Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07ff1ad0-8ca2-31bf-a0a4-3e87804ac889.roa
File: 07ff1ad0-8ca2-31bf-a0a4-3e87804ac889.roa (raw, json)
Hash identifier: gOrlZ0t8v5xuIVWoRCkoIAWDJaDyJMguCvj81PggwrY=
Subject key identifier: 00:55:37:A0:C3:B9:79:DB:C5:26:E7:A1:55:05:27:B0:BB:68:69:E0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DDBC2D476E57F9738C32EB940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07ff1ad0-8ca2-31bf-a0a4-3e87804ac889.roa
Signing time: Mon 09 May 2022 12:00:00 +0000
ROA not before: Mon 09 May 2022 12:00:00 +0000
ROA not after: Tue 14 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.140.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:db:c2:d4:76:e5:7f:97:38:c3:2e:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 9 12:00:00 2022 GMT
Not After : Jun 14 04:00:00 2022 GMT
Subject: CN=b6affc89-1eb0-41c9-acf0-61c73602f720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:58:37:29:47:29:f2:4d:45:e8:4e:f6:a7:67:
45:c9:27:ad:53:b6:5b:26:64:7c:02:58:4e:15:b5:
3a:3d:f8:45:27:8d:13:b4:cc:54:bb:2b:e0:61:9f:
99:d8:4a:53:8a:83:4d:c8:19:5e:27:fa:c6:27:ad:
bb:75:15:e0:cf:e0:f7:17:74:49:6f:60:c2:54:89:
6c:42:71:95:4d:88:77:bd:ac:00:85:fa:24:52:44:
74:ea:c7:98:ee:22:72:0f:34:c4:2d:ec:ed:99:74:
19:a8:9e:61:cd:c8:92:a2:b2:15:a2:dc:7e:ab:13:
d2:14:ed:26:27:4a:4f:ac:9f:23:5e:aa:0e:4a:94:
a7:ed:00:87:f5:16:dc:62:82:5a:af:63:95:32:c4:
63:13:8c:7e:a7:14:18:44:2e:b1:92:d0:41:f4:be:
6a:e3:be:44:8b:e4:52:9a:66:2f:b5:07:f8:17:21:
c8:dd:db:c4:b1:6b:83:78:0f:c7:c3:7a:00:6a:3e:
23:25:77:38:15:5c:7d:d9:3b:59:f6:df:2f:46:8e:
d1:12:86:90:b5:83:5b:35:6c:f4:3c:b1:77:bf:ea:
1e:96:cc:4c:45:32:5c:f3:f5:6c:05:10:5f:b0:0a:
79:95:c4:8d:ff:df:f4:87:3b:e7:c2:6d:66:0e:db:
24:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:55:37:A0:C3:B9:79:DB:C5:26:E7:A1:55:05:27:B0:BB:68:69:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07ff1ad0-8ca2-31bf-a0a4-3e87804ac889.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.140.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:6f:3e:67:cf:3c:58:63:55:4b:4e:79:4d:97:a3:11:d9:37:
38:b9:56:5a:5b:4b:fc:62:10:df:86:f1:51:12:b7:20:a8:86:
ee:af:d0:6f:c9:20:07:47:f9:76:2a:3d:c4:3b:5c:c7:2b:4b:
09:14:0a:6d:ec:8b:07:83:78:6f:13:34:91:1a:f4:98:59:bc:
25:84:0c:e9:ed:18:72:8b:ee:f0:d2:44:0e:6e:c7:24:0f:47:
c3:33:67:82:3f:60:49:7a:fa:f2:68:5d:b2:1f:b6:82:16:14:
59:5a:8a:93:75:69:a4:24:81:b5:95:39:a0:eb:19:65:73:09:
43:72:2f:cd:2e:68:18:8a:93:ea:f4:d6:10:24:27:d4:29:1a:
26:81:5e:27:8d:71:dd:a0:08:00:1c:64:7b:84:27:9d:a3:7f:
dc:8c:b2:4d:7c:db:e1:1c:7e:25:a9:b3:33:f0:ce:e5:e5:de:
a2:c0:74:61:e2:06:49:a0:35:ba:2a:a7:df:f0:82:98:7a:31:
4c:fc:4d:af:d8:38:f1:0d:11:e6:e8:46:9f:4a:e5:bb:a8:84:
94:ed:3c:75:8b:8c:7d:7b:dc:8b:e1:2a:bb:12:71:89:18:8f:
8c:d1:f8:78:2e:08:b6:77:78:cc:ec:73:de:11:01:ae:e3:ca:
24:6e:41:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:58 2025 by rpki-client