Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e22e6b7d-7f3c-3c3e-924e-c5c1fbbcf24d.roa
File: e22e6b7d-7f3c-3c3e-924e-c5c1fbbcf24d.roa (raw, json)
Hash identifier: eRZRh4hSU/c7tJzotBqAKC5j3IyYYNjzC+ticqROowo=
Subject key identifier: 2D:93:D1:28:86:41:02:29:66:E6:88:24:C5:F5:9A:A5:5F:49:56:71
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EED8642582EAF029875B95600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e22e6b7d-7f3c-3c3e-924e-c5c1fbbcf24d.roa
Signing time: Mon 15 Aug 2022 12:00:00 +0000
ROA not before: Mon 15 Aug 2022 12:00:00 +0000
ROA not after: Tue 20 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:ed:86:42:58:2e:af:02:98:75:b9:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 15 12:00:00 2022 GMT
Not After : Sep 20 04:00:00 2022 GMT
Subject: CN=0320c58c-5d6a-47f9-a9f6-35fea2c985d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3d:bf:d4:c8:26:f1:f9:c9:8e:62:32:96:f4:
35:d6:45:7b:52:02:b0:af:77:31:f2:f5:c9:b3:23:
eb:7a:90:31:90:77:87:a2:7b:2e:b1:80:88:5a:b0:
ac:fb:0f:3a:1d:74:05:6c:4e:24:c9:26:4d:85:54:
44:d6:13:88:1e:34:3c:3f:3c:32:6b:ee:e5:4f:fa:
43:ab:fb:da:d8:c3:8e:b4:bc:c8:11:49:06:d9:9e:
93:e2:2f:55:9c:20:fc:30:d5:4d:c6:3d:ac:8f:91:
6d:12:85:82:1a:ee:68:bd:25:dd:ae:73:30:35:2e:
d7:b2:0c:8e:59:f5:09:80:f9:18:59:b5:8b:ea:fa:
39:ac:8d:7d:aa:55:7c:ad:4f:ca:5b:7b:5c:12:a5:
af:14:9a:63:6b:87:a1:69:fb:9e:dd:f8:4a:7e:d5:
24:72:32:c8:73:88:9d:32:32:31:0c:b4:e9:5c:55:
d2:1d:59:4e:50:80:53:57:f4:13:d3:91:eb:70:3c:
b5:ba:4f:f0:a5:33:bd:a9:65:47:08:6f:a3:92:2d:
a4:5c:42:96:38:99:66:4a:c4:72:16:90:48:b0:a8:
1c:b5:af:f6:24:c3:c0:2f:52:de:51:6d:3a:7a:66:
a6:cc:b2:87:9a:f1:3f:65:61:64:2a:fa:4a:0f:50:
15:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:93:D1:28:86:41:02:29:66:E6:88:24:C5:F5:9A:A5:5F:49:56:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e22e6b7d-7f3c-3c3e-924e-c5c1fbbcf24d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.136.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:73:cb:db:d5:97:76:c6:61:f7:a0:71:f1:81:bc:aa:aa:82:
7b:d0:59:f8:21:ac:53:7e:15:20:6c:63:27:60:42:fd:2a:ac:
9d:95:af:5e:36:51:36:c5:a7:0e:6f:20:31:b1:b3:a0:47:5e:
71:30:be:38:dc:8e:3d:da:f9:25:a6:28:0f:01:52:f2:96:fb:
99:c4:4d:4b:06:a7:22:27:44:e4:92:2e:7e:e5:c4:15:bc:6d:
df:49:1c:89:93:27:d3:77:a0:59:2a:b2:dd:89:0a:63:48:04:
f6:36:45:5a:72:c0:f3:34:b9:f2:ed:7a:2a:ef:16:de:ab:bd:
10:2f:a7:5f:71:d8:bc:c7:37:38:d9:4a:b0:72:be:4a:6f:36:
24:b3:2e:71:5c:e8:cd:79:36:3c:50:88:f7:56:d7:03:7c:cf:
8c:46:ad:b9:b5:84:c2:36:40:2f:9f:5c:4b:4c:95:66:10:5e:
16:2f:fa:37:8f:96:d1:49:be:5a:72:35:11:5d:35:f1:15:d6:
34:0f:9f:91:1b:1b:b4:e4:df:8a:87:7d:ac:44:1b:e5:4b:2f:
14:bd:81:a6:e6:70:90:a2:68:77:65:ad:b9:fa:66:0f:8e:b5:
fd:d0:ea:c6:7d:39:a8:8b:13:4c:96:5a:03:7f:16:a2:a0:74:
22:eb:fa:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:31:38 2025 by rpki-client