Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91771b4b-d3e2-3c95-aa5b-ec8e9c06de95.roa
File: 91771b4b-d3e2-3c95-aa5b-ec8e9c06de95.roa (raw, json)
Hash identifier: jqOulMo1n9IAI1UFNiNqCLPAICKM0b0mwmoNoEyrmlk=
Subject key identifier: 0C:73:9C:05:B2:C0:C8:38:DF:BB:97:44:19:0A:EB:F6:F1:E9:0A:83
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CA0E8950EE6406B63DD559D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91771b4b-d3e2-3c95-aa5b-ec8e9c06de95.roa
Signing time: Tue 18 Jan 2022 05:00:00 +0000
ROA not before: Tue 18 Jan 2022 05:00:00 +0000
ROA not after: Tue 22 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 136.135.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a0:e8:95:0e:e6:40:6b:63:dd:55:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 18 05:00:00 2022 GMT
Not After : Feb 22 05:00:00 2022 GMT
Subject: CN=a9a76fd5-6a9e-4454-9a4c-1168b78ef140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:a1:54:18:96:58:7f:72:87:2f:98:fb:c9:
0e:88:2e:70:b5:c3:c9:1d:90:fa:14:76:16:9c:5f:
17:9a:cd:3c:8e:c6:db:16:ff:ea:8b:aa:fc:2d:49:
ca:9a:53:97:d6:31:e2:8f:f3:8e:57:52:10:92:ad:
77:28:74:08:34:a8:13:cc:d4:ad:b2:65:82:c0:35:
e3:00:01:6b:9b:7f:d7:c3:9d:a8:3e:b6:de:3d:e6:
7b:be:48:cf:a7:41:fc:01:17:9e:32:3d:48:09:37:
a3:0c:77:37:6e:25:5e:95:c3:aa:50:8f:43:79:88:
60:03:96:5a:04:39:f4:29:c0:7c:b5:da:a2:d8:d1:
7b:a1:ab:f7:e8:2d:fd:f9:f8:08:7f:3b:8a:f4:ee:
af:7b:aa:5c:fe:15:c1:4e:ee:a7:da:6b:7c:7b:d7:
15:9e:6d:6e:9f:a3:f7:6e:56:21:f2:43:aa:28:ea:
a3:61:01:5e:9a:e5:89:92:0c:17:bc:a8:59:2e:45:
94:15:7f:19:ea:85:af:ca:88:ff:60:a1:7a:92:ac:
8c:98:66:c4:c7:b7:07:11:66:53:54:a2:35:1c:06:
69:7b:02:d7:02:d4:fa:e4:f9:05:21:d0:8a:79:d3:
1e:d2:e9:6f:fa:57:07:c1:79:51:ae:2e:ff:b3:77:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:73:9C:05:B2:C0:C8:38:DF:BB:97:44:19:0A:EB:F6:F1:E9:0A:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91771b4b-d3e2-3c95-aa5b-ec8e9c06de95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.135.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:ff:58:9a:d5:11:15:64:81:7e:84:64:6c:c6:ef:36:b6:2c:
76:45:ec:e0:95:87:56:a6:71:0d:60:e5:b5:e0:00:82:eb:a0:
8a:d7:a4:00:0a:3c:fd:b9:29:ef:42:fd:36:48:20:13:b4:e9:
5d:44:93:96:8e:c0:eb:38:de:ac:fd:d8:43:e6:c1:b4:1f:77:
f9:51:dd:29:f7:14:5c:77:0f:dd:65:b7:17:35:e8:74:15:0d:
f1:ec:4d:73:d1:76:09:13:22:fa:0f:38:e1:47:d9:fd:cf:ac:
05:0b:10:5a:df:45:d3:55:5d:58:d6:63:3d:6f:0f:0f:2f:8f:
1e:62:26:32:74:94:04:e0:fb:aa:60:f8:8b:e8:92:f7:44:a3:
7d:d4:13:e3:8f:53:b1:35:fa:f8:36:ca:c7:f9:14:49:b2:d8:
47:9f:a2:82:99:af:bb:b8:75:0c:e6:e8:b4:30:9e:af:df:63:
59:ae:d1:d3:ab:e1:93:56:6f:4b:5d:15:f5:26:d5:2a:32:72:
95:ee:3c:62:83:e1:0e:81:7d:3b:dd:cd:f0:3b:e3:d8:78:6d:
f0:27:b2:18:80:f9:51:96:50:a2:9d:c5:3a:ae:ae:48:f2:4b:
96:63:a7:91:94:a1:1b:5a:4e:cf:ac:53:08:fd:61:59:30:ad:
71:92:4e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:26:45 2025 by rpki-client