Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6bf600d-91c5-34d5-867d-0626e36280fe.roa
File: c6bf600d-91c5-34d5-867d-0626e36280fe.roa (raw, json)
Hash identifier: 63794NK6H9f3c8pFr15YzooRsY4hW6TE1TmeS7/lYys=
Subject key identifier: 2B:90:47:BD:CC:78:4B:54:3B:A6:D6:00:69:1B:9A:AD:FB:17:D8:8B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404BA7C4F96113E747C5EAA400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6bf600d-91c5-34d5-867d-0626e36280fe.roa
Signing time: Mon 19 Dec 2022 12:00:00 +0000
ROA not before: Mon 19 Dec 2022 12:00:00 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 136.4.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4b:a7:c4:f9:61:13:e7:47:c5:ea:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 12:00:00 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=ed6b2f36-6310-48ee-bd89-882f3653da45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8c:b6:64:ea:37:a3:5b:e4:70:4f:1a:d4:04:
f0:a8:5c:bd:fc:bc:d9:0a:9b:ea:95:0d:0c:f8:77:
4b:bb:0b:71:3a:ee:88:71:37:70:05:ea:c7:d0:8c:
37:86:6e:83:7b:0e:c2:a6:8d:f3:01:cb:d9:78:c3:
d2:2b:66:03:3d:b2:5c:4b:00:ca:f0:b6:2c:ed:54:
d4:50:0a:c1:e7:48:55:68:a2:c2:1c:88:c1:9b:27:
5f:38:9d:57:a4:ec:11:dd:a8:39:cc:7a:29:dc:c4:
72:0f:76:f3:eb:01:df:68:ce:04:44:81:60:f3:14:
5c:25:ef:0a:c7:e7:ea:6d:6d:c7:b9:a5:6b:8f:6d:
93:d7:f6:17:2e:78:91:39:9c:f8:9b:e8:fb:ae:90:
a7:c1:39:5d:e7:a9:38:d0:4b:71:e0:b9:93:f3:23:
1d:30:29:6e:5c:5e:4c:7b:da:3c:ef:ae:1b:5c:a0:
6c:fa:16:35:2e:aa:3a:70:7a:c9:41:d2:af:0b:61:
1e:7f:b9:30:a2:80:d3:f3:97:f6:ca:36:e4:4e:45:
69:69:f6:ae:24:d6:ee:cf:51:00:a8:43:64:df:fe:
e8:4d:e2:6c:fc:d1:42:81:91:f8:ae:ee:10:82:b7:
96:02:98:b6:7c:99:74:8f:37:10:c8:20:88:34:5a:
2b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:90:47:BD:CC:78:4B:54:3B:A6:D6:00:69:1B:9A:AD:FB:17:D8:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6bf600d-91c5-34d5-867d-0626e36280fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.4.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:4f:72:7e:1c:d2:52:7c:37:a1:93:74:4e:35:dd:b2:5e:9e:
a0:ba:ce:02:76:46:54:7f:0e:ab:67:1f:f3:c2:3d:b4:08:45:
82:ba:1a:cd:30:18:a1:58:c4:fc:89:48:b8:24:32:99:4b:ef:
39:ad:20:7c:fd:1b:47:1f:96:72:47:fa:16:31:32:04:a1:7d:
3e:b7:d9:34:6a:70:03:7c:2a:6c:6a:f7:2a:36:c0:e6:43:c0:
44:5b:cc:03:b3:17:a0:7a:85:16:f0:1d:d9:17:ec:ef:38:87:
1e:bd:75:b6:f7:5b:2d:f5:bb:7f:1f:fc:80:d0:92:0c:d9:1f:
5a:b6:71:43:3d:de:f5:19:f2:cf:84:1e:ce:f4:2c:48:f7:f0:
9e:46:57:59:66:56:cc:75:1e:20:5b:36:b0:7d:41:c1:f3:26:
73:51:64:4a:dc:5b:24:fa:84:f3:a5:f7:ca:43:49:95:5f:01:
85:ee:4f:9e:84:cf:05:aa:22:e5:b8:8b:7a:df:98:c7:2d:dc:
0e:a7:4f:51:fe:70:a2:00:de:df:f9:11:57:b1:d9:d5:c5:19:
02:de:36:05:fd:cc:78:fd:d9:8f:a6:58:d9:33:b2:7b:1c:4c:
b9:d8:9d:29:b2:08:3d:ed:d8:aa:83:72:fc:dd:6b:97:39:6a:
7d:ed:ed:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:15:04 2025 by rpki-client