Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb76b73b-6947-3613-aced-5c5e8af8ed23.roa
File: cb76b73b-6947-3613-aced-5c5e8af8ed23.roa (raw, json)
Hash identifier: 3PMqFE3mNFSagj1lE3kRUHqeMAD1lt/FsvkafPjnBLs=
Subject key identifier: 04:C8:B9:D8:02:C8:F9:F9:24:76:20:5E:70:10:96:A7:0B:E0:07:6E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D3D5CB5435A6F77334E44FE00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb76b73b-6947-3613-aced-5c5e8af8ed23.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 19 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.19.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3d:5c:b5:43:5a:6f:77:33:4e:44:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Apr 19 04:00:00 2022 GMT
Subject: CN=78ba861d-39fa-4250-a63e-674a5616f59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0d:9f:c5:2a:68:fc:09:8d:69:a7:28:e1:16:
ce:6c:33:57:57:df:1b:be:49:32:b7:f0:da:44:73:
42:f0:80:03:60:f0:73:48:71:38:44:91:fa:e4:d1:
0a:11:b5:37:c9:b3:97:6b:04:a2:41:f3:1e:e4:ca:
32:c1:7d:03:eb:32:e4:7e:a1:8b:54:fd:59:68:30:
36:83:3d:13:d2:15:a0:40:ae:ee:4b:a6:92:7e:cc:
1e:ca:ad:78:10:e0:1c:93:ed:87:ba:ef:1e:ba:b8:
b8:27:aa:71:8d:e2:b5:22:3f:0e:d2:4c:aa:b2:e1:
98:c5:ef:8b:c7:44:a7:46:4e:30:9c:9b:4c:b0:50:
d4:c6:da:78:e5:f0:a4:14:12:82:a8:57:3d:26:5c:
c6:a9:b6:8d:ec:45:ff:78:39:71:72:0c:d0:91:a6:
d5:68:9d:53:40:bf:3a:d2:5b:7b:61:ac:ef:e4:fc:
a3:e9:2f:90:8e:05:76:20:97:b6:88:ec:4e:61:4d:
ee:ad:dd:30:19:86:50:07:f2:39:77:d0:04:f2:49:
69:54:a0:42:3e:10:f1:c7:07:c7:d3:15:fc:c8:f0:
6e:9f:df:21:20:e9:69:8a:f3:b1:f3:69:57:84:f9:
be:10:da:ea:45:18:70:7e:02:27:71:07:19:30:6c:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C8:B9:D8:02:C8:F9:F9:24:76:20:5E:70:10:96:A7:0B:E0:07:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb76b73b-6947-3613-aced-5c5e8af8ed23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.19.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:13:78:34:ab:18:fe:b0:05:12:cb:39:05:db:14:38:f2:c8:
57:71:86:cb:83:0f:29:1d:1f:88:c7:ef:1f:92:ec:3f:aa:80:
09:1a:f7:15:59:5d:cb:95:c1:ba:3a:f4:bc:f9:3d:2b:ee:3f:
37:a0:ce:90:d3:79:89:ec:3e:e8:d5:b9:33:45:13:8f:20:12:
e4:ca:6e:0a:b6:a8:ae:8b:ff:cd:ac:17:00:91:5d:ef:ab:19:
18:e6:32:8a:bd:bb:09:55:9d:dc:eb:0a:03:e1:b2:b3:09:81:
4c:44:4a:29:eb:8e:15:d2:ff:9a:7c:6c:69:d3:a7:34:bb:3d:
21:40:d4:e2:00:27:6f:14:d6:5b:4e:d0:57:a6:70:a2:52:35:
e1:df:0b:2d:50:14:c3:47:04:5b:b5:2f:a8:29:cf:a0:b3:b2:
11:b3:91:76:40:fb:d8:9a:71:fa:84:38:e4:05:da:0c:95:87:
d1:74:56:a6:41:a8:62:b1:ca:ee:c1:a4:7a:9f:f8:73:c7:21:
50:84:75:e2:46:79:28:78:9e:f2:90:88:22:cc:af:98:82:02:
b8:d9:32:1f:a7:ec:d1:78:8b:42:1c:f5:68:4b:04:43:da:75:
ed:46:7a:ee:6f:e3:02:92:47:f1:67:cb:20:d5:70:ea:2b:99:
29:82:f8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:48 2025 by rpki-client