Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a72388c-1972-3c10-86aa-c98d007ce1be.roa
File: 4a72388c-1972-3c10-86aa-c98d007ce1be.roa (raw, json)
Hash identifier: 3sSQqZOPnt9+3MTO6tjwCLwQvIDH+KR+dCT1R8toV+Y=
Subject key identifier: 0C:D8:AB:C8:C3:AE:B7:43:D3:B2:11:04:8E:3F:A7:81:B3:C0:AC:B3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840C20AE2D05D26A7DE0DD97040
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a72388c-1972-3c10-86aa-c98d007ce1be.roa
Signing time: Mon 30 Jan 2023 12:00:00 +0000
ROA not before: Mon 30 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c2:0a:e2:d0:5d:26:a7:de:0d:d9:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 30 12:00:00 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=d08bc1a0-a25e-4529-b299-9d1c7d683f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:60:8b:85:e4:90:1b:82:a8:7f:32:51:91:43:
46:ba:29:93:6d:20:a7:cc:36:60:dd:1d:f2:31:3d:
db:ee:47:d6:cc:69:58:c0:3f:e0:18:06:ce:88:2d:
a1:06:68:18:b2:e0:90:a7:6c:be:78:02:d2:43:14:
14:1d:48:bf:27:28:d3:64:43:ca:6c:dc:92:11:1f:
70:6e:62:eb:76:7e:22:47:29:74:42:e2:7c:ef:5e:
20:71:72:c9:57:d5:1e:52:ec:27:62:a2:e7:7e:a6:
c0:cb:07:c2:a1:96:a7:fa:af:07:37:91:89:4f:2e:
7c:38:62:82:83:ec:8e:89:53:08:25:f5:ce:5f:0a:
d3:77:bb:e0:bc:c1:93:a5:25:d6:ef:7a:b3:45:7e:
30:48:3c:08:10:3b:40:dc:99:ac:45:9d:46:f6:bc:
6a:b5:e5:95:e8:91:ac:1c:4b:b2:8f:0e:84:a9:fc:
25:4d:57:fe:91:f0:76:c6:be:e7:38:c1:51:33:46:
84:7c:4d:79:c5:9f:a4:54:43:ed:78:8a:e9:6c:30:
3d:d0:58:32:f1:aa:8d:23:39:8c:3d:ea:27:e9:69:
7c:2f:c7:41:8e:a1:17:b5:f7:20:a5:1f:52:31:ef:
0a:25:f2:b8:fb:44:f2:d1:f5:f6:44:dc:38:22:4a:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D8:AB:C8:C3:AE:B7:43:D3:B2:11:04:8E:3F:A7:81:B3:C0:AC:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a72388c-1972-3c10-86aa-c98d007ce1be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:4f:b4:a2:9d:9e:a6:65:24:93:a1:97:93:6d:ab:1c:25:27:
f5:21:0d:b3:c2:b9:b7:77:c5:57:f8:ea:6e:ea:9b:7c:44:7a:
9f:46:a7:a6:69:43:f1:c3:b4:0a:e0:6a:bb:dc:5e:0a:c9:54:
dd:97:ec:f5:31:8d:78:91:65:74:16:d0:c5:26:ca:11:a9:0b:
90:55:63:0c:92:95:df:cf:39:c3:3f:51:b5:38:bb:83:f4:62:
d7:50:37:99:2e:de:7b:43:98:a3:7f:75:32:5b:30:8a:bc:22:
8f:3b:8c:25:96:1c:d5:96:50:64:99:98:10:d7:89:3e:30:bf:
05:0b:3a:68:11:9b:d1:f1:f8:be:24:a4:f1:99:56:25:ec:34:
14:00:4e:9a:38:c1:7f:5e:bb:03:41:81:28:69:26:1b:78:5c:
22:39:74:22:db:e3:b8:71:27:5e:b5:ce:25:eb:77:4b:0f:e1:
71:b9:f9:53:12:1a:42:3b:e1:c0:a8:b5:03:c6:90:20:e0:d7:
2e:74:85:2a:79:8e:c3:81:d2:af:af:77:ed:00:11:3d:a0:14:
10:dc:5e:45:67:2e:64:60:f9:f9:73:d0:60:93:40:dd:80:1d:
74:3f:f6:35:28:c5:d9:dd:46:60:95:18:f6:05:c4:73:eb:c2:
9e:a0:dc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:28 2025 by rpki-client