Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7e6128c-68cc-39fe-9ae9-ecdc40323625.roa
File: a7e6128c-68cc-39fe-9ae9-ecdc40323625.roa (raw, json)
Hash identifier: xQzDjOk2uWiqlBKyh8iQUipc9rr0Z/huvQ4J+Aa1LnA=
Subject key identifier: A7:2B:A4:1C:B4:6F:26:EF:FF:EC:32:66:D7:08:D5:10:F4:0A:54:09
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F882CCE6B2F27D0DD4AF9BC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7e6128c-68cc-39fe-9ae9-ecdc40323625.roa
Signing time: Mon 10 Oct 2022 12:00:00 +0000
ROA not before: Mon 10 Oct 2022 12:00:00 +0000
ROA not after: Tue 15 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 136.132.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:88:2c:ce:6b:2f:27:d0:dd:4a:f9:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 12:00:00 2022 GMT
Not After : Nov 15 05:00:00 2022 GMT
Subject: CN=32824b2c-066e-4371-8c6b-fd54a0e92f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ea:bc:74:70:f1:19:9b:83:36:2f:f1:aa:b6:
a7:85:05:c4:0d:de:3a:37:37:b4:9a:da:3c:2a:bb:
7c:99:00:77:ae:78:39:37:76:a0:49:d3:f1:b2:03:
f5:8c:6a:3e:18:da:d2:f5:db:e3:2f:85:07:e9:2a:
1e:c9:39:ef:31:16:02:ea:90:35:ed:93:79:d0:de:
90:40:70:21:52:ed:dd:85:09:df:48:19:7a:61:ab:
cb:30:c5:02:9c:f7:f7:c6:81:a0:c1:8c:13:07:fb:
2f:c5:aa:94:b5:3a:e6:7e:eb:48:e2:5b:5e:79:80:
6e:0b:02:3f:5f:21:ee:2d:49:c2:4c:c5:0e:a9:4c:
d1:75:8d:6f:61:d7:56:64:a4:62:69:20:71:f2:05:
9a:af:14:75:e1:84:35:6e:96:99:ae:d9:ba:20:66:
dc:aa:b6:92:27:6c:54:4b:e2:8b:68:3c:10:8b:5e:
93:f0:37:d6:48:11:76:df:7c:3b:43:2a:68:f2:8d:
47:bd:6b:6f:43:1b:c2:89:97:ad:d5:55:e5:5e:ee:
e8:46:6e:4c:60:a9:10:5d:e9:92:59:00:8e:3e:9b:
82:ef:f5:98:56:18:d5:f5:e1:fc:28:c5:fa:58:79:
c8:91:f1:16:3b:07:65:25:90:f2:84:bd:99:b8:6b:
83:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2B:A4:1C:B4:6F:26:EF:FF:EC:32:66:D7:08:D5:10:F4:0A:54:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7e6128c-68cc-39fe-9ae9-ecdc40323625.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.132.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:24:15:aa:21:cc:9e:cb:92:58:16:7d:79:86:26:8e:b0:0c:
a7:90:0a:3a:b4:ad:82:10:e3:c8:9a:6a:bb:dc:5f:84:93:50:
cf:94:6a:c0:f5:62:08:5a:6f:0f:b4:43:b0:56:4f:9d:a2:d2:
a0:87:e4:d7:1c:f7:18:ab:63:2e:a6:a8:4e:7a:50:b4:81:2f:
cc:4f:f9:ab:2b:96:81:7c:b9:50:60:28:4c:fb:87:f5:b7:64:
03:c9:a7:4e:5c:f1:94:1f:44:f8:66:6a:cb:d6:bf:fc:d9:7f:
74:72:29:a7:e9:e7:ad:21:88:d3:85:29:7b:86:81:57:f3:c6:
2c:4c:0a:5a:57:5a:d9:17:b8:f4:63:a1:12:f7:77:b7:61:31:
7c:39:2c:2b:14:4d:67:d7:85:79:41:c7:60:ec:e2:f8:90:3a:
99:40:d7:61:48:3e:3b:77:2e:20:cb:76:9e:89:7e:3f:1e:87:
d4:30:c9:ce:7a:da:86:a0:1a:b9:db:60:fc:eb:a2:69:78:f9:
a2:38:70:61:f6:65:2a:c3:32:f6:7e:9a:ed:af:5d:ee:13:9b:
2c:33:8e:07:c7:4d:9a:2d:4f:ec:ba:05:0f:5f:f5:4f:05:59:
c7:52:2d:f9:80:5a:76:8f:d8:3e:36:b9:9f:17:78:5f:e6:f7:
24:f4:1e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:05:43 2025 by rpki-client