Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/81c7bca0-0620-31a9-8dea-78d17f2370bf.roa
File: 81c7bca0-0620-31a9-8dea-78d17f2370bf.roa (raw, json)
Hash identifier: gUoJlGYaGfPDNRSoary90fYON9BWpaCq2XYQpdarcbA=
Subject key identifier: 71:16:49:5D:F9:8F:E3:F9:5F:87:B0:32:C3:9C:21:65:BA:6F:F8:DF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FFDDD81CBD649E177082A3000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/81c7bca0-0620-31a9-8dea-78d17f2370bf.roa
Signing time: Mon 21 Nov 2022 12:00:00 +0000
ROA not before: Mon 21 Nov 2022 12:00:00 +0000
ROA not after: Tue 27 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 136.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fd:dd:81:cb:d6:49:e1:77:08:2a:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 21 12:00:00 2022 GMT
Not After : Dec 27 05:00:00 2022 GMT
Subject: CN=fb10f40c-457d-40b5-9efc-75b948f9033d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6a:bb:75:76:32:f8:cb:6a:5b:60:10:9f:a7:
e5:c3:aa:b4:78:9f:58:57:95:d2:e7:28:4a:27:d2:
c0:4c:11:69:04:8c:21:f9:d1:27:60:93:73:44:87:
4e:b5:8e:65:a0:17:31:f0:3c:91:a1:65:9f:5d:48:
7f:c0:d3:3e:f3:75:40:da:74:ac:03:b2:b3:27:a3:
ee:59:81:27:80:d6:07:c5:9c:70:eb:2b:50:36:1e:
04:e2:45:95:50:83:c2:56:3d:76:96:de:21:3f:f7:
00:6d:41:4b:95:37:13:68:ad:e9:3f:c8:0e:33:3c:
5b:93:ee:f4:d8:c9:d4:6f:5c:18:2f:3f:f8:72:5c:
f6:f2:19:4b:01:c6:27:fa:5d:6f:d7:25:b9:19:29:
d7:f6:8c:9a:58:bf:fd:25:8c:91:7f:06:f1:c3:2a:
90:97:a6:99:ea:c3:84:d9:9d:a8:d2:93:47:f3:b5:
19:5f:0a:3f:8d:56:e0:db:c8:8f:b4:74:ad:45:be:
62:e4:c6:06:7c:43:33:67:7f:d8:6b:68:53:38:84:
53:ab:c2:7b:90:24:a2:ea:df:4b:3e:db:16:b8:73:
2e:72:4d:4b:cb:23:6c:ea:16:e0:50:57:4a:04:4f:
63:5d:99:bf:eb:e5:00:cf:23:64:35:fa:60:df:b4:
89:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:16:49:5D:F9:8F:E3:F9:5F:87:B0:32:C3:9C:21:65:BA:6F:F8:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/81c7bca0-0620-31a9-8dea-78d17f2370bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:30:62:3c:b6:20:67:2c:c8:fe:60:c9:2b:ea:62:b1:81:f4:
5f:ca:a4:ad:8d:ad:6e:8e:63:bf:0f:70:23:0a:bf:36:9d:9b:
28:37:99:d7:30:4f:7d:4f:65:4f:27:e1:24:e4:2a:d0:50:e3:
80:50:8e:ba:17:d1:81:14:1c:3c:c7:71:ca:7a:a0:75:0a:68:
5c:9e:67:40:bb:01:5a:5b:b9:94:de:e9:a8:f3:c1:42:13:da:
14:ac:ca:49:58:d7:93:10:8c:3d:fc:0d:94:d9:a8:c6:d5:f1:
a6:7b:56:c2:a1:97:66:2e:24:c6:2f:77:3f:c2:0c:e9:af:43:
8b:b7:87:b5:a7:bb:29:b3:cf:8d:63:2f:cd:12:c7:91:69:46:
81:5f:41:ae:25:79:cf:9a:d7:a9:b4:98:14:a8:c0:59:b0:56:
78:23:f4:4c:c1:4e:61:69:dd:f2:24:1f:74:29:f0:f6:3e:ca:
62:1b:70:56:30:90:46:52:de:df:39:a9:4b:9c:9f:f3:77:95:
99:f5:24:1d:6a:ea:bf:cf:8a:f3:e9:36:3a:a7:5b:70:bb:00:
95:cc:ae:16:24:01:13:ef:a7:8a:63:01:8d:fc:e7:58:a0:1b:
7f:3d:0d:e5:aa:76:1c:67:cc:e8:9d:34:52:92:87:be:bb:0d:
b9:24:81:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:27 2025 by rpki-client