Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a09f30ff-2c0a-3423-9d81-e9bff3223d52.roa
File: a09f30ff-2c0a-3423-9d81-e9bff3223d52.roa (raw, json)
Hash identifier: 6DjAmaalYcdle1Tzwa63GSbNdg/qH2dqam02EWIM/GM=
Subject key identifier: FA:84:C7:97:A7:CD:CC:9D:D1:85:BF:05:26:5A:1D:F0:60:8F:A4:01
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E9D611CE38CFB6B505A3EB938
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a09f30ff-2c0a-3423-9d81-e9bff3223d52.roa
Signing time: Mon 18 Jul 2022 12:00:00 +0000
ROA not before: Mon 18 Jul 2022 12:00:00 +0000
ROA not after: Tue 23 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.20.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:9d:61:1c:e3:8c:fb:6b:50:5a:3e:b9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 18 12:00:00 2022 GMT
Not After : Aug 23 04:00:00 2022 GMT
Subject: CN=8523f799-a5a4-4123-bd12-b9a72023821a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:dd:17:83:22:d2:6c:aa:2c:89:0e:ac:d1:b9:
20:c7:c0:e9:56:c0:e5:9c:ae:3f:ce:7c:38:0a:ab:
6e:12:0d:4e:2e:61:5c:eb:40:d7:de:41:a1:d6:41:
a9:d7:21:35:4f:a3:9d:32:aa:8b:86:c3:44:72:5c:
1b:bd:40:d4:6b:dd:c9:33:05:15:44:38:9f:c8:21:
31:d5:a6:dc:86:2a:c0:21:2c:55:2b:68:6b:16:bc:
c2:5e:5b:07:10:29:92:fd:f1:39:30:37:9b:ff:e1:
58:d6:43:c7:9e:8b:8d:58:df:5b:c2:47:b8:6c:fd:
36:99:e6:5a:c0:b4:87:23:fc:26:8e:7f:95:4f:88:
4a:e4:d7:76:31:e9:44:43:d7:eb:a7:cb:07:cc:79:
9e:8b:93:8b:23:9a:91:55:f3:73:15:3c:17:63:90:
c6:1b:5b:7a:25:47:60:81:35:c4:29:ea:53:a3:ec:
54:1e:04:fb:6d:c4:6c:d0:74:39:0f:7f:6d:05:e0:
c5:64:d1:74:b9:f0:47:c0:7f:97:f1:9e:37:cd:f2:
e4:2f:e0:81:e6:80:8e:b6:ee:bd:db:3a:18:96:6f:
c7:70:98:50:ed:2c:48:62:35:9f:09:82:ec:9d:5c:
14:77:64:32:49:70:f6:10:88:9f:3e:71:60:09:70:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:84:C7:97:A7:CD:CC:9D:D1:85:BF:05:26:5A:1D:F0:60:8F:A4:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a09f30ff-2c0a-3423-9d81-e9bff3223d52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.20.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:fd:1a:b7:19:b2:fb:04:5b:3a:ad:f5:f8:4a:f0:a0:af:f6:
9c:29:62:ef:bb:66:3e:d2:ee:8b:59:9d:79:ac:ac:a8:63:b1:
da:a1:51:c1:63:42:18:9c:7a:6f:1e:b0:5f:71:de:48:a0:b7:
8d:ef:38:8b:94:6c:b2:de:12:97:93:9f:0f:06:a7:f0:96:13:
c7:00:a1:fd:41:4e:52:87:85:05:0a:b6:54:90:fd:e0:a8:c9:
88:88:3b:dd:11:b0:0b:f0:24:8a:70:82:93:2d:58:31:c2:47:
74:aa:75:95:17:16:f3:18:cb:ef:c4:bc:a0:6e:a6:0e:2b:fb:
1e:34:f5:d3:ac:80:bf:55:1f:9b:bf:c1:50:41:31:09:25:a9:
a7:ed:96:7b:40:2c:5d:fb:a5:92:b1:b2:53:17:b9:c6:7c:6d:
6c:d5:38:2a:e2:a8:09:44:1c:1e:0e:d5:d4:7e:2f:35:91:36:
5b:de:b4:a9:0b:ef:cd:97:5e:c2:55:94:e7:49:90:96:04:f9:
55:a3:cb:8c:7e:39:f3:9f:77:da:9b:0f:76:d9:2b:f5:4b:11:
37:5a:ca:20:e6:65:bf:1a:2f:cd:db:3e:29:56:1e:88:bd:6c:
4b:47:04:d3:66:c2:d3:28:a6:d4:53:bd:a6:f6:62:cd:5f:69:
9f:69:4e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:05 2025 by rpki-client