Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ec5c7da3-0b26-36f0-be88-c7a3c0228525.roa
File: ec5c7da3-0b26-36f0-be88-c7a3c0228525.roa (raw, json)
Hash identifier: gSisPgBDlnuq2CXpGCNRNZypRTfortlgbsvGJ3+JDZs=
Subject key identifier: E6:84:AE:57:11:80:C8:50:C5:D5:C2:CA:5E:C9:DC:8A:AA:FD:CD:2C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D3D5C6F558DA5EB09F3848680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ec5c7da3-0b26-36f0-be88-c7a3c0228525.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 19 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.132.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3d:5c:6f:55:8d:a5:eb:09:f3:84:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Apr 19 04:00:00 2022 GMT
Subject: CN=a0cdcfca-3659-4e99-87f7-2cd4a7742778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:fe:74:2e:7c:f6:be:18:31:e6:07:83:ff:
b2:bc:10:dc:29:a5:3b:4a:fd:c4:35:ca:63:3f:6c:
7d:fa:60:de:0f:72:6e:12:01:b2:b5:81:08:a6:5e:
40:35:85:21:ed:ac:99:b7:8b:55:52:d2:b9:d1:6b:
60:9f:d2:ca:b1:3d:bb:d1:9f:4f:0e:73:ed:ac:83:
26:ee:94:3c:57:94:34:8a:fb:cb:44:dd:2c:a8:ab:
14:60:e7:90:33:f8:e6:80:8d:10:96:6e:21:da:70:
04:ba:e7:60:a6:e6:eb:cc:c0:16:4e:5a:2e:59:5d:
de:36:7f:e8:49:dc:ca:16:94:d0:40:e2:37:9e:9f:
e1:4b:92:0b:63:6b:34:ec:b3:e5:97:cc:ae:f8:f6:
d1:c3:b5:cd:35:fe:a1:6b:00:c2:59:b6:4f:67:a6:
09:55:9f:4a:6b:75:e0:ac:67:4e:16:6a:26:54:5b:
2c:dd:82:ac:01:18:b5:0a:e1:2b:42:6a:47:8e:1c:
1d:cf:ad:45:0c:db:d6:54:2c:5a:2a:b3:99:30:b6:
24:cb:82:8a:f7:91:12:08:2c:6f:a2:c6:ae:21:af:
7a:34:e1:72:68:e2:fe:fd:b1:bb:d5:04:47:e4:2b:
63:49:a7:4e:a6:32:09:ee:3f:52:bb:be:1e:c5:25:
ef:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:84:AE:57:11:80:C8:50:C5:D5:C2:CA:5E:C9:DC:8A:AA:FD:CD:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ec5c7da3-0b26-36f0-be88-c7a3c0228525.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.132.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:ac:e5:4d:f8:8b:a8:6e:14:03:67:65:de:ad:8b:52:bc:e5:
62:15:4a:e1:42:88:db:27:b0:f6:0d:1e:37:13:49:ec:73:2c:
fd:5d:22:88:cb:d3:f2:8a:83:95:32:17:5b:88:ea:aa:07:f0:
0c:10:fa:11:f7:5e:59:89:72:15:61:71:e5:67:ec:04:51:68:
0e:ce:17:16:9b:33:41:75:df:02:f4:c1:81:d5:97:39:26:bc:
3a:5b:18:28:ef:2e:6d:78:a8:39:83:4a:34:e6:63:85:8a:4c:
74:59:50:4e:31:d9:19:12:7f:5d:2f:46:05:64:6f:5e:70:ce:
6e:6c:25:d5:01:fd:ce:72:3e:7f:f3:36:57:3a:99:05:ff:90:
c9:c3:ae:81:01:e8:87:50:c7:db:67:af:ee:f9:93:de:28:9f:
b8:c7:c6:c8:bb:e5:79:34:d1:fd:08:65:c7:8c:e1:f4:34:bc:
4b:dc:3f:75:9c:1d:1c:0e:7b:a1:df:8d:bf:ac:da:ba:c2:bd:
03:23:27:6c:de:68:22:c1:ad:55:2f:cb:f5:67:28:29:e8:f7:
0e:1b:f2:45:7d:76:a2:53:7f:d2:f9:44:22:c2:9f:e6:86:ce:
c9:97:70:0f:b5:bc:a7:b3:00:6e:ad:ab:9c:ed:1f:49:48:19:
47:2e:0b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:50 2025 by rpki-client