Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d6a87f97-cf78-33cd-845a-001c3f8dac0c.roa
File: d6a87f97-cf78-33cd-845a-001c3f8dac0c.roa (raw, json)
Hash identifier: ETJSSRIt6uoA1l1UjBmxi4228RuaRjFZtXaW0a+0vrU=
Subject key identifier: 53:C6:5A:9C:AB:C7:6E:A7:0B:F5:62:CC:B2:4F:09:D4:9B:4C:BB:AA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F88346FA03BCCE7E6EF7C9700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d6a87f97-cf78-33cd-845a-001c3f8dac0c.roa
Signing time: Mon 10 Oct 2022 12:00:00 +0000
ROA not before: Mon 10 Oct 2022 12:00:00 +0000
ROA not after: Tue 15 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 136.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:88:34:6f:a0:3b:cc:e7:e6:ef:7c:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 12:00:00 2022 GMT
Not After : Nov 15 05:00:00 2022 GMT
Subject: CN=23fc74f4-d79a-4ab4-b34b-02d29a485ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:be:85:69:51:55:2d:1d:83:df:e5:f3:03:
32:6a:d4:0d:26:02:27:e9:ed:36:88:8a:3f:2e:7c:
17:62:c9:91:bb:44:08:2e:f8:36:d3:22:ce:f0:29:
f8:a9:6e:f0:58:0e:e9:2d:85:c5:9c:a5:a8:4e:9c:
1b:8e:7d:35:d8:4f:ff:02:99:92:52:c7:73:7b:02:
7d:9e:8a:d4:06:16:b0:93:b9:c6:9c:4b:ba:53:bb:
0e:6f:0d:df:c4:5d:95:1c:34:75:0f:1e:71:d8:b8:
6d:c9:8a:7c:72:d1:1d:50:6c:7b:bd:ed:ce:68:0b:
4f:ae:c5:ba:e7:92:9c:20:d2:48:73:c7:7e:41:bf:
e9:23:68:88:be:fb:c8:64:54:17:93:01:5c:06:38:
16:61:26:67:6f:1d:33:df:bd:90:97:7c:d1:20:fc:
de:42:d2:34:11:17:6d:1e:03:72:26:98:e3:f8:05:
64:2a:ad:02:fd:d7:97:7b:90:f6:67:90:af:4b:de:
9f:be:a9:7e:55:db:39:de:7d:80:9b:47:ab:00:65:
79:c5:61:8e:e8:39:6b:99:58:96:73:5e:57:48:1f:
6f:eb:65:0f:90:f1:6c:21:2c:c2:a4:68:dc:8f:01:
14:65:09:e3:d8:5f:19:0b:a4:56:6c:2c:08:b9:90:
32:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C6:5A:9C:AB:C7:6E:A7:0B:F5:62:CC:B2:4F:09:D4:9B:4C:BB:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d6a87f97-cf78-33cd-845a-001c3f8dac0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.136.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:bb:d1:72:cf:43:68:6f:2e:77:e5:3f:6f:68:f4:bf:83:98:
2c:72:e4:c5:87:24:04:7b:bb:b8:55:3a:76:d2:dc:5c:5b:44:
8e:43:3f:e7:83:71:01:63:3d:40:ab:9d:7f:f0:7a:18:24:94:
97:33:43:f9:48:2d:23:c8:8a:56:72:bc:44:59:c6:e8:34:e6:
21:30:1b:66:02:17:b9:4d:03:1f:5f:f0:de:6a:38:58:7a:67:
43:f5:31:7c:61:73:da:36:1c:25:93:57:b5:77:b7:61:28:7b:
d9:a3:3a:e1:38:be:d1:f1:d6:bb:80:d5:b4:02:f5:15:22:8c:
d3:d5:13:07:85:1a:62:3f:c2:4c:2f:fd:ab:2a:4a:b2:28:af:
49:92:f3:12:41:f7:a4:93:94:10:06:1d:37:61:42:78:ed:ec:
14:16:19:a1:a5:f0:fa:03:ae:3b:b7:3e:c5:a3:7c:47:47:9f:
5d:f7:bc:33:15:71:df:68:91:42:fa:1d:7e:03:4b:82:8f:14:
84:ea:c9:82:85:38:6d:fb:70:79:d3:8d:03:e9:04:4c:b1:ea:
7c:6e:04:cb:fe:cd:b4:96:f0:f4:5f:47:85:d3:3e:b1:40:e1:
2d:c1:e8:c5:52:bc:3f:b5:0c:71:b6:4e:37:d0:ac:6c:03:52:
55:f9:62:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:06 2025 by rpki-client