Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1db716c-222c-3803-8508-72889495e094.roa
File: f1db716c-222c-3803-8508-72889495e094.roa (raw, json)
Hash identifier: 23mJdwtRz5fL19YaAiJ4adWlnmbdhQ6eeXRpD98FnO8=
Subject key identifier: D6:3B:42:C1:8A:B5:68:64:BB:18:B6:00:49:DD:FD:11:9F:47:F8:95
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E510AC0DF79F22C71106EE320
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1db716c-222c-3803-8508-72889495e094.roa
Signing time: Mon 20 Jun 2022 12:00:00 +0000
ROA not before: Mon 20 Jun 2022 12:00:00 +0000
ROA not after: Tue 26 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.132.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:51:0a:c0:df:79:f2:2c:71:10:6e:e3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 20 12:00:00 2022 GMT
Not After : Jul 26 04:00:00 2022 GMT
Subject: CN=38cecaeb-5b92-4bd8-b8d7-282d412febdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:26:61:05:f3:1e:58:5e:d6:da:4e:2d:e0:8d:
68:17:12:30:a8:d0:db:74:cf:5e:2a:61:ea:ba:e3:
fc:f5:bf:ce:3c:92:95:5d:b1:ed:9a:83:6d:b1:a6:
d4:a7:f8:bf:cb:87:11:1e:7f:8c:c6:05:17:e1:df:
62:a0:c4:94:e2:ad:76:1a:de:ac:60:ec:39:52:90:
27:9e:a9:d9:9f:eb:55:28:10:72:74:22:88:5e:d1:
2f:a5:14:6d:f5:6c:66:49:47:61:d0:dc:44:c1:94:
23:32:07:78:15:33:32:b2:f6:d8:21:9f:2b:aa:46:
a5:1f:1c:6c:fc:b0:50:70:ea:7d:e8:d9:ad:82:bc:
78:d7:f9:5a:27:1c:04:23:69:9d:b6:00:61:a8:a9:
ba:88:60:83:99:db:cf:cd:05:25:a5:c2:c5:86:3a:
ea:5c:9c:d9:14:a0:87:2c:87:23:8d:c6:af:12:0e:
4a:e6:67:89:fb:cc:00:83:d4:55:ec:4c:c5:eb:6a:
ea:81:78:38:1c:0e:30:35:2e:0a:34:f7:2d:82:1b:
f2:43:22:4e:e1:ed:c0:1c:66:7b:7e:52:bc:dd:b8:
a3:ac:5a:ab:8b:4a:42:da:20:9d:ff:3b:03:db:c7:
4b:c3:14:e0:d1:be:9d:5f:90:16:a0:91:ba:57:2a:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3B:42:C1:8A:B5:68:64:BB:18:B6:00:49:DD:FD:11:9F:47:F8:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1db716c-222c-3803-8508-72889495e094.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.132.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:33:5d:63:59:9e:79:2a:a9:1d:09:4d:a2:22:cf:b0:4f:68:
28:89:46:42:5f:95:8e:2c:14:14:ab:48:39:b1:8b:c3:70:8c:
a8:ae:3a:b7:86:4d:e7:03:ee:9c:74:7d:35:cb:c4:7a:56:f8:
b0:72:be:9e:da:57:01:56:e2:e8:58:f8:f6:d1:ec:d5:2d:b3:
fe:45:53:47:69:50:09:24:ff:da:cc:3c:cf:13:bd:1f:17:06:
b0:17:4c:93:b8:94:53:6f:1f:4b:4f:82:f2:52:9d:8a:11:ff:
c6:59:4f:6b:98:16:6f:02:45:0b:a6:54:29:9a:c0:90:c3:03:
a9:33:0b:44:c1:99:dd:d1:8d:f6:1c:dd:36:34:7e:40:c7:21:
27:f9:e1:57:ed:f7:72:71:ab:ae:b0:7d:a8:21:ad:90:94:a5:
68:57:06:68:91:58:90:ee:38:55:ee:8c:cb:31:36:16:88:90:
ef:87:60:1f:27:d1:4a:8a:56:11:22:9e:d6:2a:1f:63:28:4d:
63:5a:35:86:5a:3c:ad:69:4b:29:32:28:47:17:5f:53:19:59:
68:79:af:c7:c6:19:c0:b0:9f:b2:01:42:c5:9e:a9:5d:0f:05:
01:e0:63:e7:ae:9c:4f:c4:f5:33:2b:6b:4a:a0:5d:7f:99:ef:
93:57:ac:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:54:21 2025 by rpki-client