Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2132ea8c-f356-304d-b6b3-78ea8683488d.roa
File: 2132ea8c-f356-304d-b6b3-78ea8683488d.roa (raw, json)
Hash identifier: oPGzRoKPDu+pkWCapuuNAUtjJUZRKyGZ6C61g6XhxBk=
Subject key identifier: 1D:43:18:8D:44:E0:1A:AA:0B:DA:3A:30:71:92:C0:AD:D5:A0:F5:B0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584099B4F0991730733A92572AC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2132ea8c-f356-304d-b6b3-78ea8683488d.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 136.20.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:99:b4:f0:99:17:30:73:3a:92:57:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=d4e9209a-018b-4cbb-9990-f30169837dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:11:74:02:e4:63:10:ef:51:33:18:68:dc:46:
c7:f3:9e:ad:c4:5f:21:1d:59:a6:71:73:c4:e0:ab:
e1:84:65:91:4b:aa:e4:39:61:e6:c2:9c:ba:a6:dc:
61:60:11:7e:ae:90:cb:6c:06:df:eb:c3:17:f1:0c:
41:99:2a:9b:8a:3e:9e:34:33:a7:d7:07:df:33:58:
1c:4a:5c:e0:92:4a:b9:64:dc:a2:3c:78:8f:eb:9f:
28:bc:17:0f:e7:0c:b2:b4:07:38:d1:4f:c5:2c:65:
46:e6:61:8d:e0:c5:c2:ee:62:ee:08:58:ba:46:8b:
c3:4a:eb:2c:ed:72:1a:d2:3e:68:ae:79:cf:57:18:
5c:95:0d:c8:0c:88:d8:5a:49:16:21:54:ad:14:0f:
cf:be:dd:e2:6d:00:4f:87:43:12:29:2f:84:6c:93:
1c:b5:0c:bd:df:96:d3:b7:c6:53:91:bd:61:67:f3:
a6:47:ae:89:fc:69:cd:91:da:be:fb:a4:bc:58:52:
5c:d5:7e:e4:8f:e8:e5:d6:e6:fa:5c:da:bc:7e:57:
3c:80:dd:8a:7c:c2:c7:05:2d:9a:2a:91:c2:80:49:
aa:4c:a7:0c:41:29:c0:4d:ac:34:da:d6:81:bb:14:
93:96:20:57:e6:b3:56:22:52:43:3c:ca:f2:e7:88:
78:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:43:18:8D:44:E0:1A:AA:0B:DA:3A:30:71:92:C0:AD:D5:A0:F5:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2132ea8c-f356-304d-b6b3-78ea8683488d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.20.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:19:19:6d:4e:ba:57:3a:64:da:0f:52:30:d6:96:9b:94:9b:
0d:d2:22:9c:0a:77:a6:7f:b8:62:1b:56:eb:7d:70:74:e7:d9:
2e:b7:92:6d:84:ea:4a:fa:ea:95:3b:5b:1a:17:07:2e:56:1a:
c9:b7:64:c0:c0:88:75:0c:90:3d:7f:25:37:b7:4e:68:05:3f:
ef:6e:e7:28:c0:cc:13:be:71:df:56:9d:35:c5:0c:d4:c4:df:
84:28:82:1a:79:f2:94:e0:a2:e7:da:c7:09:66:7b:df:78:40:
2b:57:41:0d:57:9b:05:9b:3a:df:a9:8a:8b:e9:30:c1:7f:40:
d7:f2:5b:ab:6c:bc:f7:6c:bd:fd:7a:34:bd:81:75:7c:1b:51:
a4:b3:ca:d3:02:8f:fa:81:41:b8:f7:89:f3:e1:69:6f:e7:6f:
93:05:8b:b0:2e:c9:ce:fe:ed:0d:7d:5a:f2:c9:43:ef:b8:b8:
e8:c6:dc:89:c1:d0:ae:77:e1:2a:fb:00:e1:21:88:1c:24:5b:
fd:12:8c:c7:04:a7:3d:f5:07:12:7f:50:41:a8:73:c3:49:b2:
95:37:3b:a4:0e:7c:25:ca:3a:fc:3e:38:d2:6f:33:23:28:50:
02:03:84:64:5f:f0:a9:41:90:78:8d:9e:ea:07:e3:fb:bd:47:
e4:3c:6c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:22:48 2025 by rpki-client