Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c9180dc-922a-3560-88dd-474e5f7a1d10.roa
File: 5c9180dc-922a-3560-88dd-474e5f7a1d10.roa (raw, json)
Hash identifier: NaHvoQRFrGyCmauX5ubVkeuaM6aK777knm1NKZo1Q5w=
Subject key identifier: 9E:F8:82:20:88:E4:3B:05:E5:84:AA:6A:9A:30:55:35:C4:73:4D:B5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840731E16B19AE85A03C9D7D800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c9180dc-922a-3560-88dd-474e5f7a1d10.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:1e:16:b1:9a:e8:5a:03:c9:d7:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=2836b722-86a7-4d1d-a652-442326fc3dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:4d:49:b9:98:fa:05:47:cc:33:05:8f:bc:
fd:9b:4e:7d:b5:dd:e0:5e:91:de:0f:6f:07:89:29:
b8:a4:9b:c3:af:bb:d5:13:3e:74:a9:08:7a:8a:bd:
2e:cf:0d:a9:69:ef:96:cb:0d:76:11:4b:b9:b0:ba:
1a:7e:ef:9c:d8:12:11:65:42:be:6f:35:5e:78:17:
73:80:f6:5b:58:c3:6c:80:0e:3f:fc:20:34:65:e3:
5c:87:53:12:61:92:45:dd:13:a3:da:71:6a:a1:f5:
ec:84:34:a9:32:28:2f:0e:9a:23:f5:09:d9:91:b0:
25:e0:28:ad:c3:05:c5:b1:2c:53:47:a2:16:35:8f:
11:3f:b7:26:f8:f7:39:dd:b5:bd:a7:a7:da:01:cd:
de:1f:e5:10:85:6f:2f:b3:20:de:55:91:b9:d1:87:
98:0c:be:95:be:f9:83:92:2d:65:65:c2:f7:3c:1a:
6e:17:f1:d4:0f:c4:86:1d:3e:db:6a:fb:95:a3:64:
ec:e4:8c:f3:22:dd:55:7f:1f:53:fb:51:3e:12:66:
72:58:81:ca:3e:44:94:63:0b:ce:b0:5b:21:6c:3f:
cf:b3:8c:58:d0:60:c5:b8:68:77:8a:db:7c:a0:b8:
5d:ff:9f:08:a0:5f:67:82:9d:a8:01:e5:b7:fe:cf:
ce:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F8:82:20:88:E4:3B:05:E5:84:AA:6A:9A:30:55:35:C4:73:4D:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c9180dc-922a-3560-88dd-474e5f7a1d10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.136.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:a4:66:4b:85:a6:ee:45:08:5a:a8:2d:83:83:44:28:6f:f0:
71:cc:fa:de:77:84:4a:33:f1:b3:b6:c3:a5:09:39:b0:21:76:
ef:4f:80:af:fe:65:b3:f8:0d:d9:56:87:c8:dc:ec:2a:f2:67:
40:39:11:fc:32:04:a0:6b:38:f1:58:2b:89:57:08:85:43:76:
f8:10:84:13:b7:85:c5:25:4e:0f:13:f0:45:3a:f8:2c:b4:17:
7b:84:e1:46:1f:5c:c1:3b:4d:be:bb:1a:5b:c8:e8:5a:a8:68:
97:7a:35:3f:c5:82:6d:51:56:65:12:d0:ad:b5:50:e5:07:ea:
eb:99:51:11:fc:59:76:3f:49:78:b2:ee:db:db:02:b0:eb:df:
9b:56:8b:19:90:80:af:ca:1b:7c:1d:4e:b8:05:95:5e:b1:d4:
f7:a7:e1:fa:98:7e:1b:54:c9:d6:a3:3c:6d:95:50:36:74:d5:
aa:35:3c:4a:02:07:93:c9:1f:df:eb:e4:9f:d2:da:88:be:80:
2a:da:e1:2d:75:7a:3a:78:00:d1:f0:4c:e6:eb:72:6e:cd:a6:
79:51:5c:7f:75:21:9a:e1:2e:bc:f0:5f:83:9f:8e:36:f3:e5:
ed:f1:a2:dd:6d:d6:a9:5e:da:5d:d9:6c:47:c9:66:21:45:72:
af:86:b9:06
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBzHhaxmuhaA8nX2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEwMjEyMDAwMFoXDTIzMDIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
MjgzNmI3MjItODZhNy00ZDFkLWE2NTItNDQyMzI2ZmMzZGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstpNSbmY+gVHzDMFj7z9m059td3gXpHeD28H
iSm4pJvDr7vVEz50qQh6ir0uzw2pae+Wyw12EUu5sLoafu+c2BIRZUK+bzVeeBdz
gPZbWMNsgA4//CA0ZeNch1MSYZJF3ROj2nFqofXshDSpMigvDpoj9QnZkbAl4Cit
wwXFsSxTR6IWNY8RP7cm+Pc53bW9p6faAc3eH+UQhW8vsyDeVZG50YeYDL6VvvmD
ki1lZcL3PBpuF/HUD8SGHT7bavuVo2Ts5IzzIt1Vfx9T+1E+EmZyWIHKPkSUYwvO
sFshbD/Ps4xY0GDFuGh3itt8oLhd/58IoF9ngp2oAeW3/s/OAQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ74giCI5DsF5YSqapowVTXEc021MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNWM5MTgwZGMtOTIyYS0z
NTYwLTg4ZGQtNDc0ZTVmN2ExZDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCiIgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnqRmS4Wm7kUIWqgtg4NEKG/wccz63neESjPxs7bDpQk5sCF270+Ar/5l
s/gN2VaHyNzsKvJnQDkR/DIEoGs48VgriVcIhUN2+BCEE7eFxSVODxPwRTr4LLQX
e4ThRh9cwTtNvrsaW8joWqhol3o1P8WCbVFWZRLQrbVQ5Qfq65lREfxZdj9JeLLu
29sCsOvfm1aLGZCAr8obfB1OuAWVXrHU96fh+ph+G1TJ1qM8bZVQNnTVqjU8SgIH
k8kf3+vkn9LaiL6AKtrhLXV6OngA0fBM5utybs2meVFcf3UhmuEuvPBfg5+ONvPl
7fGi3W3WqV7aXdlsR8lmIUVyr4a5Bg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:39:28 2025 by rpki-client