Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fbbfd87f-02a7-39ce-af84-b8e2babe7251.roa
File: fbbfd87f-02a7-39ce-af84-b8e2babe7251.roa (raw, json)
Hash identifier: 93e7nf+7BH0kSl6vJ7FVES2CF7DyNOgsheA1M5bh9xQ=
Subject key identifier: 1E:B8:DE:4C:96:CC:1C:08:08:B4:AA:90:BF:B5:3E:11:59:CA:0D:29
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E9F5B8727989B31075DA7AB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fbbfd87f-02a7-39ce-af84-b8e2babe7251.roa
Signing time: Mon 18 Jul 2022 12:00:00 +0000
ROA not before: Mon 18 Jul 2022 12:00:00 +0000
ROA not after: Tue 23 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:9f:5b:87:27:98:9b:31:07:5d:a7:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 18 12:00:00 2022 GMT
Not After : Aug 23 04:00:00 2022 GMT
Subject: CN=d04aa1d8-21a4-435c-a7ed-a6cb93185232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:ec:8a:b3:6a:05:dd:b3:12:8c:f8:e5:01:
4c:0b:34:ce:82:e6:dc:26:99:1e:5e:c2:c3:c8:98:
b6:3c:de:73:51:0d:bd:f7:fc:01:db:a7:7c:05:e0:
9d:fc:b9:f5:2b:cd:60:cd:54:b4:0c:4f:09:40:41:
b6:12:b8:85:ad:13:82:19:87:be:93:e0:6c:30:49:
e4:dc:c8:14:81:3c:cb:5a:aa:2c:d5:76:d2:c1:10:
30:7e:7a:18:72:c3:8e:a1:34:56:07:47:47:26:5b:
fe:e0:49:1b:44:2a:04:46:f3:29:e8:01:89:27:2d:
81:79:af:0c:0e:87:5d:a1:8f:a4:fe:9e:99:90:fe:
93:6e:51:68:ed:74:8e:a4:4b:4c:ee:08:8b:32:a9:
36:15:15:aa:fc:a0:0a:54:3e:b5:e1:55:0a:eb:54:
71:55:6f:a1:13:da:1a:44:61:60:ec:11:45:09:82:
d1:d7:a2:08:5f:22:35:8d:c9:c2:ea:64:c3:f0:5a:
16:92:fd:c5:c2:05:3e:f6:f8:56:fc:4b:22:4f:db:
a1:61:c1:a4:e3:7f:04:34:fc:17:ae:5e:6e:f5:41:
f9:44:a2:ee:03:56:98:cd:e7:71:43:37:ac:17:c8:
58:b2:7f:82:fa:36:b1:cc:f6:6a:f8:47:26:25:97:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B8:DE:4C:96:CC:1C:08:08:B4:AA:90:BF:B5:3E:11:59:CA:0D:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fbbfd87f-02a7-39ce-af84-b8e2babe7251.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:60:b4:52:20:52:aa:60:95:ca:28:96:d8:8b:04:11:02:5b:
a9:44:c2:ac:49:40:95:95:d7:6f:37:2d:a1:41:3b:fb:2d:ef:
89:b9:73:27:62:11:ef:d9:14:38:52:aa:33:59:4e:65:57:78:
f2:a2:f1:8f:54:2b:e1:f3:eb:58:70:2d:f1:9f:1f:27:68:2d:
72:38:3e:1d:0a:af:d0:c0:69:23:c4:62:15:9f:20:59:80:ff:
07:ff:27:49:9b:ab:ca:44:e9:c0:5f:de:f3:3c:0b:2f:b4:13:
7b:0c:d9:e9:82:76:a0:1e:70:49:fa:0c:56:5b:cd:32:91:d5:
7c:e9:64:1f:c9:58:e6:b3:80:f9:93:f4:a4:f3:a7:16:1d:02:
ca:3a:7e:a4:77:a1:78:52:49:44:65:31:ea:48:01:f0:e2:2d:
9f:8f:3c:6a:10:33:24:e1:b9:b2:8e:52:9b:dd:3e:24:f3:e6:
ca:a7:be:98:3e:77:92:f5:dc:de:00:44:15:bc:58:b1:10:98:
b0:5c:01:be:e9:f7:dd:bb:a4:04:ea:85:38:0e:2a:d5:1c:5f:
2b:a7:6b:f8:02:0c:94:c2:7c:18:0f:11:20:c5:a3:77:b5:ac:
a5:15:97:56:25:c0:29:c5:5b:56:53:c0:e0:bb:49:c7:f0:4e:
79:f1:2c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:54 2025 by rpki-client