Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/743a72a0-41dc-3f08-b399-9b169f591966.roa
File: 743a72a0-41dc-3f08-b399-9b169f591966.roa (raw, json)
Hash identifier: IvY8n7e8AvcmCPCss4FxFT5/QfhYLMpWhv7MG73JYbs=
Subject key identifier: 24:D7:FA:FF:1D:6A:37:5B:79:1C:7C:DA:79:19:57:5F:35:75:A7:73
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FFD412643F090B7C5A63381C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/743a72a0-41dc-3f08-b399-9b169f591966.roa
Signing time: Mon 21 Nov 2022 12:00:00 +0000
ROA not before: Mon 21 Nov 2022 12:00:00 +0000
ROA not after: Tue 27 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 136.3.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fd:41:26:43:f0:90:b7:c5:a6:33:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 21 12:00:00 2022 GMT
Not After : Dec 27 05:00:00 2022 GMT
Subject: CN=732a74e1-5595-4a0e-a8d8-b9aab411f0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b5:b1:dc:e8:97:d9:1c:14:7d:f7:6e:23:ba:
32:4e:58:9a:e5:42:a5:19:1c:fb:99:f9:ff:24:20:
60:94:75:20:97:70:ce:a2:95:d4:99:90:92:69:be:
dd:36:79:ac:86:12:e4:f0:95:e5:77:b4:75:d1:a3:
b5:2d:89:6b:7b:98:e5:6a:88:40:b7:74:9d:61:9b:
3f:44:39:26:47:89:d4:fa:6a:f2:e2:d7:84:28:d0:
06:ee:c2:24:97:76:4e:81:8c:5e:1a:2d:ff:e3:08:
ce:9b:ad:ef:0f:03:0a:de:5c:ec:2a:61:f2:c8:a0:
ee:7e:6b:c5:dd:38:2d:3b:ab:54:6f:76:ff:aa:9f:
08:56:49:96:1d:98:56:5a:88:83:a3:45:59:75:6f:
23:24:bd:fc:71:7a:14:90:f0:8e:f9:cc:55:e5:4e:
0e:3d:4b:fa:39:cf:05:49:b0:93:b9:91:42:92:ac:
64:a1:84:33:53:5c:da:45:10:d7:7c:e8:cd:59:0c:
90:d7:3e:3c:78:a7:38:88:2c:9a:1f:ac:f8:1a:8a:
99:cb:62:c6:35:60:67:1f:05:d4:1c:ab:3f:ed:cb:
5e:fc:f6:3f:ef:08:5d:6d:4f:88:8e:36:e8:77:82:
c7:1f:a3:72:1e:90:b0:f7:67:96:56:eb:42:de:ae:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D7:FA:FF:1D:6A:37:5B:79:1C:7C:DA:79:19:57:5F:35:75:A7:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/743a72a0-41dc-3f08-b399-9b169f591966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.3.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:62:94:73:16:9f:46:bb:fc:78:76:0f:fe:34:2d:09:88:81:
0f:99:55:4e:22:10:93:c2:8c:8d:71:74:8b:01:b1:f4:92:7a:
88:45:c2:2f:79:a1:4c:3d:bf:81:41:df:c6:9e:bc:05:b0:2d:
09:19:d9:45:d3:fe:5e:b5:0a:04:05:ac:c4:80:93:db:0b:f7:
a4:23:1a:5e:0c:28:98:36:90:72:4d:4b:d7:a6:81:76:7e:8a:
88:4b:0d:78:7a:3b:32:47:36:89:d4:ac:bb:d9:a2:8b:70:80:
04:b3:11:69:f9:74:d1:90:ee:87:98:5c:6c:10:68:cf:7f:1f:
b0:0f:72:ba:51:f7:6a:17:ea:da:50:23:12:7a:59:7c:4b:c7:
df:11:0c:97:5c:28:88:7c:ef:6c:94:93:e5:a3:62:cd:1f:43:
7d:79:3e:a1:73:52:e8:62:b7:fa:fc:e2:2a:0f:08:d3:66:1d:
7a:6b:3d:02:93:96:20:60:50:d7:42:66:0a:f2:af:ec:dc:9d:
80:f1:d2:db:b7:b3:5f:3f:97:13:67:4c:34:49:94:40:52:5d:
b2:70:bb:67:49:f3:30:18:95:e4:a8:ec:9a:c1:66:bd:9d:f8:
47:82:e2:0b:6c:9a:3b:14:7c:68:07:69:cf:3f:18:39:12:04:
80:2b:9b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:02 2025 by rpki-client