Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ca2f21a-010d-380e-9361-f19396756440.roa
File: 3ca2f21a-010d-380e-9361-f19396756440.roa (raw, json)
Hash identifier: g9d4S/+lhXed2bgzTCP9CbatL1J6YjEKbbVMhVMgC5E=
Subject key identifier: 5B:C5:91:A8:BD:93:8A:88:FB:BB:CA:0C:90:74:F8:7B:2F:5C:B7:B8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FB0EAF6DAAD98840C5D9F7080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ca2f21a-010d-380e-9361-f19396756440.roa
Signing time: Mon 24 Oct 2022 12:00:00 +0000
ROA not before: Mon 24 Oct 2022 12:00:00 +0000
ROA not after: Tue 29 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 136.140.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b0:ea:f6:da:ad:98:84:0c:5d:9f:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 24 12:00:00 2022 GMT
Not After : Nov 29 05:00:00 2022 GMT
Subject: CN=c15cbaab-e3f3-4f56-9dfc-4cf7bf5f8274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:c4:79:3a:0e:09:4c:30:b7:94:b4:4d:32:
93:93:bc:e6:c8:4e:62:b2:77:cd:98:50:9d:24:74:
70:6f:9c:87:37:82:a0:c0:4e:72:27:f6:d7:ca:44:
dc:fb:43:29:8b:89:f4:35:0a:b1:fa:c4:25:26:84:
16:99:de:c4:aa:9c:12:af:cb:25:ca:e9:b2:ad:9a:
f5:a0:ef:c7:6f:09:c2:0b:c7:3f:c7:8d:a1:1c:0a:
ef:c3:eb:e4:7a:72:6d:d1:51:3d:60:4f:1d:06:9b:
d8:5c:f2:31:ef:c1:e7:e9:6f:e6:df:a5:5d:93:3d:
67:c4:09:01:0d:ac:de:17:60:50:ca:ff:de:24:09:
09:ee:f8:b5:f3:c7:12:35:1d:8b:7b:b6:1a:0e:4b:
45:eb:0a:3e:7e:14:b2:33:9e:89:c7:a1:83:f6:b7:
72:8b:9c:a3:ad:27:22:29:d2:9a:9d:32:b6:13:c2:
45:13:8f:46:3a:67:8b:e8:76:93:00:e4:c6:50:b3:
43:b0:92:aa:03:0a:b9:42:c3:bf:ea:ba:70:b5:61:
96:ba:4d:78:93:2f:54:52:87:fd:fd:59:54:13:bf:
f0:3a:c5:8a:37:63:34:d1:f2:67:32:01:91:dd:2b:
7c:98:08:6d:92:1a:2c:22:48:62:f3:96:23:88:b2:
cc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C5:91:A8:BD:93:8A:88:FB:BB:CA:0C:90:74:F8:7B:2F:5C:B7:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ca2f21a-010d-380e-9361-f19396756440.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.140.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:e0:57:84:f0:ee:20:0c:cd:02:b0:4e:60:ca:b0:9a:70:17:
ee:4d:da:7a:a0:e7:bb:8d:e3:9b:e4:9b:02:d2:1b:26:b3:c5:
a6:f3:40:2a:9b:74:50:e2:2f:04:dc:36:f5:d6:5b:9b:07:34:
c9:38:7e:2c:54:36:ed:6d:5e:f2:55:45:5e:b6:e9:5d:9c:d9:
ad:e8:a5:ea:d7:5a:24:e9:ad:4f:c0:82:85:5f:d7:fc:b1:65:
f2:ed:aa:b8:e1:ac:57:f7:0d:eb:9e:54:2c:20:31:1e:17:7a:
81:30:b9:18:0e:fd:f2:c4:71:d5:a5:d0:f3:bd:5f:3f:bb:b5:
7b:d2:33:da:af:fb:36:18:75:3c:78:13:aa:4d:a5:01:ca:32:
ce:66:9e:7e:d5:72:92:45:d5:aa:9e:8a:ce:47:cd:8f:95:62:
9e:5f:c5:64:09:c7:97:d9:a2:80:99:3e:85:38:8f:c4:c7:1e:
af:8f:cf:00:64:92:8a:bf:84:b2:0c:fc:24:26:69:56:fe:a2:
c0:40:34:3f:25:f4:b5:a2:8f:7b:26:36:62:9e:9f:f3:d4:2a:
16:8b:0d:3b:03:db:e8:89:72:50:92:24:4b:94:5b:f2:6f:05:
51:65:a3:2d:63:92:ac:b4:84:a9:38:3e:b1:d4:45:c1:21:7b:
7f:a8:e8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:07:25 2025 by rpki-client