Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cfacd272-80c4-35e1-af24-25d65d576fe2.roa
File: cfacd272-80c4-35e1-af24-25d65d576fe2.roa (raw, json)
Hash identifier: hKI3eePjDmRGxBeIYrxRcpWm46mFqomvrYQ3bJDm3Zk=
Subject key identifier: C1:E1:C4:82:02:C5:AC:34:CD:C3:3E:3C:43:66:01:C8:F3:D1:03:33
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584073524C5D02323938A153D540
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cfacd272-80c4-35e1-af24-25d65d576fe2.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 136.14.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:52:4c:5d:02:32:39:38:a1:53:d5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=8bff9bb4-5bac-42e8-a934-6a128d35daf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fa:54:4c:59:f1:27:f2:cb:a5:77:01:93:da:
f3:73:18:50:4f:9d:20:d3:28:2a:88:26:63:6c:f0:
38:99:7d:c3:f5:ab:93:12:c9:b5:4a:d2:7b:aa:4b:
c7:96:af:57:ea:49:18:c1:f4:fa:2c:53:92:59:af:
35:e3:60:95:55:3f:a5:8b:00:6c:a8:00:06:2e:62:
97:4e:5d:de:97:26:9a:89:d7:a3:22:94:6b:64:c4:
2a:00:09:b0:2c:35:21:3e:d9:f8:21:a9:e2:a0:fa:
89:d1:f1:4e:34:73:e2:11:e1:f7:df:fa:4b:06:f8:
3f:a5:24:48:94:07:8d:07:0f:aa:0e:93:3d:a4:49:
bc:53:bd:aa:8d:10:98:cf:87:71:ab:82:90:41:72:
38:60:2a:f1:1e:f2:ff:a3:9a:ae:4d:7d:c4:3a:53:
b0:e9:82:31:d2:a9:8f:41:bb:8c:b8:82:aa:45:6d:
96:64:b1:8d:b2:dc:4e:b8:18:76:c0:39:25:d2:2f:
81:d0:6e:7f:af:18:91:32:39:09:2c:3a:7d:11:42:
09:7d:f7:a9:df:49:f9:0f:49:58:ba:02:68:a2:bf:
99:41:2c:31:74:40:80:eb:8c:f8:d7:e3:38:54:17:
f8:02:94:3b:34:2f:16:f7:06:3b:b2:a6:94:47:4f:
fd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E1:C4:82:02:C5:AC:34:CD:C3:3E:3C:43:66:01:C8:F3:D1:03:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cfacd272-80c4-35e1-af24-25d65d576fe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.14.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:ff:5f:f9:c0:36:72:50:5f:28:a7:4e:c4:a4:38:0c:b4:59:
ce:0a:33:7c:91:08:8d:6e:23:78:28:8d:6a:5b:c2:b7:53:46:
24:f0:aa:ee:a0:d7:33:63:ef:79:01:e0:57:26:6e:97:4c:8a:
32:bc:79:8f:cb:c9:f1:b8:e7:b4:ed:95:18:66:ce:3e:47:ed:
90:58:7e:68:71:8e:8d:02:8d:14:e0:a2:1e:e5:a6:b3:db:fd:
bc:d1:1c:f0:5c:1a:20:21:48:a2:8d:f7:b5:2a:c5:40:7f:a9:
66:4a:08:f7:04:ba:2b:61:26:32:53:24:c8:40:91:fd:03:df:
07:b1:e4:b2:35:51:77:0b:00:66:41:f5:a8:7e:28:50:02:df:
47:84:39:c7:1f:68:63:00:00:05:e3:f3:c4:89:ff:bf:1d:e0:
5b:14:34:f8:9b:38:6f:bb:ba:1b:61:2b:f5:40:f4:9c:0e:49:
7c:17:78:c0:46:8d:da:2d:6f:87:3e:4b:0f:54:a5:c1:33:c1:
12:bb:0d:8b:16:06:44:76:a3:7a:ed:3d:6c:73:ed:53:17:50:
22:14:97:53:d0:c9:29:d3:eb:de:f0:c9:33:4c:94:b8:79:aa:
eb:ae:52:51:f1:40:c2:c3:fe:51:4d:97:d3:94:b7:46:d5:2d:
22:f5:8f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:27:24 2025 by rpki-client