Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa925035-d12c-3756-bb08-f9213aa38481.roa
File: aa925035-d12c-3756-bb08-f9213aa38481.roa (raw, json)
Hash identifier: slUQFiK4f+5R8TkfHambN5uim//buKCjwDTvnLt6UxI=
Subject key identifier: 15:69:C5:72:19:B1:A6:A9:17:B2:E0:65:86:98:5D:F0:A9:69:77:D7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F1485E63E6A7D889E75D94F20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa925035-d12c-3756-bb08-f9213aa38481.roa
Signing time: Mon 29 Aug 2022 12:00:00 +0000
ROA not before: Mon 29 Aug 2022 12:00:00 +0000
ROA not after: Tue 04 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.14.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:14:85:e6:3e:6a:7d:88:9e:75:d9:4f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 29 12:00:00 2022 GMT
Not After : Oct 4 04:00:00 2022 GMT
Subject: CN=433313f0-c41d-4935-8b9e-100ad113d473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1c:76:2b:2f:8d:33:fc:67:df:35:04:15:06:
ac:4b:ed:f4:f7:f6:e5:64:56:2e:c4:cc:3b:68:11:
cf:41:65:76:f8:ba:8c:4e:10:bb:43:95:b6:ba:a8:
9d:ee:62:4a:d5:74:90:97:df:36:3e:73:b0:49:f2:
2d:72:cd:15:3d:03:78:79:41:68:3f:da:bc:b1:62:
11:df:95:74:41:b7:6b:5e:c9:f2:55:9c:e7:6f:f1:
51:bd:32:28:15:ff:ae:6a:93:70:be:9a:48:ae:de:
89:a8:02:a2:0e:b5:2d:1e:1e:6b:cd:fe:ca:3d:ea:
39:66:e7:8c:c3:a1:9f:d5:fd:74:1f:ca:32:fc:3f:
9d:d9:2a:a9:f7:86:55:2d:f3:3c:20:c1:59:5f:2a:
55:2f:25:65:35:0d:38:70:41:b9:01:5a:f2:71:e4:
45:f8:fa:ca:e3:f3:25:39:f8:a5:59:1b:bb:5a:ac:
26:95:ab:d6:b2:f7:d2:ad:2b:34:25:0f:dc:06:47:
26:00:36:34:af:6a:79:1f:ea:2a:66:40:5f:5e:e6:
df:38:fe:87:47:09:3a:4f:7c:ee:9e:cb:c0:3e:86:
a1:59:b8:56:ac:3e:19:46:36:ce:07:09:38:09:33:
b3:13:dc:e4:b2:4c:95:8d:8d:eb:0b:4f:d7:18:77:
7c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:69:C5:72:19:B1:A6:A9:17:B2:E0:65:86:98:5D:F0:A9:69:77:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa925035-d12c-3756-bb08-f9213aa38481.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.14.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:d2:f6:d3:1b:fb:23:9d:6a:d7:13:f7:d6:47:16:35:89:38:
9a:8e:3a:1c:59:a5:b3:f0:29:52:e6:b8:b7:e9:f1:ff:94:eb:
cf:59:db:9d:c7:08:9d:90:fe:a0:08:37:fa:e8:16:c1:e5:22:
64:34:91:0a:82:65:8f:bc:25:b3:1f:ea:eb:98:9f:9e:07:fe:
82:06:66:f8:7c:15:1e:e4:41:5d:c7:90:6f:7f:08:2a:65:34:
eb:0a:f8:15:d3:a7:dd:43:1f:b8:e4:a5:8c:ef:8c:36:1c:6a:
6f:89:09:d8:98:8d:83:ca:e8:9b:3c:de:0b:fe:4d:7e:e1:aa:
a3:6f:0d:4b:84:4e:63:5f:6f:7f:ee:f8:1b:ef:e7:60:9d:3a:
a2:30:20:0d:04:16:90:69:aa:bc:8c:30:0d:f5:62:ed:17:a0:
a6:97:69:8f:95:a9:db:06:f9:6d:2d:13:ae:cc:51:74:68:1a:
04:7f:af:b1:2d:90:6d:3a:7d:49:c6:b7:fb:d9:d0:94:f6:ca:
e4:ed:c5:a8:02:55:7a:25:c5:75:72:1b:d1:86:11:68:96:61:
cc:d9:d3:92:dc:53:f0:99:90:40:32:66:c1:88:60:18:9c:62:
7f:3e:dd:48:40:f2:06:22:31:f4:2c:9f:a6:ca:e0:ef:0a:0d:
95:e1:11:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:36:23 2025 by rpki-client