Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/636442bb-5dc7-3860-9a80-b3d3e8b15b54.roa
File: 636442bb-5dc7-3860-9a80-b3d3e8b15b54.roa (raw, json)
Hash identifier: u/Zp4apG4/WxzivniTBxyObFRmy0WERVz9B3z/RXpII=
Subject key identifier: B4:82:BE:83:6E:39:A2:17:82:4B:FC:6F:9A:03:DF:9F:76:64:51:38
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D8B961BBE6EC0C577E6204640
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/636442bb-5dc7-3860-9a80-b3d3e8b15b54.roa
Signing time: Tue 12 Apr 2022 04:00:00 +0000
ROA not before: Tue 12 Apr 2022 04:00:00 +0000
ROA not after: Tue 17 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.3.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:8b:96:1b:be:6e:c0:c5:77:e6:20:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 12 04:00:00 2022 GMT
Not After : May 17 04:00:00 2022 GMT
Subject: CN=c9af2963-0976-419a-a447-a6a769cb7b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:a5:46:af:46:75:9b:41:37:00:69:60:82:
e8:13:9e:7d:e1:cd:aa:67:80:63:4b:1f:cd:a6:5f:
48:5f:27:83:91:85:dd:b8:cb:0b:91:fd:9d:7b:27:
ab:74:50:91:c2:fd:13:3c:cc:c2:f8:5d:ee:bf:bd:
df:9d:2d:64:fe:1b:d8:06:52:09:32:3d:ce:02:83:
de:60:d1:28:30:5f:5a:82:04:c7:80:6a:a8:fa:71:
c7:28:86:82:4e:f3:17:56:cb:de:13:71:d7:1a:18:
61:fe:41:08:5d:ea:45:6e:fc:32:21:bc:1c:cc:fa:
a1:f0:66:33:57:52:c8:3f:a2:4c:46:ca:6b:00:de:
67:24:fd:ac:5f:55:ed:ee:09:2e:b1:17:e8:79:5b:
f6:29:d3:3c:b3:3a:67:aa:f2:7c:77:3a:04:1a:b3:
f3:02:c2:38:cb:78:87:fe:f8:34:34:f9:0e:99:c2:
31:25:34:3c:b7:4d:a0:46:30:09:83:7c:34:1a:0e:
16:5a:5d:ec:28:58:3d:23:4b:4b:2a:6b:69:01:c2:
f1:e9:ed:bb:5d:f5:16:1a:c7:ac:13:b5:e2:45:f6:
51:13:bc:e1:ce:1b:f2:5c:e8:bc:e9:c6:c4:eb:5c:
eb:08:d0:aa:9f:39:94:b5:01:2b:d5:68:f5:8f:45:
f6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:82:BE:83:6E:39:A2:17:82:4B:FC:6F:9A:03:DF:9F:76:64:51:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/636442bb-5dc7-3860-9a80-b3d3e8b15b54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.3.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:9d:03:15:83:82:ff:bf:7b:b8:c8:3c:e6:eb:5e:45:e5:15:
44:ac:66:58:0a:35:e0:b0:7c:c3:96:8e:7a:48:16:21:32:3a:
7a:db:1b:12:d1:10:a7:52:88:87:2e:0d:39:41:d0:57:ac:0e:
c5:01:af:00:c2:35:7f:00:d1:f5:63:20:2c:aa:f0:d0:1b:38:
31:cb:c3:b9:1e:76:f3:2d:61:14:90:06:78:64:b4:10:3e:7a:
6b:43:48:c5:45:be:4c:6c:70:bd:9b:27:02:e8:1b:5b:f9:94:
53:d4:83:d0:6c:3a:fd:e1:ff:b6:91:74:17:b1:35:de:32:41:
67:0c:94:16:c4:b9:91:87:6e:59:20:5b:39:a0:68:a2:3c:45:
14:e5:92:02:80:34:52:91:c0:aa:0b:46:ae:44:d6:eb:3d:1e:
23:ae:54:2a:8e:28:6e:eb:5a:63:ae:8a:d3:51:cc:da:ea:e7:
d3:c2:66:48:f2:95:f4:12:5b:99:c5:56:cd:58:d7:94:2c:52:
5c:92:e4:96:fc:87:2c:14:ca:89:7f:c6:d3:46:7f:88:3e:a9:
ff:82:72:28:8d:bb:ea:08:eb:f5:2d:8e:83:a1:f0:ac:95:f8:
09:09:a1:d3:7e:39:ed:86:ba:00:3f:b1:d7:92:7a:e6:f7:d0:
73:ed:ef:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:59 2025 by rpki-client