Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2cf28e8e-999c-36ad-b017-7f70efae82d5.roa
File: 2cf28e8e-999c-36ad-b017-7f70efae82d5.roa (raw, json)
Hash identifier: 85hKKUdZ0LEFv9NYp94YUBXYZk+z1IUmOxVO1iMbNqY=
Subject key identifier: 14:C7:D3:04:76:AE:26:37:70:26:37:76:09:D6:4F:81:BB:68:58:FC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F88432A527C2FA27643B87580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2cf28e8e-999c-36ad-b017-7f70efae82d5.roa
Signing time: Mon 10 Oct 2022 12:00:00 +0000
ROA not before: Mon 10 Oct 2022 12:00:00 +0000
ROA not after: Tue 15 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 136.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:88:43:2a:52:7c:2f:a2:76:43:b8:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 12:00:00 2022 GMT
Not After : Nov 15 05:00:00 2022 GMT
Subject: CN=75c231e9-08b9-4bbf-a846-b7cb856a2b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:6a:84:b8:05:b7:38:70:8e:83:21:37:3c:
8c:b2:8b:58:09:a5:67:bd:8e:70:aa:1f:96:2b:d6:
d0:4a:56:35:21:70:32:26:7b:a0:03:21:14:59:d5:
f1:1b:0a:d9:07:ec:ed:6a:0f:76:29:05:cf:3e:a0:
38:68:33:56:f1:2e:b6:6c:0e:1c:4d:57:21:19:a9:
d8:59:13:ed:be:5b:a6:7a:e4:54:f0:b6:4a:1a:91:
59:82:23:b5:54:42:11:ed:89:46:45:4a:90:aa:85:
f7:58:83:c2:b4:c2:4b:58:14:77:a5:46:a8:af:c6:
85:db:7d:4e:43:2e:2b:68:90:00:1c:3b:93:73:54:
87:9b:33:c4:82:6b:7e:5e:32:8f:56:05:83:ec:ed:
48:a4:04:d4:5b:60:8c:62:74:d5:03:81:21:29:df:
1b:23:0d:fd:59:83:b7:b7:d8:1d:ba:5f:66:78:43:
d2:ea:03:e8:ab:4c:45:f7:2c:ce:0e:9d:55:f4:79:
27:76:8d:7c:88:9e:f6:c4:0f:37:c1:1c:b8:d1:1d:
13:b9:a6:81:7a:71:8e:7d:6d:9f:a0:6c:69:5e:1f:
65:29:1b:82:3b:58:17:1c:33:05:24:3a:8c:ed:3e:
9d:fb:9f:b9:16:8e:af:b5:af:21:80:2f:94:5b:47:
e4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C7:D3:04:76:AE:26:37:70:26:37:76:09:D6:4F:81:BB:68:58:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2cf28e8e-999c-36ad-b017-7f70efae82d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:e8:ec:9b:1d:9f:97:92:cc:35:2c:67:bf:99:cf:d0:bb:b8:
41:8b:36:c5:11:30:10:4b:82:82:f5:8a:5c:16:52:1c:07:81:
ef:3c:20:85:d3:a2:55:11:ba:95:c9:8f:dc:6c:ab:9f:c2:1d:
a3:a2:d3:e4:e0:40:0f:c7:16:3b:e4:4a:1f:69:aa:0c:11:d2:
4f:2d:33:92:1b:cb:b0:86:3c:75:dc:d3:05:91:c3:8c:e7:75:
b6:c7:44:c1:f9:9b:30:86:d9:cc:e6:65:9d:58:f4:9a:df:53:
a2:31:9b:2a:ae:a0:e7:11:8b:16:fd:c8:6d:02:e8:d6:0e:49:
cc:bb:cd:28:c8:2c:13:0f:a4:b0:54:5d:38:5c:eb:07:24:ab:
83:ff:bc:e6:b0:17:56:ac:4b:f7:ce:6b:e4:16:5f:f4:7e:70:
30:b5:97:dc:46:cc:b0:56:87:43:53:aa:1d:30:39:69:c0:f9:
87:fb:28:04:fe:61:4d:51:c4:b1:c4:c0:61:cf:aa:e6:34:10:
55:52:ad:9c:b6:64:7a:da:6c:1f:01:c1:5b:ff:1b:f0:93:2b:
b2:f8:84:f1:dc:a0:44:b8:30:0d:92:16:9a:88:8d:1b:9f:a9:
9c:cf:99:8a:65:d9:51:42:85:4d:d6:2a:7f:7c:56:00:1b:23:
6c:03:56:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:28:00 2025 by rpki-client