Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0b5b1d1-620e-32b0-ade8-58ca2ebb3246.roa
File: b0b5b1d1-620e-32b0-ade8-58ca2ebb3246.roa (raw, json)
Hash identifier: U4f9Zd7YXcW1vF0v05clIM53td5wuEUSANIGaurc1bY=
Subject key identifier: 29:7F:33:53:7B:44:9D:39:11:D8:35:25:B2:1A:1E:33:B3:81:C6:DA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FFD057FDCC017EC9E41426880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0b5b1d1-620e-32b0-ade8-58ca2ebb3246.roa
Signing time: Mon 21 Nov 2022 12:00:00 +0000
ROA not before: Mon 21 Nov 2022 12:00:00 +0000
ROA not after: Tue 27 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 136.134.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fd:05:7f:dc:c0:17:ec:9e:41:42:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 21 12:00:00 2022 GMT
Not After : Dec 27 05:00:00 2022 GMT
Subject: CN=e9489709-1f91-4b2c-b222-4fd08e9001b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:64:22:45:f4:09:64:41:80:94:be:60:f9:
25:6b:d2:70:05:0e:2d:34:f6:53:1c:5e:33:e1:8a:
4c:09:75:06:dc:da:82:ad:f8:58:72:40:6b:4a:9b:
79:f1:d2:aa:87:58:2d:3a:9e:d3:ba:b2:fd:55:40:
4f:6f:a8:46:51:f6:f3:8b:05:4e:4e:09:fa:ab:e0:
69:15:50:bd:f5:e5:49:2e:38:08:42:62:1c:17:3a:
ec:f5:73:0d:17:9a:33:e6:1d:0c:a6:74:96:61:df:
31:f4:a1:ff:14:0c:de:66:13:2c:d2:0e:a7:12:45:
75:67:50:dc:19:44:05:34:92:e9:f2:80:38:48:1b:
ce:67:de:6b:17:51:2e:21:a2:72:16:c0:f5:1e:48:
43:88:b8:44:4f:21:a1:38:32:64:a9:8c:9a:ca:8a:
d9:9a:a6:23:d0:2d:a4:aa:ce:1c:df:55:90:8f:66:
45:9d:b1:a2:6f:ed:28:bb:4c:9e:3f:d7:a9:6f:22:
8e:f2:1f:12:c9:a0:01:91:2c:f4:38:3c:72:78:f6:
d1:ac:cd:b8:8e:e0:16:82:e9:ee:5c:1b:b5:a5:85:
61:60:43:31:0d:00:6f:0d:0b:40:5a:44:ca:a5:e1:
62:f5:03:e9:40:21:e7:67:cc:39:7d:82:7a:18:21:
02:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7F:33:53:7B:44:9D:39:11:D8:35:25:B2:1A:1E:33:B3:81:C6:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0b5b1d1-620e-32b0-ade8-58ca2ebb3246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.134.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:f7:b4:f3:79:8c:cd:c5:65:98:7d:9f:8c:46:3a:44:d0:cc:
e4:75:0f:c0:47:a3:83:03:c3:34:be:cc:d3:b2:71:64:48:e0:
4c:ab:83:3e:7a:55:a2:1c:d3:32:0d:ee:f7:16:57:43:0e:6c:
21:fe:ec:6d:24:6e:bb:fe:8a:43:95:76:ee:4f:f0:1d:57:19:
d8:0a:a4:aa:c3:da:d0:73:33:c0:50:08:00:18:87:6f:f2:8b:
84:c7:5d:be:3c:4e:41:7d:22:fb:12:ec:49:59:00:48:51:36:
28:fb:9b:4d:68:25:9c:4e:db:76:b7:d9:f3:e3:a5:28:f1:7c:
be:2d:94:43:e9:fe:27:5c:fc:e1:97:a3:a5:08:b2:6d:6e:21:
07:fb:fb:c2:ba:1e:aa:25:0e:ae:59:77:e1:2d:d8:d3:ca:ce:
16:0e:ad:e9:0c:ec:89:d7:47:62:6c:ae:46:6c:a2:e4:b1:4e:
cd:96:e0:e5:9d:71:b3:7c:a5:96:bc:c3:12:fb:12:7b:30:5f:
df:d7:a3:40:a0:0a:2a:16:f0:99:a8:85:14:ea:cd:a5:83:e4:
50:8e:72:f7:30:71:ae:02:77:a0:7f:66:8c:f4:db:7c:96:41:
01:37:bf:23:54:4e:24:38:5a:eb:61:2f:b6:2e:72:36:8f:be:
4f:a7:96:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:50:26 2025 by rpki-client