Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f4a38b99-de57-3479-8c28-874d305243ec.roa
File: f4a38b99-de57-3479-8c28-874d305243ec.roa (raw, json)
Hash identifier: tabCAxCA8Ttr2SWaJytABp7hdUZ1uELmSSBiZb/NTmw=
Subject key identifier: 77:66:C8:2A:24:38:28:FA:37:0F:8F:86:80:74:FE:79:C1:73:34:62
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D163F148E4D4F8271A48B0840
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f4a38b99-de57-3479-8c28-874d305243ec.roa
Signing time: Tue 01 Mar 2022 05:00:00 +0000
ROA not before: Tue 01 Mar 2022 05:00:00 +0000
ROA not after: Tue 05 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.13.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:16:3f:14:8e:4d:4f:82:71:a4:8b:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 1 05:00:00 2022 GMT
Not After : Apr 5 04:00:00 2022 GMT
Subject: CN=995b8203-fbd1-4538-b1e0-7993c950c8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:00:0c:fa:d8:36:5b:f7:c4:ea:4a:0c:88:
6f:a3:c8:fd:a7:42:df:e3:5a:e9:b8:ff:80:4d:d2:
27:0e:08:0c:cc:4d:a9:68:c6:f0:19:38:c9:a1:51:
a7:93:02:e9:57:de:e1:02:d3:5f:01:53:7f:6d:a6:
3d:34:84:df:1c:a6:5a:39:a3:05:2e:d1:d2:f7:1b:
a7:be:8a:a1:c8:9d:19:9a:12:bb:51:ed:42:4a:28:
e0:27:67:ea:a8:6c:31:98:31:cf:bb:96:a1:61:bc:
66:e9:c5:cd:78:72:df:87:da:fe:d2:22:af:75:c7:
b5:c9:70:af:70:09:62:be:bd:de:b5:4e:08:4c:ba:
f9:d4:48:65:c2:8c:56:72:46:d4:f2:14:35:e6:c5:
fb:59:6f:49:cd:a3:1c:58:3e:2e:7e:ed:1a:98:56:
55:5c:b9:fe:41:33:5f:c4:14:2d:9b:bc:2b:7b:06:
4a:fb:22:06:cb:db:46:5c:f9:ec:3f:b2:7e:ed:cb:
ee:20:af:84:c3:55:92:06:d2:e6:de:8f:45:6d:42:
e8:68:d0:19:eb:6e:9d:ba:87:91:35:17:bd:33:c4:
7a:14:4c:b5:ba:a1:33:70:53:14:fc:b6:f1:87:c2:
06:48:ba:da:77:24:e6:9b:40:b6:4d:5f:27:db:d8:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:66:C8:2A:24:38:28:FA:37:0F:8F:86:80:74:FE:79:C1:73:34:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f4a38b99-de57-3479-8c28-874d305243ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.13.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:f9:5e:3f:99:28:81:45:da:81:be:fa:f5:a9:89:0f:ae:6f:
f9:32:5d:95:3c:31:e4:96:d2:0d:28:1c:cc:fd:1c:a4:ab:59:
bb:62:65:83:e4:55:10:ff:00:20:c7:3e:64:4e:34:22:6c:27:
67:b2:2f:94:61:5c:a8:b4:61:c9:a7:be:1d:a1:85:a9:3c:15:
95:ec:3d:42:2a:1f:41:ac:35:20:d3:5f:4c:02:ce:5e:7e:b0:
71:01:87:e4:5c:65:54:29:5f:2e:19:fd:6b:13:13:37:04:1b:
82:e2:95:4e:fd:6a:cf:eb:02:d1:fa:98:d9:3e:46:38:88:5e:
0c:aa:ea:40:b5:d2:ba:fb:42:e3:78:1e:9b:f2:2b:c6:f0:44:
62:11:a4:2a:22:b2:2a:26:22:31:a7:b3:f0:d2:09:cb:fe:a4:
57:b6:6c:81:d2:a8:17:ca:a4:d4:72:24:e0:9e:38:32:36:5f:
51:3b:74:02:eb:9b:29:4e:31:90:4b:f6:18:2f:83:bc:b0:26:
be:7d:94:f1:f2:99:73:3f:d2:05:43:df:9d:b4:14:ec:38:ff:
2f:7d:c3:aa:6a:09:d8:32:b7:3a:5a:87:3d:65:6d:fa:2e:bb:
13:23:ab:48:f5:96:eb:e0:1e:cc:3f:ea:b4:40:f0:49:68:8f:
1b:75:30:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:41:50 2025 by rpki-client