Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/431fa859-2b18-329b-bc92-2be21e8c6f31.roa
File: 431fa859-2b18-329b-bc92-2be21e8c6f31.roa (raw, json)
Hash identifier: //A9aNBzjpZvO2/Mv1WYfhP1Nys1Li89a+dhBTTjdSU=
Subject key identifier: 04:A9:77:9D:23:96:10:91:16:B2:16:BE:A9:1A:4D:33:CA:D2:DA:48
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C79D317ACDCBE4BF21B457680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/431fa859-2b18-329b-bc92-2be21e8c6f31.roa
Signing time: Tue 04 Jan 2022 05:00:00 +0000
ROA not before: Tue 04 Jan 2022 05:00:00 +0000
ROA not after: Tue 08 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 136.14.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:79:d3:17:ac:dc:be:4b:f2:1b:45:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 4 05:00:00 2022 GMT
Not After : Feb 8 05:00:00 2022 GMT
Subject: CN=8e25a198-4337-4c60-b3b6-d8c839afd387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2e:9a:a8:b4:eb:de:15:aa:23:d4:65:3e:74:
8a:e0:b9:31:36:ee:cb:3f:3f:98:c5:04:28:da:30:
1e:b0:6b:99:2f:61:c0:e4:73:26:47:01:f6:96:46:
2e:ed:93:08:08:75:95:7a:4f:42:36:07:cb:aa:6c:
ab:95:2d:a0:e4:28:66:5a:1a:ee:93:0c:aa:d4:39:
17:c3:7c:3b:fc:a5:29:93:b8:b1:10:2a:d5:70:e2:
1b:55:2a:ca:61:97:d5:ad:c2:f0:b4:ce:a8:8f:67:
81:7e:f2:98:7e:5c:c2:ae:8b:74:a6:cf:0b:ef:20:
9b:0f:94:5d:53:88:34:96:ce:b7:a8:c1:f9:8a:ed:
6b:49:d5:f8:dc:ee:97:30:04:e1:69:4d:48:f0:4c:
13:e7:13:b6:28:b2:49:e4:76:1d:97:65:06:63:ec:
04:72:5f:7d:29:71:77:93:e6:c2:2b:8c:28:13:08:
6c:5e:72:5a:1c:5f:6e:98:0b:d9:15:94:79:4e:b7:
01:30:aa:11:a9:64:68:d6:86:d6:5c:fa:7c:39:a2:
d2:54:d2:d6:7a:62:03:22:1d:ad:2d:b7:ad:f9:55:
8b:2b:e0:f2:08:88:b3:0b:9a:c7:04:00:49:ef:c7:
0f:a9:38:e2:e6:ed:f3:41:1e:0a:d9:95:f5:18:a3:
46:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A9:77:9D:23:96:10:91:16:B2:16:BE:A9:1A:4D:33:CA:D2:DA:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/431fa859-2b18-329b-bc92-2be21e8c6f31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.14.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:b1:2d:49:40:1b:23:44:bc:db:2f:ce:07:7c:15:db:72:c1:
b4:c7:ab:ce:9d:7c:e2:b8:97:35:01:13:21:15:30:63:2e:73:
8e:a3:10:c4:2a:8a:ce:c2:aa:8c:94:c8:01:67:a4:9d:c1:1f:
86:fc:92:fb:83:2a:c4:b7:2b:cb:89:61:a4:e2:d5:b3:48:12:
63:44:31:2e:ee:01:f3:6a:e2:3b:97:7a:4d:f2:2d:9d:11:ce:
21:a3:53:3a:c8:33:1c:c6:49:53:0e:b9:e4:08:11:83:3d:2d:
de:0c:cb:08:e2:af:e9:ed:6d:76:98:69:28:b5:40:c4:d1:fa:
6e:d8:b8:3b:72:2f:d0:53:fe:9e:f4:84:b9:c5:93:41:a8:f7:
45:ec:6e:99:fe:2d:d4:2a:fc:31:2c:6b:e6:a3:9d:6c:87:6f:
87:2c:fb:1d:97:ee:7d:a3:b8:6b:3e:98:2a:a3:01:70:ca:44:
e2:ea:f9:7e:d2:9f:53:83:ff:9f:ec:a4:df:1f:5f:d0:b1:b9:
80:b0:28:9c:86:9f:9c:42:a4:6c:a3:b9:eb:8c:be:fc:d5:98:
cc:cc:34:6c:62:a5:61:91:3d:78:26:97:72:f5:fc:2b:93:04:
89:64:69:5f:5d:02:97:4a:3b:5f:52:b6:e3:82:d9:c7:2d:e1:
ea:14:88:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:45 2025 by rpki-client