Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d55bfd6f-8881-3f02-a26f-4b7bf3dc37ef.roa
File: d55bfd6f-8881-3f02-a26f-4b7bf3dc37ef.roa (raw, json)
Hash identifier: zrpEPiu2C/WV1XhTADxGTAyzvzi91RF6HD8tjXuaYLA=
Subject key identifier: 69:77:EC:54:A9:AA:4F:D4:06:6F:27:34:26:21:07:E8:13:10:C6:23
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD666FEF1CC1122D19B7EE080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d55bfd6f-8881-3f02-a26f-4b7bf3dc37ef.roa
Signing time: Mon 07 Nov 2022 12:00:00 +0000
ROA not before: Mon 07 Nov 2022 12:00:00 +0000
ROA not after: Tue 13 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 136.19.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d6:66:fe:f1:cc:11:22:d1:9b:7e:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 7 12:00:00 2022 GMT
Not After : Dec 13 05:00:00 2022 GMT
Subject: CN=32ddd3a8-b945-4fa3-85f7-74dc5361d505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a3:a5:15:bf:cd:85:70:40:65:85:35:70:fa:
ef:14:fc:82:15:ab:9d:4b:bb:b1:4e:2c:08:6a:3e:
6e:6d:0e:b8:ec:cd:96:c8:fa:ab:82:00:3e:ce:8f:
03:85:52:12:64:51:cd:8b:25:dd:65:5c:4a:bf:50:
d4:ce:02:32:1a:f5:09:ac:f3:80:34:09:b3:fc:77:
b8:0c:da:e3:e8:d0:e7:36:96:f6:42:18:cc:7d:80:
47:f8:21:c7:83:c0:f2:f0:b4:a3:89:c6:63:a5:a6:
34:92:ae:60:1d:b3:da:9a:60:36:63:70:99:bf:68:
ad:0e:fb:e9:a3:08:f6:b0:41:0f:47:78:78:74:21:
2c:33:3b:a1:14:40:d0:76:21:34:11:98:d0:fd:9d:
2b:d7:38:db:8f:b4:4d:30:65:0d:8f:ca:0b:2a:cb:
6f:e4:d2:25:19:c4:2d:8f:56:bc:63:4b:b1:ee:fb:
6c:03:01:e0:23:b7:f5:35:b1:91:44:14:c2:d8:af:
f6:7b:31:20:0c:2c:7e:3b:93:71:7b:3e:e6:13:52:
ae:88:d5:56:5f:d8:56:be:be:ec:df:c9:0f:a7:fb:
31:e8:ce:2b:92:b9:44:5a:39:c8:8a:54:67:af:0d:
9c:9e:35:da:4b:c0:37:36:40:8d:b5:e9:93:a2:45:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:77:EC:54:A9:AA:4F:D4:06:6F:27:34:26:21:07:E8:13:10:C6:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d55bfd6f-8881-3f02-a26f-4b7bf3dc37ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.19.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:07:0e:bb:f6:c8:e1:33:c7:6d:ec:d1:e9:97:0c:2e:38:7b:
9b:76:eb:b3:2b:43:bd:66:77:07:a7:9c:ee:0e:1a:9f:a8:bb:
1a:34:19:4d:6f:96:f1:ce:ca:9a:d1:e8:14:6a:9d:50:df:8a:
fb:9a:2a:6b:2f:a0:11:2b:95:3b:66:05:c7:04:5f:81:1c:a6:
9f:1e:12:4d:8f:b7:f7:9a:df:14:b2:2f:2f:34:64:b3:93:83:
26:d1:02:dc:59:54:4b:f4:3b:cd:0a:92:9b:d1:4b:73:a3:c9:
ba:25:93:cb:de:d0:ab:e1:be:fe:af:f4:1e:8c:ef:54:c3:cc:
cd:8e:09:bd:e0:0d:6f:fe:7b:d0:10:af:ed:70:bf:c4:99:f1:
cc:3e:18:af:73:78:13:8c:c7:22:bd:76:6f:7d:04:40:60:a5:
51:0f:69:01:b0:bb:e7:80:b4:7d:50:0c:af:3d:10:bd:a1:af:
1e:a4:22:88:33:5f:e4:97:1e:71:51:cf:26:af:c9:0f:d1:01:
c2:bb:92:6a:de:a2:5d:f0:d1:c9:d1:c3:72:9c:20:2f:7c:36:
07:6a:0d:6f:66:70:a7:78:d7:2b:29:9e:f1:8d:2b:69:c7:b7:
59:93:7e:0d:0c:49:b9:82:33:fd:0a:10:6b:d3:c5:4a:31:00:
95:4e:71:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:20:11 2025 by rpki-client