Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/59f16eac-9f48-3fa4-b77f-d68c57823cee.roa
File: 59f16eac-9f48-3fa4-b77f-d68c57823cee.roa (raw, json)
Hash identifier: DqWQyEvdgb7oH/EOlfg1XieosDvfBayigslb2WwUOTE=
Subject key identifier: 4F:11:4B:E8:63:EB:10:6F:29:B0:BF:B7:46:DF:58:9D:87:C1:19:A5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584073C1EDDC8BB5BBB6CFEF43C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/59f16eac-9f48-3fa4-b77f-d68c57823cee.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:c1:ed:dc:8b:b5:bb:b6:cf:ef:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=46ef11a1-abb9-4735-b5aa-a541beb262c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:c7:3b:73:5b:19:0e:f9:21:d6:6d:6f:bf:
42:3a:c6:fb:e2:79:66:7c:2a:df:cb:a0:73:78:5e:
d3:a5:72:a0:00:56:64:74:92:7c:e6:a0:0f:0a:01:
66:c3:79:ff:48:a4:2c:d3:c0:12:8d:2f:b2:e7:ea:
78:ac:7f:3a:a0:ac:3e:d2:07:79:b8:10:2e:c5:82:
8b:c9:59:b6:df:22:7d:a2:bb:90:86:76:3d:a0:15:
ce:82:a5:95:41:d7:3a:35:b9:7d:0b:5f:8e:7e:ee:
2e:ce:77:3d:1c:10:65:56:c9:6c:7d:30:38:c8:1e:
62:4e:6d:c6:3d:f4:5a:bd:4e:0a:ae:ed:62:cc:9e:
0e:78:86:42:2f:c0:e2:6c:3e:f7:f1:21:f2:96:87:
a4:d1:95:4d:32:d8:34:1f:2e:fb:9a:a2:7a:55:9a:
42:28:34:33:02:13:7a:58:00:a7:5b:84:3e:df:2b:
fc:47:60:b8:7c:b4:76:b1:71:d6:03:72:0c:96:a9:
29:6f:c1:89:ec:ad:6a:b6:2b:07:12:82:e6:8a:98:
77:a0:60:9d:b0:15:58:7c:58:ac:de:b5:41:65:66:
0a:99:09:bc:17:52:31:88:09:b1:54:c7:25:a8:5a:
5c:46:2b:b9:c8:06:4f:d2:8a:0a:d0:d6:79:f0:9f:
0e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:11:4B:E8:63:EB:10:6F:29:B0:BF:B7:46:DF:58:9D:87:C1:19:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/59f16eac-9f48-3fa4-b77f-d68c57823cee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:09:d2:f9:51:63:a4:65:df:e1:ce:0e:b1:44:00:7e:c9:ef:
13:ec:77:1f:e8:3b:0c:da:ea:eb:03:dd:30:4c:93:d9:6d:60:
cb:de:b8:b7:e4:07:b9:76:02:bc:08:5e:15:0f:e3:9e:4b:48:
41:be:95:2b:e2:e9:fc:b9:48:6d:ff:7d:e4:18:44:36:af:e2:
12:95:53:25:4a:be:58:2a:b9:0f:ce:54:34:fa:36:79:62:46:
85:c0:8b:01:99:98:df:ac:98:31:ba:60:13:d9:68:d4:bf:fa:
4d:34:09:8b:64:e2:db:bb:af:0a:0a:ca:d7:88:9f:43:9c:29:
06:48:2a:09:12:e5:cf:3c:41:4b:fa:54:ad:c9:b8:42:b8:7b:
a5:d4:00:81:5f:5d:02:c2:6c:5c:86:46:ee:18:9d:4b:fd:51:
28:87:79:1f:89:21:9d:71:44:a5:75:3b:3e:5f:0d:45:26:56:
aa:8e:ea:55:fe:d6:ea:49:12:e3:1d:70:4e:74:5e:cd:cb:20:
7f:27:a6:7d:17:26:a5:0d:0a:9e:5c:46:d3:8a:a1:f6:6c:b6:
5d:e0:9f:0f:30:3f:e5:ba:47:c4:f5:bf:ae:8b:64:e0:f8:1e:
86:16:c7:e7:ab:22:3f:3b:ea:38:3c:66:bb:9c:5d:7a:6a:40:
8e:7f:33:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:08:32 2025 by rpki-client