Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c873ac2e-8ac9-30b9-a397-c2da3c8bd784.roa
File: c873ac2e-8ac9-30b9-a397-c2da3c8bd784.roa (raw, json)
Hash identifier: TSANxfKTUrkKomI9z7O7BSWpZLBSurY6nZJxVhDjhu4=
Subject key identifier: F5:F1:15:09:97:99:8F:9E:5C:D5:5C:1E:A4:CF:84:9E:40:5F:97:9A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CC8063B58E89A4E44D75027A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c873ac2e-8ac9-30b9-a397-c2da3c8bd784.roa
Signing time: Tue 01 Feb 2022 05:00:00 +0000
ROA not before: Tue 01 Feb 2022 05:00:00 +0000
ROA not after: Tue 08 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 136.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:c8:06:3b:58:e8:9a:4e:44:d7:50:27:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 1 05:00:00 2022 GMT
Not After : Mar 8 05:00:00 2022 GMT
Subject: CN=d9a41f82-7b9f-4aa2-a4be-17338fb69cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:6a:d7:17:f1:b5:22:73:0b:15:f0:05:c3:
57:2d:d8:1e:22:1c:ae:87:29:9e:5d:0e:bb:3a:db:
dd:a7:4a:1c:71:03:42:a9:b9:31:47:a4:1e:af:2b:
ec:a5:ac:24:dc:8b:fa:ec:55:e6:b6:d2:b0:9a:fa:
13:ee:d9:d8:ce:6b:83:b3:57:e0:b8:0b:7a:fc:86:
f7:d9:76:45:22:e0:4f:83:4d:3d:0f:e0:10:98:69:
2f:36:52:78:99:53:20:1c:2b:01:08:77:20:b9:61:
70:f3:0b:40:ef:67:18:70:b5:34:b8:68:07:5f:62:
56:bf:da:39:fc:95:59:64:35:e6:e3:3a:6e:67:5f:
d9:2a:99:6d:2e:2a:48:82:78:25:60:06:79:8e:53:
e2:87:71:14:7f:1a:5a:d1:a7:20:c2:39:9a:ff:62:
38:1c:46:0b:f3:fc:d0:d5:27:d3:3a:be:92:d4:7d:
a2:61:ab:52:a6:96:5f:e7:f7:03:70:bb:e0:dd:11:
16:d1:00:c1:27:a4:d6:06:4b:35:b4:ad:c5:b5:57:
ec:8c:d5:36:8a:40:cf:be:71:02:fb:3a:e8:32:c4:
12:5c:c2:e6:94:98:3a:6a:24:a5:84:d4:51:25:3c:
e9:34:c7:67:97:f9:f1:65:8e:8a:09:3b:ef:ca:5b:
c4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F1:15:09:97:99:8F:9E:5C:D5:5C:1E:A4:CF:84:9E:40:5F:97:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c873ac2e-8ac9-30b9-a397-c2da3c8bd784.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:a3:ed:1a:45:21:33:3f:49:79:f6:b8:31:a2:49:8b:32:ea:
08:36:18:30:41:76:cc:48:5a:fe:3d:d3:1d:5e:01:12:b3:cb:
06:ab:8d:6e:57:5a:80:d0:9b:f3:88:8c:51:f0:2c:e2:c9:1b:
82:70:df:4a:63:92:73:08:fc:16:82:58:11:65:fc:5e:ba:f4:
dd:c7:ba:8a:3b:f7:02:98:4c:0f:0b:dc:9b:ab:d8:f7:42:77:
ca:31:5b:10:69:d2:2f:c6:58:98:01:2e:c0:7c:8f:ec:de:e3:
e0:20:de:41:41:db:d1:a4:9f:0f:5b:ac:b7:30:d3:fb:39:7d:
48:74:5b:d0:0e:39:b9:b6:aa:7d:09:63:68:b5:fc:ad:82:71:
08:58:e1:f4:86:ff:da:c5:f5:d1:d0:fa:b3:9e:9e:fb:04:6e:
33:6a:a1:4e:e7:90:c0:90:50:66:54:ca:66:f3:62:49:5a:a5:
91:ca:75:1e:76:b5:08:79:29:9d:5f:83:34:07:39:0e:9d:45:
b7:a1:46:6b:e1:02:98:d3:9c:2c:8b:5f:30:5e:4e:1c:b8:c0:
a1:49:3c:1f:bd:41:07:0a:c9:22:55:b9:a9:52:5f:0f:0a:eb:
6a:f5:2c:d4:02:cb:af:50:d1:21:a1:5e:7b:dc:9c:a4:d9:73:
ea:b5:2e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:14:48 2025 by rpki-client