Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/617b3b40-d3fd-3b70-b09c-27aed5d48d14.roa
File: 617b3b40-d3fd-3b70-b09c-27aed5d48d14.roa (raw, json)
Hash identifier: CM8irysS2lKTbLcQIo/AJbsw/ZUg5G51xGNwYui5cy8=
Subject key identifier: EE:1D:33:94:DA:07:D5:BC:DE:5A:9C:A9:97:72:D5:5C:63:86:F3:D6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E782F32DA7A1E99E3006EB580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/617b3b40-d3fd-3b70-b09c-27aed5d48d14.roa
Signing time: Mon 04 Jul 2022 12:00:00 +0000
ROA not before: Mon 04 Jul 2022 12:00:00 +0000
ROA not after: Tue 09 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:78:2f:32:da:7a:1e:99:e3:00:6e:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 4 12:00:00 2022 GMT
Not After : Aug 9 04:00:00 2022 GMT
Subject: CN=2dde2216-a47f-4e6b-9f97-e24718bddd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:96:81:44:ee:8d:1c:5d:e8:81:f1:d2:72:
e1:c1:1c:63:d1:9f:bc:4a:e1:82:40:f8:7e:57:10:
73:ee:d9:cd:a5:57:eb:5d:fc:3c:78:17:54:ae:f4:
51:51:f0:0d:e5:1e:65:81:73:76:73:dc:bb:22:83:
c6:88:b7:7a:44:42:83:e3:3e:22:c6:ca:66:0f:eb:
26:fe:65:5e:ee:fb:b6:f8:5a:b2:18:fe:04:48:f2:
2a:6d:61:a5:d9:56:a1:91:10:4b:b9:cc:48:4a:40:
20:42:51:7d:fe:f3:ad:f0:c1:b9:36:2c:d8:67:2d:
61:66:d0:1e:b4:f5:7e:39:1a:ec:d2:34:96:88:96:
c9:e1:cb:d2:33:e8:86:21:4e:7d:c6:80:8d:05:60:
61:a2:a6:7c:18:76:08:b5:63:ee:cb:22:70:66:e4:
f6:d1:ce:93:58:bb:ee:dd:ec:fc:5a:c0:ab:78:49:
ff:bf:97:67:69:23:ac:99:a4:bf:89:c5:bf:3f:49:
2e:72:b6:4b:15:68:ab:0a:ba:ef:90:db:f5:6e:b3:
91:8c:b7:81:73:a4:b8:3c:f1:ee:f5:ce:5d:aa:c3:
23:7b:d0:51:a1:39:1e:2d:61:f8:38:3f:ef:38:c9:
15:3b:f6:2a:b3:bd:b1:86:48:21:2e:a7:8b:9c:1d:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1D:33:94:DA:07:D5:BC:DE:5A:9C:A9:97:72:D5:5C:63:86:F3:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/617b3b40-d3fd-3b70-b09c-27aed5d48d14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.136.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:d4:58:a3:04:4b:c2:4a:8c:cc:5d:7f:e1:3e:1d:fb:d0:e9:
60:e6:4a:f0:f2:62:17:e5:4f:8b:ae:83:7d:70:40:ab:87:1c:
14:35:23:1b:78:8f:4f:f9:ae:f8:87:17:88:72:a7:51:08:81:
65:d6:8e:8e:ab:c8:2a:ab:c6:8d:0d:cc:f7:03:0c:b7:89:ae:
88:23:50:0c:a9:36:c1:3b:5a:17:8a:6e:45:81:f2:8a:ef:35:
2e:cc:16:c0:bd:e6:1e:ad:81:12:01:79:8c:6e:c3:b1:26:40:
fe:b2:43:c8:6e:32:e5:67:e6:b7:84:4f:a4:65:64:f9:d1:09:
b4:7c:f3:d4:f7:a7:05:2c:e2:37:8c:f3:0b:39:6b:81:8a:15:
81:85:c3:3e:eb:4a:6e:eb:8d:06:ed:b9:57:9a:46:cd:2c:1d:
9b:66:77:ed:68:28:57:81:31:ad:c1:a2:a3:74:d0:b0:28:08:
1a:8d:a4:4c:01:f9:be:0e:5f:15:48:25:06:e0:71:eb:27:2d:
97:12:a6:1b:60:36:1c:70:1a:ec:b9:17:71:27:ed:42:45:8c:
75:c5:8b:68:bf:a0:ce:bd:dc:c7:25:8f:a4:21:1e:4a:19:18:
9c:f8:97:4a:8c:78:71:e1:b8:4c:e6:be:b1:de:b9:11:5b:cd:
3b:1e:07:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:42 2025 by rpki-client