Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/edf60a76-7b75-388f-9efc-b721a1ac5208.roa
File: edf60a76-7b75-388f-9efc-b721a1ac5208.roa (raw, json)
Hash identifier: DqisZbaS3MgsTVBwfAEpe04zicDHdkImBbfNMoOT0m4=
Subject key identifier: 3A:50:97:CF:85:6E:AA:36:44:BE:60:14:C6:2B:85:58:11:0B:4A:B1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F1B69F166722621836B0445C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/edf60a76-7b75-388f-9efc-b721a1ac5208.roa
Signing time: Thu 01 Sep 2022 12:00:00 +0000
ROA not before: Thu 01 Sep 2022 12:00:00 +0000
ROA not after: Fri 07 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.12.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:1b:69:f1:66:72:26:21:83:6b:04:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 1 12:00:00 2022 GMT
Not After : Oct 7 04:00:00 2022 GMT
Subject: CN=05ff20ad-f691-4040-9bd6-5285324cf225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:34:92:67:d6:e7:65:9a:45:76:91:4b:a6:
66:26:1e:a2:64:91:e2:5a:24:63:00:c3:4a:fb:aa:
9b:83:31:82:2a:46:f2:c8:ef:c1:29:26:f6:2a:9c:
83:7a:bc:7f:65:da:9b:61:d8:6d:67:51:81:15:58:
c8:ee:80:f0:82:d0:8d:ca:c6:53:12:98:ca:2f:66:
c1:7f:71:db:d3:d1:5e:63:7a:2a:2c:e6:d8:74:ec:
50:7a:b0:91:7d:44:29:36:49:26:65:8c:0f:6d:a7:
63:5a:16:bc:c6:1c:f5:8f:11:84:44:59:c4:d6:cb:
73:d9:e2:77:27:59:c1:51:6c:b2:69:9d:ca:09:fc:
c4:e9:31:96:5c:75:65:d4:83:40:e0:7c:3e:82:bc:
27:d5:9f:70:55:09:21:e7:d2:a1:98:ed:39:67:51:
6a:31:fa:4f:64:50:fc:cc:9d:43:e4:bd:58:6d:c3:
2e:68:fe:67:ef:4a:e1:0a:3b:b9:e8:ee:9b:36:71:
7c:a7:d2:ef:86:7a:30:31:85:68:0b:fe:51:42:32:
d4:12:9b:6c:b2:63:5a:14:12:74:35:38:1a:65:28:
71:04:11:74:ca:b8:65:2b:82:54:f7:4a:ae:a9:83:
82:40:ea:e0:d0:21:36:eb:5d:d0:c2:e8:a1:30:76:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:50:97:CF:85:6E:AA:36:44:BE:60:14:C6:2B:85:58:11:0B:4A:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/edf60a76-7b75-388f-9efc-b721a1ac5208.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.12.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:6a:a3:cc:c1:13:48:5e:83:fa:8a:0c:18:99:1d:45:12:df:
58:e2:1f:a8:55:59:cd:e7:6f:ee:9b:4a:bf:7c:eb:31:37:ea:
91:f6:39:fc:ce:0f:12:c3:89:52:38:a9:11:56:98:32:74:22:
2b:04:f8:a6:4f:db:ac:8c:5f:a5:be:32:a3:ee:5b:c9:c3:1d:
72:36:4b:3c:b4:07:ae:57:1a:f6:f7:5d:43:2c:af:54:31:f7:
b4:73:1d:fa:d7:3f:f1:cc:ce:01:20:75:d3:e5:c8:95:e9:80:
34:38:12:3c:e2:53:ed:ac:95:c8:53:31:3b:1c:45:01:70:f8:
6b:a6:60:3a:b1:c6:5d:db:55:e3:a9:f9:6a:7d:d8:8e:78:ac:
19:5d:ac:a5:0a:87:60:a9:fd:df:b9:50:15:e9:87:d7:ed:f1:
55:ac:9f:44:a9:e7:ed:64:b1:6c:83:41:6e:8d:2c:46:aa:57:
b4:1b:d4:dc:e6:33:02:2b:69:22:fc:0e:5e:21:f9:fc:27:3b:
89:0d:6e:b2:5d:0f:bd:fc:11:d2:bd:31:dd:d9:45:ea:c7:d2:
03:39:65:be:f8:17:86:8d:f8:8b:3a:e6:8a:8d:43:e1:bd:28:
73:63:6c:cf:84:23:a0:91:3a:fa:97:94:96:c7:4a:47:f9:c5:
7d:ac:ad:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:08 2025 by rpki-client