Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/faf2d9a6-be02-3d99-8a2e-eaa31d436809.roa
File: faf2d9a6-be02-3d99-8a2e-eaa31d436809.roa (raw, json)
Hash identifier: rFhUqFT71+wUvbTiuFzkj269+pVpUq/OgThTQqH2Mng=
Subject key identifier: 9F:32:19:73:7D:BE:95:F7:49:D9:C8:B6:9E:DC:D3:87:32:CD:28:E9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D8B95FF42A908C5C691B99200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/faf2d9a6-be02-3d99-8a2e-eaa31d436809.roa
Signing time: Tue 12 Apr 2022 04:00:00 +0000
ROA not before: Tue 12 Apr 2022 04:00:00 +0000
ROA not after: Tue 17 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.13.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:8b:95:ff:42:a9:08:c5:c6:91:b9:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 12 04:00:00 2022 GMT
Not After : May 17 04:00:00 2022 GMT
Subject: CN=ca118749-346e-4b84-8969-965dbc867542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:02:19:c7:fe:e7:2e:35:5b:6d:dd:73:33:c0:
60:e6:bc:91:ae:1b:75:b8:b9:64:9e:26:a5:74:46:
fa:bb:e0:c4:f2:85:c7:9c:f0:df:97:60:bd:7e:28:
57:0b:38:20:69:aa:cf:07:69:e9:bf:bc:9a:14:3c:
d4:f7:43:5b:90:bf:c9:2b:09:10:5f:e7:1e:2b:30:
49:d1:44:66:cf:87:54:b4:50:e4:79:eb:9a:e5:c7:
7e:98:c0:db:e5:d9:f2:7f:09:de:83:42:56:9a:a3:
d6:da:9d:fc:ae:f3:72:59:9f:ad:19:fe:7a:0e:d5:
d5:31:b6:a2:a8:42:c3:be:93:77:6f:9b:ad:e2:58:
26:f4:38:15:24:cc:7d:a0:bd:26:bf:d7:cc:83:76:
9d:20:4c:94:8d:d8:d3:4c:5a:c4:04:1a:95:7d:8c:
12:a7:9e:e3:00:9a:bf:2a:9f:a4:82:e4:c4:79:92:
09:ea:6a:00:30:9f:15:8d:bb:e7:5e:2c:95:1f:fd:
c2:fc:f9:08:1d:e0:9c:d0:39:1c:5b:e4:7c:21:29:
5c:48:84:82:d2:ba:68:ab:cf:f9:f5:1b:28:37:7a:
e5:f6:0a:f4:2b:cd:b7:48:e2:b6:b7:a6:7a:e7:05:
69:81:91:4c:6b:18:91:02:27:27:7d:64:15:93:ce:
71:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:32:19:73:7D:BE:95:F7:49:D9:C8:B6:9E:DC:D3:87:32:CD:28:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/faf2d9a6-be02-3d99-8a2e-eaa31d436809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.13.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:9a:4d:ce:53:75:f8:f9:ad:7d:d3:18:e6:7d:90:23:4a:43:
a2:64:54:bf:1a:25:86:f5:61:4e:e8:ce:92:16:20:eb:af:ea:
40:f5:e4:c4:57:7e:78:84:79:8f:cb:76:6d:21:79:f7:94:14:
3f:c8:63:f9:81:bc:a7:05:86:eb:22:cb:2e:82:91:f0:22:d2:
07:f8:bb:bf:b4:0b:9d:8e:02:79:e6:d3:43:cc:ed:92:fa:de:
c2:3b:0d:ea:ce:af:6f:ad:af:79:69:06:eb:81:69:5d:ad:6b:
67:29:1b:0a:72:43:d6:fd:8b:35:78:04:74:71:c0:1d:ab:16:
6a:63:ff:c7:d0:62:49:9f:33:d1:11:4c:1a:fd:e0:ef:96:71:
60:c5:88:a6:65:15:33:d3:80:bb:dd:77:4c:06:5a:19:5a:18:
f6:ed:ef:dc:ff:cb:73:03:80:95:a7:da:ed:b3:db:45:4f:8d:
d3:1d:71:40:e9:6c:de:b6:18:fb:51:2c:ad:30:e7:ba:4c:a0:
52:fa:68:ca:48:49:ca:05:00:a9:e4:6e:05:1a:2d:7c:81:c7:
0e:f3:7e:b0:16:b5:b6:8b:19:d7:47:a1:71:93:07:cf:c6:52:
a2:0d:ac:aa:bd:e8:de:2a:57:fa:15:dc:db:b7:68:0b:4d:c1:
6a:8d:d1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:12:12 2025 by rpki-client