Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b27598d2-8f4a-3098-b388-8c49117499e1.roa
File: b27598d2-8f4a-3098-b388-8c49117499e1.roa (raw, json)
Hash identifier: SxwTOxFVGaLwEBsw6KhwDrT+YNPQXAc0FSWvI+2mwko=
Subject key identifier: E0:34:C9:F6:6B:9F:47:23:78:D9:7D:26:8C:47:C1:D2:60:00:02:E9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D647979190F2354CB784CE3C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b27598d2-8f4a-3098-b388-8c49117499e1.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 03 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.135.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:64:79:79:19:0f:23:54:cb:78:4c:e3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : May 3 04:00:00 2022 GMT
Subject: CN=749a38b6-a421-4ac9-909f-c863efc59efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2b:59:c1:bd:17:fa:bd:15:65:92:6f:d4:ff:
e7:95:22:a5:39:b2:e6:fc:9a:5a:e2:f0:b2:0d:77:
c4:c0:d0:bc:e0:92:ae:69:ce:51:a6:ef:e0:48:6c:
40:76:42:f7:03:a5:10:3a:0a:d6:a9:fc:4a:9a:19:
84:9c:f2:7d:42:e7:40:ba:b6:d3:d3:a6:2e:3b:b2:
79:9f:58:58:92:8a:88:0c:4e:2e:ec:c3:e9:96:d2:
3b:1e:e5:0d:84:5a:a8:05:3e:87:83:2a:56:f7:bd:
6a:d9:16:33:83:af:65:46:8e:9c:a4:be:30:af:95:
0d:ae:8a:a4:f8:c1:25:20:2c:89:36:fc:04:ba:b3:
af:1c:67:79:f0:d4:08:e8:49:54:11:3f:25:09:2e:
25:65:e5:f1:ee:8e:18:e7:f3:33:fd:af:5f:11:55:
da:19:86:6f:71:f2:91:1b:8d:f4:85:d7:1a:4a:7f:
73:70:c1:f5:aa:cd:43:d1:a4:76:37:f1:6f:9b:6f:
22:9a:4d:99:79:3a:63:76:7c:21:e4:62:27:4e:91:
b2:b4:6c:3d:56:e8:dd:76:30:e7:74:d7:97:0d:64:
90:02:2d:b2:a5:8f:be:9f:5e:15:e8:b0:04:dc:3f:
0a:32:d5:ca:40:6e:80:d9:60:3c:d7:ac:d0:79:b1:
1f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:34:C9:F6:6B:9F:47:23:78:D9:7D:26:8C:47:C1:D2:60:00:02:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b27598d2-8f4a-3098-b388-8c49117499e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.135.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:da:0d:dc:fb:9f:2e:91:c5:ad:ca:fa:19:34:e3:67:dc:c6:
a2:0f:33:2a:15:52:82:a1:c3:f7:41:4d:5c:b8:94:82:92:0e:
cf:f3:24:74:9e:92:7f:e8:d9:7c:25:2a:62:bc:11:f4:30:37:
0e:68:84:c0:9d:ce:a3:2d:a2:b4:51:7b:f1:44:d0:f9:87:82:
85:ae:22:21:24:33:87:2f:84:2e:5d:48:0f:bb:b1:3f:39:6b:
a7:01:f8:ea:25:c5:f2:ac:9a:a0:c2:dc:44:ce:cb:c3:c6:05:
48:72:ad:09:a9:f3:51:c7:b8:03:11:e8:9e:21:94:31:d9:4c:
e7:ba:68:8f:61:9b:a4:97:fe:87:b0:aa:ec:27:83:b4:d0:5c:
2a:6a:a1:d6:26:8f:8e:c9:58:d4:78:fd:cd:6f:c7:f6:76:9a:
66:d5:be:70:13:fa:c8:94:be:b0:69:f0:2a:b8:83:c8:c9:7d:
7e:eb:73:f8:19:ca:bc:a6:9b:5b:42:97:b7:3b:91:c9:cf:22:
9e:f8:fe:72:17:d6:65:03:86:3a:89:a4:dc:02:b7:fb:88:8b:
da:8f:13:5d:5b:c6:7f:6d:83:fa:0f:34:ed:09:e3:10:7e:58:
91:4d:b2:50:fc:f2:f4:3c:4e:f6:cb:2f:87:ef:e9:26:c5:ce:
df:07:4f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:43:43 2025 by rpki-client