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.3.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:33:eb:f5:1c:f5:d1:1e:ae:c4:a1:48:f4:8a:3c:fa:49:c6:
dc:8a:bb:2d:74:b1:76:68:59:33:93:d5:4b:56:22:7f:4d:f0:
22:26:94:ea:51:70:fd:d1:01:e0:87:02:3b:65:48:45:78:87:
c1:01:d8:65:19:04:a5:99:17:b4:67:55:45:0c:43:e5:f8:3f:
f4:e8:f4:3d:3b:18:94:ce:53:c0:9d:3c:5a:e3:d2:b7:cf:9f:
78:d3:03:d8:be:46:11:13:cd:df:98:bb:d0:3a:6d:fa:b7:76:
27:3d:82:f4:13:5b:83:b5:88:b5:32:93:f5:e2:94:1f:10:53:
fd:ee:e0:87:3c:af:6f:28:f1:e4:f2:e2:61:7e:04:38:65:6a:
c4:c7:05:e2:ac:19:6f:7c:a2:3c:28:18:eb:37:c0:d0:5d:3f:
c7:b6:40:5f:7a:47:bc:39:7a:1f:f4:57:ff:b1:56:a2:ff:7e:
94:3e:13:e0:1e:0f:fd:ee:7d:37:7d:8c:85:3b:2f:b7:5e:ae:
d5:31:82:42:0b:68:87:08:75:df:67:5d:ab:6f:57:f6:1a:f0:
ca:d5:5b:42:1a:fb:64:16:4e:c2:3e:12:c6:0b:97:67:47:6d:
60:9e:fc:84:18:d0:0c:62:db:87:ad:37:ff:66:80:ce:52:be:
bf:70:44:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:05:05 2025 by rpki-client