Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c00b1d9c-91d8-3dc5-930d-fb9b868aed97.roa
File: c00b1d9c-91d8-3dc5-930d-fb9b868aed97.roa (raw, json)
Hash identifier: ZUoIXTTE3aVQmGARpQjhAxYvb97qsAQAZYKmp3v6lZw=
Subject key identifier: E4:A0:34:B5:5E:DE:39:38:CE:4B:AC:B1:BA:C2:AF:4A:42:BD:66:8C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DB2B2F3F331962743062CB180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c00b1d9c-91d8-3dc5-930d-fb9b868aed97.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 31 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.20.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b2:b2:f3:f3:31:96:27:43:06:2c:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : May 31 04:00:00 2022 GMT
Subject: CN=e4d418d1-d8bd-48d5-9c1e-cc9cee17d082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:6b:75:9c:33:c1:3f:5a:b9:60:5a:e6:d5:
47:71:a0:92:56:49:97:4f:76:87:5b:09:29:ca:71:
93:bb:d1:d6:19:71:28:68:c4:55:b2:74:ca:09:3d:
0f:34:17:f0:ff:42:58:0a:de:38:2b:4f:bf:49:d8:
fa:34:3c:32:1b:58:83:46:67:82:79:44:e0:be:76:
12:2d:ca:5f:31:98:5e:f3:68:7e:e5:be:09:d9:a5:
e1:52:a1:6a:2b:e7:b8:96:e4:0a:09:8f:d9:56:14:
f8:99:76:a9:4b:6a:ec:47:7e:7b:2c:bb:73:45:0d:
4a:1a:76:3f:3c:4b:04:3b:50:7c:25:07:ea:5c:9a:
16:6e:c2:55:3f:af:4a:93:46:14:a4:44:7c:00:29:
bf:cc:3f:f7:5a:a6:f8:63:82:ed:b9:16:7f:c1:e9:
a1:e5:32:12:02:97:6c:7c:37:78:52:63:47:c6:c4:
e9:f7:48:1e:c6:29:61:1d:da:ec:1c:1c:b1:da:60:
bf:85:32:2c:e8:58:c1:9c:92:9c:e9:98:04:01:5d:
03:ac:e4:76:51:3b:cc:1d:9d:68:42:44:0e:62:66:
ce:1a:c6:25:5e:fd:d7:f7:8a:f4:82:86:45:d9:99:
f3:75:28:05:72:2d:2e:ac:c6:5d:d7:e8:43:b3:6b:
ac:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A0:34:B5:5E:DE:39:38:CE:4B:AC:B1:BA:C2:AF:4A:42:BD:66:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c00b1d9c-91d8-3dc5-930d-fb9b868aed97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.20.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:c9:1c:fd:38:97:22:80:92:23:6d:da:75:af:0f:71:f2:3c:
e7:cd:54:89:22:ff:4e:b0:fd:25:19:a3:4d:8f:dc:66:1c:fa:
d9:5a:8c:d7:54:cc:7b:7e:ff:52:be:b1:a5:98:cd:73:ec:b3:
0d:03:f1:7f:ff:24:54:26:0c:45:6f:2d:55:a1:4f:96:36:12:
90:cf:ef:dd:a2:f6:25:e0:58:80:04:13:60:32:92:2f:b5:dc:
2e:65:5c:82:26:9a:2a:1a:04:78:9d:2f:08:bc:b2:7a:55:69:
a3:2b:88:a1:4f:9f:bc:9d:e6:75:62:ff:5e:86:fb:67:56:8a:
59:b2:67:3a:d6:3e:14:86:75:2b:7a:7c:7c:ed:79:88:46:1a:
41:79:5d:31:51:dc:97:c4:53:0c:3e:c4:15:65:78:87:a2:d0:
52:52:2f:94:ba:6f:98:25:2e:5d:c1:c1:ad:6c:20:c9:3e:e0:
96:d6:0c:ff:4a:87:f0:5e:e9:18:35:ae:de:20:2a:bd:8c:4a:
d5:af:bf:e1:a0:b2:6b:ce:96:c2:ca:ec:8f:6a:b6:ee:e3:48:
d8:4b:b6:5e:74:85:59:c2:8b:53:9c:a5:4f:0b:f1:ad:31:9c:
9d:22:fc:9b:30:e0:1f:56:3f:aa:cf:94:db:f3:ae:bc:70:56:
4a:58:52:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:24:10 2025 by rpki-client