Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76931bd1-21e2-3f27-9fea-358444a4c5e6.roa
File: 76931bd1-21e2-3f27-9fea-358444a4c5e6.roa (raw, json)
Hash identifier: gTlbsS9TlSI1s4w/2w0tmbeSwhHWAkXz9LdewASmjqc=
Subject key identifier: D9:B9:CA:9C:4C:6D:C8:7D:EF:25:6A:98:FB:F9:18:3D:37:37:96:D7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E50E5BC017970DB02ABA4C0C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76931bd1-21e2-3f27-9fea-358444a4c5e6.roa
Signing time: Mon 20 Jun 2022 12:00:00 +0000
ROA not before: Mon 20 Jun 2022 12:00:00 +0000
ROA not after: Tue 26 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.4.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:50:e5:bc:01:79:70:db:02:ab:a4:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 20 12:00:00 2022 GMT
Not After : Jul 26 04:00:00 2022 GMT
Subject: CN=23991ca7-d3c5-4f7a-b12b-060245b76878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:a1:2d:04:af:e2:73:e9:44:98:94:ae:0a:
76:5d:de:9c:c0:6b:b3:68:88:3e:1e:dd:7b:24:e4:
c3:be:7a:f1:b6:f3:84:40:4b:b6:0a:ce:15:dd:e3:
b5:87:c4:ac:2d:45:26:f7:66:b4:52:f1:f3:af:15:
a9:bc:2f:d2:14:f3:0f:41:d2:e6:07:c2:39:66:c0:
08:2d:27:81:01:fd:be:62:54:ab:af:d7:5e:56:0d:
e8:0f:9b:d2:50:25:ba:df:1e:d7:f3:2d:c6:87:54:
1e:fc:48:c4:f7:75:15:73:61:a4:25:b4:37:33:30:
77:bf:f4:78:b1:a4:cc:bd:4f:77:a6:d1:0c:93:b3:
96:ea:f1:6a:b7:0e:f3:90:c2:8d:3c:51:93:d6:97:
db:95:ee:44:68:e0:c4:68:23:a7:52:4c:bb:3b:fb:
02:77:0c:3d:84:f8:93:54:3a:f5:ec:62:66:97:3c:
d3:30:16:20:72:17:ab:8a:59:92:df:36:e9:34:dd:
fb:51:26:1b:19:86:fe:a7:c4:f2:60:f7:71:11:0b:
5f:97:4b:e0:f2:61:26:4c:d3:0b:1d:ae:a8:d9:d6:
13:c0:47:80:4a:24:44:86:ae:53:1a:56:e9:ce:2a:
86:3b:0b:de:3f:3e:66:e8:d2:66:cf:78:6b:26:dc:
51:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B9:CA:9C:4C:6D:C8:7D:EF:25:6A:98:FB:F9:18:3D:37:37:96:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76931bd1-21e2-3f27-9fea-358444a4c5e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.4.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:02:28:67:5f:41:16:6d:6d:d7:6b:1b:22:4c:15:19:88:39:
76:8e:6b:95:b8:33:ca:69:e2:4b:bb:83:53:e6:0c:7a:9d:a4:
dc:17:54:d5:f7:c9:31:0c:7e:e3:50:0e:f6:03:e9:49:19:84:
14:14:15:11:a1:b9:2d:cf:5f:26:e0:de:44:01:b2:ad:a7:8b:
bf:b9:63:1a:53:c4:b3:cd:86:03:a9:23:67:ca:5e:4f:50:21:
3d:bb:a1:b3:ea:55:77:c5:4a:89:cb:fc:ad:5a:59:fb:fd:b8:
c1:2a:2c:9f:2a:06:c9:03:98:b4:8a:d5:40:83:ec:96:a0:1e:
f1:ef:38:1a:f1:81:a9:bf:ab:1b:0a:68:0b:2d:0f:b9:45:df:
bd:32:ee:80:0b:13:a7:62:69:55:bc:a5:2f:62:2b:f7:f7:f5:
7f:c9:f6:b9:69:58:a8:bb:9c:10:2f:75:bd:13:e7:72:1f:cf:
11:84:03:0f:c4:3c:64:e3:c4:3f:41:ec:1f:f7:a5:36:2e:f0:
60:0a:d3:de:cd:0c:3d:4f:19:fa:0d:8a:b8:fb:c9:06:a4:75:
f5:74:ea:6c:1c:d8:4f:5f:68:08:76:27:ba:c8:85:c5:36:cf:
9f:74:fe:d5:0e:a9:ac:d7:18:2b:99:5a:a9:b6:b0:35:6d:e7:
1e:d9:1c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:40:12 2025 by rpki-client