Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41fc182e-87f2-30c4-9495-640de05797c0.roa
File: 41fc182e-87f2-30c4-9495-640de05797c0.roa (raw, json)
Hash identifier: tFvrBLXwNoXPFnZk+I+gZ4k8aVoSLqfB0vZCjG0cDoE=
Subject key identifier: 35:53:8A:2C:80:A6:B0:29:E9:57:42:F0:EC:65:5B:58:3D:87:D8:7E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EC670B287277AE71081284980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41fc182e-87f2-30c4-9495-640de05797c0.roa
Signing time: Mon 01 Aug 2022 12:00:00 +0000
ROA not before: Mon 01 Aug 2022 12:00:00 +0000
ROA not after: Tue 06 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.128.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:c6:70:b2:87:27:7a:e7:10:81:28:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 1 12:00:00 2022 GMT
Not After : Sep 6 04:00:00 2022 GMT
Subject: CN=f61c8854-f679-4203-aab3-767b30e78a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:e7:c3:93:f0:0a:8b:5d:2c:3b:f4:6f:00:
09:73:d0:13:d1:2f:dd:73:5e:c9:54:57:e3:35:69:
c6:a8:21:a4:50:fa:a6:34:cf:58:05:cf:ae:b0:b2:
a3:44:46:25:32:73:18:3c:f4:b6:a7:65:a4:5e:de:
24:f0:6a:4d:94:4e:67:ac:0f:15:11:7f:37:53:a6:
34:7b:9b:4c:87:57:ae:06:fb:6b:9b:7b:db:68:e3:
5d:03:69:54:b0:cb:3a:0f:2d:15:59:4b:3d:d6:c1:
c7:28:dd:df:09:69:fd:9c:22:dd:08:33:64:85:fa:
ff:96:21:1b:c8:6b:d3:07:5e:e9:42:54:b7:38:35:
5b:b6:af:38:fd:aa:2f:c5:26:db:b0:30:98:36:53:
2a:bb:68:dd:70:9a:88:c6:73:a3:8c:c9:e1:fc:2c:
a9:ea:f5:23:c0:42:c0:1f:6c:37:cc:df:92:cc:91:
2f:84:e8:88:cf:60:8c:24:40:9d:ab:86:f2:a8:44:
a1:33:0e:fd:e5:ac:c0:4a:8a:cb:62:88:d8:68:99:
76:63:1b:92:3a:b2:59:7d:f9:63:0f:60:15:44:fe:
f3:47:ec:7f:12:8f:e1:60:38:fa:bd:d5:4e:48:a6:
7b:45:8e:b9:09:69:0f:16:07:e9:50:81:3f:da:23:
22:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:53:8A:2C:80:A6:B0:29:E9:57:42:F0:EC:65:5B:58:3D:87:D8:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41fc182e-87f2-30c4-9495-640de05797c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.128.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:22:62:93:df:90:13:c4:5f:96:b3:b4:f1:6f:67:74:9f:68:
8f:5c:64:4f:70:6c:2f:82:63:f8:e4:a0:ec:1c:76:0a:04:5d:
e3:e8:e8:a3:a6:62:c7:a8:b9:85:e7:ca:69:b3:58:cd:b7:50:
8c:22:b7:e5:2d:f5:1a:bd:59:e8:29:d4:57:18:15:97:93:7c:
dd:b8:65:30:54:5c:65:f5:0e:5e:e1:ae:07:7d:8e:76:c9:ad:
9d:db:99:65:ec:6f:d2:da:b6:2b:f9:42:76:1b:1d:48:84:33:
91:84:2b:28:05:a9:c8:0c:a6:c0:2f:dd:e4:9f:61:18:15:6f:
d7:66:ed:62:11:12:96:3a:b0:ed:0b:41:59:e9:b2:bc:d5:74:
39:1d:4b:17:4c:d6:a5:fd:0e:3d:0d:33:6f:7c:72:e8:56:64:
37:c3:8e:0a:f7:27:98:cf:47:1e:c4:ca:a9:e2:d7:58:3e:d3:
7e:2e:c6:ed:1e:f9:99:6b:56:37:82:15:a7:b9:40:b5:0d:60:
88:df:42:b4:f7:23:5f:e3:2b:5a:b7:41:7a:ca:4b:9c:a4:4f:
6f:ae:be:64:24:9f:9a:8b:88:5b:f6:52:37:95:23:19:5a:66:
9f:5d:7c:73:ff:30:19:61:a8:e0:3f:a4:01:5a:09:84:1e:34:
e0:ec:0b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:33:40 2025 by rpki-client