Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/61a640e7-7619-3a1a-8768-eb213a87c812.roa
File: 61a640e7-7619-3a1a-8768-eb213a87c812.roa (raw, json)
Hash identifier: V/NRclq1Qbd4e7xDwT/nw52pNfWAKYHOiCV/4jLXGHM=
Subject key identifier: D7:E7:A8:F2:EB:8F:CF:21:EE:74:60:C9:65:10:33:B3:91:E5:1F:56
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840726B6F2912517F911C600E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/61a640e7-7619-3a1a-8768-eb213a87c812.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.134.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:72:6b:6f:29:12:51:7f:91:1c:60:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=ca598a01-35b4-4152-88d3-a6ab4b271736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1b:b3:f4:a6:e9:0d:c5:63:6f:ed:f7:3f:da:
47:56:35:6f:a3:9c:29:04:76:b0:3a:69:5c:d6:0c:
0f:b8:c2:04:bc:51:38:68:4a:fd:78:e0:3e:ff:dc:
9c:64:83:58:a2:c1:8f:ac:9b:69:b2:83:2c:78:7c:
b2:a2:8e:ba:c8:d6:1a:e2:99:6f:5c:35:c6:c8:c6:
01:e2:60:cc:39:99:18:f1:21:ff:98:30:cc:cd:04:
c4:c6:9e:03:77:04:dc:a8:11:73:2c:d2:02:06:60:
26:74:54:7e:b5:31:85:ab:84:a0:59:d8:4b:86:2d:
9c:e3:0e:5d:91:6f:61:d1:69:96:b2:73:5c:a3:b9:
c0:19:8c:22:46:ca:02:ac:38:16:2f:bf:78:cd:e7:
ed:c4:5e:c1:1d:d3:b7:3c:f3:3c:7f:0c:d9:df:48:
6b:ae:1a:df:15:cc:7b:39:90:26:37:6c:57:d8:8a:
77:2f:73:c7:9c:a5:f9:ba:75:12:8e:70:d9:7f:87:
18:b5:81:5c:b5:ec:d0:3e:8d:ff:e2:92:3c:f6:8d:
b3:d0:d0:0a:a9:3a:75:42:32:9e:12:aa:65:d1:b6:
0f:42:2b:45:ab:9e:ae:02:a9:0e:3b:44:21:6b:72:
2e:ee:3a:7b:62:42:7f:89:ef:ed:01:e3:ae:45:b8:
4e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E7:A8:F2:EB:8F:CF:21:EE:74:60:C9:65:10:33:B3:91:E5:1F:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/61a640e7-7619-3a1a-8768-eb213a87c812.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.134.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:47:09:00:89:5d:74:6d:b7:f0:5f:31:8d:3c:92:df:4b:4d:
a2:aa:db:00:cb:bf:2f:46:07:f2:b4:81:bf:8b:59:3b:c3:5f:
f8:9a:b7:83:a2:2b:7d:8c:d8:d0:72:84:61:b5:13:50:c5:9c:
08:8f:84:a2:a0:33:59:ab:6d:0b:ac:15:f7:a2:21:67:dc:73:
28:b4:2d:f0:d4:fb:43:93:0d:a2:fe:44:21:08:cc:d0:ff:4b:
80:39:fd:a3:fd:cb:1c:f4:9b:06:cb:05:32:1a:45:c2:3e:21:
7d:a0:90:37:86:99:5b:39:e6:d4:5b:35:41:e1:f2:d6:25:66:
26:74:a4:4f:79:56:4e:3a:2a:bf:e3:8b:b7:94:8f:51:a3:48:
28:bf:fc:0d:44:65:f0:79:d6:ae:25:ba:97:6d:1c:a2:ea:dd:
73:0f:58:e4:6d:a2:2a:5e:a9:07:96:c1:21:22:81:6c:44:96:
c2:f4:67:43:4a:93:46:53:c5:51:3b:22:7c:0a:ba:e2:ee:55:
7a:2c:38:d9:7c:29:d1:08:84:ca:3a:92:89:11:e3:b0:ad:28:
b0:f8:40:a0:e3:57:4a:32:0b:89:64:87:9e:be:c6:2a:7a:2d:
5b:6b:10:84:0e:3d:9d:6b:7d:29:e4:3e:b9:6e:f8:e2:aa:8b:
99:71:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:51 2025 by rpki-client