Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ec19821b-b0d3-3e31-9662-fd1d5f5f1e79.roa
File: ec19821b-b0d3-3e31-9662-fd1d5f5f1e79.roa (raw, json)
Hash identifier: mxIfivQOnanlDks7xUemcIOxZs5VL36TfNwY0u4YCa0=
Subject key identifier: 22:FE:C0:24:C4:F8:E8:C6:5F:E5:E5:08:2A:C6:7D:47:83:AE:AF:AF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584099D2C7652905128C39145ED0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ec19821b-b0d3-3e31-9662-fd1d5f5f1e79.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.3.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:99:d2:c7:65:29:05:12:8c:39:14:5e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=bd4b0d41-6a18-4da6-85c9-bba017f4bbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:26:27:60:dd:06:fe:a8:92:c0:3e:bb:d5:36:
56:c4:c6:52:52:d9:d2:36:1c:6b:03:79:d6:c6:73:
77:5c:cc:e8:87:09:83:68:bf:de:8c:ff:26:dd:42:
36:29:b0:cf:00:38:46:9c:75:58:f1:41:68:4b:62:
d4:6d:0b:fc:22:ee:07:52:00:3c:f7:b4:44:db:fb:
86:6d:8e:0a:f8:49:08:88:46:30:06:a9:e0:94:b7:
ed:35:b8:a5:73:00:dd:07:b2:3c:9c:8b:eb:8e:37:
c6:d6:dc:74:e1:09:13:6b:4b:fe:df:e3:db:a9:1f:
ff:33:8b:c4:0f:09:59:45:00:24:f7:24:3c:8e:24:
32:06:91:87:c8:08:21:89:54:2a:0f:5b:94:51:82:
43:0a:84:e9:a9:46:93:2a:95:9b:8b:19:b9:88:61:
f9:43:7d:f9:7a:04:20:cc:5b:a8:39:39:9e:eb:61:
4b:da:16:30:57:ca:67:97:53:d5:7c:94:c5:e6:fa:
c4:64:1c:63:55:2b:fe:a7:f1:89:ec:ac:23:b1:a7:
25:8a:ca:36:2e:78:47:34:e7:dd:ea:fc:02:59:73:
03:9f:5d:77:ec:0d:e9:a2:cb:73:5e:74:11:51:ba:
08:36:43:37:db:0c:29:7a:42:4e:06:e4:d1:6e:5e:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FE:C0:24:C4:F8:E8:C6:5F:E5:E5:08:2A:C6:7D:47:83:AE:AF:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ec19821b-b0d3-3e31-9662-fd1d5f5f1e79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.3.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:c4:a7:d5:88:fb:e0:70:5c:9a:bf:cf:1f:44:70:f2:58:48:
01:ae:07:34:56:c5:1e:e1:89:98:5c:d1:8b:63:e4:59:77:1e:
c6:8c:79:1e:04:ae:54:b5:ca:20:ee:ed:e5:44:ee:75:80:e7:
b6:4f:c2:aa:95:ee:15:99:ec:3c:f9:e4:6b:c6:1f:a7:f0:db:
c0:40:7a:9e:c4:18:96:5a:1a:95:53:18:09:ad:1a:df:dc:9d:
13:fc:02:52:1b:26:32:fa:2c:c2:d3:2b:02:ed:e8:1d:a0:b9:
95:04:a9:fe:5c:20:d8:5d:1c:bb:ab:8e:a7:53:4f:8e:a7:2b:
f4:10:5a:8c:cf:f9:5f:79:ed:cc:4f:b4:d2:36:eb:fd:f7:73:
9a:04:f1:9a:20:92:28:ed:3f:b2:18:66:6d:fe:1b:2f:69:e2:
3f:cb:00:4c:96:71:d7:61:b7:b3:d7:57:54:54:08:31:f5:f7:
02:70:9f:32:d9:36:f3:d7:fe:95:2a:d6:c4:17:21:55:8a:10:
2d:f3:c2:a4:8c:2b:92:fe:dc:d2:fc:fe:41:1a:8d:ae:7f:67:
f1:ee:9b:32:4a:4f:95:83:2a:10:d1:06:ff:9e:ab:56:07:c8:
37:94:ae:a3:83:0b:96:59:4c:8f:30:0e:88:a3:dc:ee:48:a2:
71:e1:a0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:42:59 2025 by rpki-client