Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/095b2253-2ed3-3b96-834d-ddc237912c66.roa
File: 095b2253-2ed3-3b96-834d-ddc237912c66.roa (raw, json)
Hash identifier: dZx8GSxYVrbndnqw5TFOAOEufH7zeVDY0Cu2rSPaLfw=
Subject key identifier: E3:5C:77:5A:02:45:D7:0F:96:C3:67:5D:A4:EC:36:EF:55:67:7B:38
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404BB6A927EFE6575F9DA1E800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/095b2253-2ed3-3b96-834d-ddc237912c66.roa
Signing time: Mon 19 Dec 2022 12:00:00 +0000
ROA not before: Mon 19 Dec 2022 12:00:00 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 136.132.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4b:b6:a9:27:ef:e6:57:5f:9d:a1:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 19 12:00:00 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=f6f2cdf4-07a9-4e49-be81-52a7a6d2bde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:56:5d:6c:83:41:88:be:00:68:10:cd:d7:
22:50:a6:c1:8b:01:f1:b6:11:5f:05:8b:a5:8f:7c:
f6:d6:72:fd:31:71:f0:36:e9:fa:88:e2:1e:55:72:
4f:50:b5:b0:44:3b:cd:c5:34:ff:93:23:ac:62:08:
cd:05:50:e0:88:a8:66:e6:fb:f8:78:d6:29:97:c6:
90:7d:35:1a:6a:0c:4a:71:36:c8:f1:70:6a:f2:5f:
5d:4a:80:10:38:f4:b6:33:f4:76:cf:3c:7b:6c:40:
17:b8:58:c4:c8:a4:38:68:73:67:c1:b7:05:1d:1a:
fb:50:5a:32:70:5f:17:77:9e:57:84:cf:f9:c2:f7:
a2:33:09:ae:98:fe:43:7c:16:b0:ff:73:19:4b:b7:
dc:27:d1:4f:78:81:a5:e8:37:dd:53:ea:df:dc:37:
8e:5f:68:db:d3:00:58:6d:ff:b0:00:c3:4d:2c:b7:
fb:9f:6c:97:96:64:3e:7e:c1:f8:e2:d6:4a:0a:db:
49:11:4f:ec:3c:77:f0:c3:bc:24:92:08:e4:54:53:
16:6f:47:29:ef:44:9c:47:6a:85:53:da:6a:20:72:
a2:af:65:15:83:85:66:71:10:69:fc:22:0d:a0:f1:
79:98:0c:c9:6b:1f:e0:1b:4a:c5:37:a3:c0:bf:61:
9b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5C:77:5A:02:45:D7:0F:96:C3:67:5D:A4:EC:36:EF:55:67:7B:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/095b2253-2ed3-3b96-834d-ddc237912c66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.132.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:23:fd:15:5b:2f:6c:2c:85:b8:1e:75:62:26:d9:db:92:dd:
fa:3d:67:e2:1b:0b:26:64:7c:5a:87:ef:dd:cc:97:c1:20:63:
6b:0f:be:2e:33:f1:54:05:4e:ac:8f:8f:69:db:23:6e:05:79:
0c:5f:e0:be:35:12:9f:85:61:8b:80:01:6a:54:fb:ba:3f:9c:
3b:08:5a:82:08:3c:57:29:c0:f2:f8:5d:e2:2a:dd:d6:a8:69:
f8:eb:fe:03:93:f8:02:9f:45:09:04:e9:1b:93:2d:4e:7a:27:
69:6c:f5:f4:b6:9f:07:23:4f:f4:52:e2:c4:4c:03:7b:58:57:
99:00:36:7f:0a:c7:4a:34:ee:9b:fe:61:58:de:c5:80:77:e2:
28:3e:a7:9a:dc:32:45:a9:47:28:c8:76:76:bf:bd:1f:8e:8b:
8e:11:f3:00:87:68:42:4b:29:b3:4f:aa:1e:d0:07:72:4d:11:
df:6e:92:74:9f:49:9b:79:bc:06:0d:ec:f5:ef:dc:0d:ff:0f:
f5:eb:3e:72:7f:fd:1d:b9:e4:2d:43:e1:2b:0b:60:a0:9d:ba:
e2:47:d5:6e:00:42:2c:8d:1e:d9:e9:91:3e:40:87:6a:1e:65:
75:00:b3:59:a6:34:1d:71:70:56:cf:48:92:aa:1a:1a:3f:70:
8e:b3:ca:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:20:28 2025 by rpki-client