Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ffadaa89-f9ad-3e07-9a22-afda1ad2864e.roa
File: ffadaa89-f9ad-3e07-9a22-afda1ad2864e.roa (raw, json)
Hash identifier: ik8QbKCXALtmq3ngtXtjFXA0bNlcoouq6Ol0IfF/VBI=
Subject key identifier: 0A:48:5E:F2:12:C9:19:32:06:64:31:5E:77:27:9B:8A:66:B2:E0:7C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840C0CA839BA226F6CCDD8A29C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ffadaa89-f9ad-3e07-9a22-afda1ad2864e.roa
Signing time: Mon 30 Jan 2023 12:00:00 +0000
ROA not before: Mon 30 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 136.20.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c0:ca:83:9b:a2:26:f6:cc:dd:8a:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 30 12:00:00 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=0cdcc7c2-5382-40d0-b9d9-a47a8971bfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:9e:5b:14:bd:81:6f:22:5b:c4:e5:1a:24:
a0:c2:9e:da:0d:1f:17:4b:9f:e0:b7:7a:e5:e9:e7:
a4:6d:5f:22:0a:66:2b:81:69:58:fd:33:36:b5:5a:
30:1b:d6:d4:65:70:2c:b4:eb:40:60:a8:97:20:48:
4b:86:e9:1c:2b:4c:5d:4f:04:7b:d8:a0:2c:87:7f:
e3:e5:00:85:10:ab:c0:f1:68:10:af:70:99:d5:55:
1e:c8:3e:df:21:87:36:14:20:72:b3:7b:56:9b:bb:
7b:12:08:8d:95:bd:fd:99:0c:dd:7d:70:f8:01:01:
3f:df:93:a8:08:19:ac:a6:ce:21:fc:9c:6b:3b:97:
ce:2b:42:d7:28:56:2e:38:71:c7:a4:93:8f:1a:6f:
00:17:0e:d3:f0:d7:50:e6:db:d9:4a:8a:1b:73:43:
4b:fa:40:97:69:62:0c:88:f5:e1:33:9c:f7:d9:09:
90:99:81:e5:b6:c1:ac:2e:be:9e:01:45:2c:a1:c2:
5c:b1:74:9e:c7:4a:d6:b8:8f:25:96:1e:c2:b4:48:
a3:7a:4f:a4:b0:40:d3:b8:2b:40:c0:5d:82:57:5e:
9b:3d:5b:96:f2:d2:05:ef:ed:02:8e:40:56:a2:2b:
5a:c4:fc:16:38:4c:dd:73:71:8a:11:03:a6:e6:84:
58:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:48:5E:F2:12:C9:19:32:06:64:31:5E:77:27:9B:8A:66:B2:E0:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ffadaa89-f9ad-3e07-9a22-afda1ad2864e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.20.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:92:f1:2d:2b:0f:51:64:bb:f2:55:f5:67:b0:8f:57:9b:b3:
41:a3:4e:d4:bb:50:25:6e:fb:19:a1:4d:65:14:6a:50:5e:05:
69:a1:fe:68:56:bf:21:83:0f:33:7a:01:1e:0d:10:8c:ae:23:
f4:e4:be:0b:d8:ff:dd:23:e4:e4:50:74:82:e5:df:3f:a8:e8:
08:f1:20:3f:80:60:ba:42:22:93:9e:f6:67:d0:cf:1b:41:3b:
67:23:e7:4b:a5:e3:5b:71:03:54:bc:a6:3d:13:c4:90:82:35:
33:f8:d9:8f:cc:a1:44:65:87:6d:f6:a8:95:b1:54:ea:88:e3:
78:14:23:d1:bf:46:7f:e5:97:08:20:44:3c:79:66:0f:fa:96:
18:d2:0e:b1:50:b0:b0:dd:e0:17:e8:ee:e2:25:e6:85:2f:e1:
cb:5c:4c:cf:c1:82:9f:30:31:e8:66:aa:00:1e:bf:81:e2:27:
a3:e7:6a:d3:7c:a4:fb:e5:2e:58:9d:d6:78:f2:ef:6a:47:90:
d9:ac:e9:55:a3:9f:bf:7c:f7:ab:62:5f:cc:2b:f7:e9:08:fe:
fc:a2:1f:eb:f4:72:0c:0e:5a:fd:23:c9:ab:2d:d2:03:b8:6a:
2a:29:6f:2d:11:41:bf:7e:0a:31:a5:51:f1:3a:94:6f:9c:a8:
15:9b:7d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:56 2025 by rpki-client