Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9509f431-a358-37ef-82ec-e4f96d494469.roa
File: 9509f431-a358-37ef-82ec-e4f96d494469.roa (raw, json)
Hash identifier: CK9ZonkwtqOxak+r/oXPq9u5Q2J+ANwYb6qdNIn/gB0=
Subject key identifier: 55:60:A1:BB:7F:31:AE:E2:3A:36:2A:3B:E5:6A:2F:CC:B4:07:9B:A4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBA57ED50109162292AC9D400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9509f431-a358-37ef-82ec-e4f96d494469.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 134.64.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:ba:57:ed:50:10:91:62:29:2a:c9:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=6cdfdcc6-f09f-4bb7-8e03-dba920c5027f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:05:52:ea:73:73:e0:01:1e:33:3e:8d:3e:
9b:e6:8e:c0:c5:85:fe:1f:61:89:ef:b3:85:4f:05:
19:7f:98:b9:8f:c9:65:64:cd:41:b0:d5:91:3b:b3:
05:49:9a:b7:2c:b9:6b:72:a6:92:80:d5:0b:ad:33:
b3:54:ff:d8:70:b9:64:65:9e:b4:61:ea:27:03:e2:
7b:25:f1:c0:f4:0e:93:db:d3:6f:08:29:37:d0:34:
da:dc:19:86:d7:fc:cd:6c:21:bb:b4:a8:cc:91:e8:
22:9c:4e:10:8e:9b:75:eb:26:e8:19:1e:96:28:53:
bf:f0:58:30:a2:bf:28:b8:58:5c:ba:26:a0:a6:40:
a0:3f:91:a7:92:f6:2d:11:c7:8b:82:c4:6c:25:48:
d6:1a:39:71:d0:31:f1:40:7b:9a:51:08:4f:7e:0a:
b6:13:a7:6f:3a:30:8d:45:ce:0e:de:05:ed:85:5b:
30:24:14:02:9b:f0:04:a8:12:d4:00:b8:e9:11:14:
ab:b5:e8:4a:e3:98:b4:5f:ce:e6:46:b5:05:e8:d2:
44:79:1d:aa:56:a8:10:ea:94:64:02:6d:9b:70:49:
5f:54:34:fd:ce:b6:c8:92:52:d9:f0:5e:7b:0d:1f:
9b:a4:fa:f2:7d:c1:75:02:ec:12:ad:f4:18:6f:9a:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:60:A1:BB:7F:31:AE:E2:3A:36:2A:3B:E5:6A:2F:CC:B4:07:9B:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9509f431-a358-37ef-82ec-e4f96d494469.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
134.64.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:6f:c0:83:ae:68:a5:b1:9e:77:32:67:27:0f:d6:7f:b7:6d:
d5:81:93:12:3e:c4:a8:02:16:de:f0:25:20:c8:54:6b:3d:46:
e0:f2:87:1c:fd:d0:32:56:3f:62:9a:d6:1f:76:cc:e6:ef:7a:
3c:d9:e8:a6:14:87:cb:be:e4:42:ec:01:31:6f:ce:ee:fd:45:
05:52:5a:48:da:4d:a0:15:d6:de:6e:ba:dd:4d:d8:09:e1:bb:
6d:6c:09:ff:d6:21:e1:73:ca:c5:75:a0:44:f1:27:2b:ce:31:
0b:80:1a:ed:d1:54:2e:9b:89:3e:16:6c:06:dc:9b:a4:8d:ba:
54:9d:29:dd:ee:3f:a0:5e:be:7d:0f:51:a3:1f:c6:3f:12:72:
9a:9a:ba:ce:44:e5:6d:f7:d1:79:82:d6:1a:62:29:cd:f5:95:
63:0f:b1:ae:91:0e:8d:18:c4:9c:1d:0f:bc:d2:2f:8b:96:67:
72:d4:ee:a7:42:ce:01:f9:be:94:21:9b:0a:3b:40:6f:12:31:
70:49:4a:8c:66:97:cc:f0:85:36:05:50:30:27:b7:54:2c:0c:
a1:7e:0b:5c:5a:13:40:9d:b0:f0:c4:53:f6:f8:f7:1a:cc:ef:
d9:e2:78:c0:47:8c:6c:3f:41:9c:d0:9d:f9:43:c7:60:06:a3:
23:57:09:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:58:36 2025 by rpki-client