Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c9d639d0-5ab7-3fec-b291-43a708f7b0d6.roa
File: c9d639d0-5ab7-3fec-b291-43a708f7b0d6.roa (raw, json)
Hash identifier: K0REA8H3XT+kQGlInHbscO9QOqL/LseKsTnXGfRQXjg=
Subject key identifier: 2A:14:78:32:69:17:22:9B:CF:B3:80:6E:46:31:DF:CE:D8:69:F7:6E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E7669204B1574A87D6CF22E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c9d639d0-5ab7-3fec-b291-43a708f7b0d6.roa
Signing time: Mon 04 Jul 2022 12:00:00 +0000
ROA not before: Mon 04 Jul 2022 12:00:00 +0000
ROA not after: Tue 09 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.16.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:76:69:20:4b:15:74:a8:7d:6c:f2:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 4 12:00:00 2022 GMT
Not After : Aug 9 04:00:00 2022 GMT
Subject: CN=233b214f-f777-48fc-8a4b-12f4bbbb7d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:34:60:d9:f3:da:81:6a:36:78:b4:f4:66:
09:e7:80:74:85:b4:9a:13:80:3c:66:a2:77:cc:b7:
47:3c:c2:e6:3d:16:74:5d:ba:fd:68:5d:a4:70:2b:
6d:d4:bf:7d:85:14:8f:18:79:a1:a8:dc:7e:bd:03:
7e:9a:f5:30:da:fa:de:2f:13:80:5e:9d:8c:24:2f:
1d:b7:bc:68:d5:64:eb:7b:f8:d1:eb:ff:4a:ec:89:
d2:8e:b4:3f:2e:43:f4:79:18:c2:10:67:e0:7c:86:
dd:c6:a3:2f:13:e6:3a:5d:92:f1:a3:9b:2b:a4:d9:
ab:f1:83:5c:a5:cf:72:11:cb:f8:60:23:d7:de:5d:
2b:3a:e9:bf:5d:9a:af:95:73:f1:00:f9:27:43:d3:
58:df:0b:dd:9a:87:20:b0:64:d8:e8:03:02:40:24:
44:88:c4:1b:c0:ce:0d:0e:a2:a4:ce:9d:99:d4:a1:
65:39:ed:93:68:5e:a1:b2:18:09:19:56:27:72:3f:
e5:19:5d:6e:cb:e6:73:5e:db:59:5b:4a:d6:56:1e:
3e:2b:9c:b0:56:ce:cf:11:13:94:11:b4:f5:0e:bd:
9e:e8:dc:48:16:45:3f:63:d1:86:5a:22:77:9c:0b:
96:44:48:01:0b:7f:80:e6:70:4b:bf:01:bc:19:26:
78:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:14:78:32:69:17:22:9B:CF:B3:80:6E:46:31:DF:CE:D8:69:F7:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c9d639d0-5ab7-3fec-b291-43a708f7b0d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:a3:ca:bf:fc:24:bf:ac:91:02:2c:69:70:f2:95:0f:68:4e:
0f:70:7c:0c:e3:97:63:b3:45:62:e3:df:08:24:8d:20:ed:c3:
70:fc:b2:da:66:3f:ed:6d:d2:76:e3:61:a6:41:5a:50:58:3b:
b3:b2:7e:ff:19:bf:6b:bb:bb:70:48:1f:87:fe:78:1b:2b:fe:
18:eb:0e:85:92:ef:f4:46:cd:f1:81:9e:5e:2f:11:04:10:fc:
41:12:d6:da:ec:50:9b:98:30:97:94:fb:fa:44:44:96:f4:49:
fd:96:88:6e:26:97:9e:2f:84:73:b8:0a:31:a0:2b:18:c8:fa:
69:82:61:9a:b9:e7:81:bd:22:a1:cd:75:3a:07:b4:9a:2d:5b:
f0:9b:83:ee:16:50:34:16:8c:ba:31:b8:e3:21:9c:a2:0b:54:
00:84:d0:99:ff:47:6c:a4:d1:51:a3:91:6a:8a:3c:02:3a:8d:
ad:32:12:f2:17:10:f4:a5:b0:d2:e4:a1:d4:0d:34:c7:19:5f:
9b:79:7d:0d:54:20:e8:d3:e4:3c:c8:be:17:71:16:4b:65:e4:
25:1a:f2:69:71:8c:fd:c9:13:25:8b:7c:1d:bc:54:0e:f4:2c:
27:8b:38:0a:43:2d:09:8d:b6:79:ad:cf:56:0e:02:20:c3:61:
3c:48:b2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:16:16 2025 by rpki-client