Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01cad1d9-6388-336f-acea-bdf372dc201f.roa
File: 01cad1d9-6388-336f-acea-bdf372dc201f.roa (raw, json)
Hash identifier: e2JXxFn295AN/lRq+HDfp46XaE/B2ErsgcZobou1Zw4=
Subject key identifier: ED:C8:77:C9:D1:9E:4A:C0:B8:63:80:65:11:93:00:90:4A:B2:8E:4B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CA0E8A8D3F78CB19E61E38D40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01cad1d9-6388-336f-acea-bdf372dc201f.roa
Signing time: Tue 18 Jan 2022 05:00:00 +0000
ROA not before: Tue 18 Jan 2022 05:00:00 +0000
ROA not after: Tue 22 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 136.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a0:e8:a8:d3:f7:8c:b1:9e:61:e3:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 18 05:00:00 2022 GMT
Not After : Feb 22 05:00:00 2022 GMT
Subject: CN=b9e4c8e4-8e6c-4e00-a2cc-c70b34f2086c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:72:c3:ff:ba:a2:e8:5d:9d:cc:7d:b8:bc:
b1:18:70:f9:d8:8f:98:42:9f:55:dc:3a:b7:45:e1:
d1:c5:c6:f6:9c:d1:a0:92:6a:cc:40:c0:d0:ab:fe:
56:71:c1:16:45:ca:6b:09:3f:81:3d:53:c9:fe:d7:
fb:97:b3:15:aa:28:81:de:78:43:2c:5e:a5:d9:de:
3d:ae:11:a1:0b:f0:ca:1b:df:bd:aa:73:2d:c9:23:
4f:ad:93:46:54:c5:f3:5d:c9:07:03:6f:0c:9d:f3:
57:a5:86:26:1e:5b:83:7b:d6:ea:47:59:b7:fd:34:
82:d0:ce:e7:92:5b:6f:d4:0f:ba:85:46:1c:91:8f:
24:2b:5a:4d:7d:48:88:ec:f3:d0:76:cf:fc:2d:d8:
79:fe:de:5a:dc:c3:51:3a:b2:f3:21:bc:98:ac:b7:
43:26:69:68:81:e6:e0:1b:6c:9c:dc:4a:27:1c:80:
2e:6d:4d:80:87:5e:1a:fb:6b:14:68:ab:91:9a:99:
d5:cf:bc:cc:c1:ea:4a:81:dc:69:cb:f7:c5:90:05:
aa:6d:d5:ed:7a:24:60:94:ce:76:12:25:51:aa:1b:
60:37:bf:24:c7:20:7f:07:85:6a:aa:38:42:5f:34:
e1:b6:47:09:01:5e:00:0f:69:35:1c:3f:9f:cf:77:
d2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C8:77:C9:D1:9E:4A:C0:B8:63:80:65:11:93:00:90:4A:B2:8E:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01cad1d9-6388-336f-acea-bdf372dc201f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.136.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:84:4f:64:3b:35:e4:a3:83:0b:dc:cf:c0:88:fc:d9:2d:88:
35:3e:21:ad:a8:20:38:33:96:8a:a6:94:ff:2b:c4:05:85:61:
fa:4a:44:d0:63:43:85:59:27:39:43:60:d3:0a:93:34:40:1f:
36:a4:be:95:13:a7:d3:a7:1c:91:4c:b4:fc:5d:9c:9e:ef:89:
ec:66:17:1b:cd:61:d0:b3:2b:a7:da:6f:54:21:03:34:2b:bc:
14:9c:6d:7f:89:b0:76:c9:15:e6:b2:06:a1:ff:a6:9c:bd:cb:
9b:a9:52:9c:91:09:e2:4f:ea:15:1b:74:2f:18:52:9f:fc:66:
9e:d7:c4:59:73:63:c9:ab:2e:fe:19:37:05:3a:98:dd:27:e1:
ac:75:dd:37:04:4b:9b:f9:ad:6f:f0:d9:76:b4:24:3f:54:7d:
2f:70:fe:8e:e9:56:29:9d:20:27:0b:6f:c3:4a:68:22:27:58:
9b:11:a9:cd:8e:b1:68:50:00:ec:a5:a9:ff:58:cb:f9:b4:bb:
0e:07:ca:08:dd:b7:25:f9:43:aa:fa:22:07:e5:36:55:17:ca:
7a:4b:5b:b7:81:ef:ae:e6:cc:d6:3e:f5:aa:a9:0d:a1:33:a4:
7b:02:1a:e9:c6:f9:b8:9e:98:66:39:2d:c2:0f:f3:12:d1:0f:
fd:1a:8f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:49 2025 by rpki-client