Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4eb29d28-8234-3bf4-8ff1-7ea282fe5f4a.roa
File: 4eb29d28-8234-3bf4-8ff1-7ea282fe5f4a.roa (raw, json)
Hash identifier: D8C6YpRqnLlC9io85hg1+HndGtVRtQ3LIYXaHtqNgLI=
Subject key identifier: 32:D7:9F:DC:BD:2E:64:52:3C:E6:32:21:95:A2:15:94:53:64:3E:9C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FFDA94DD7894B7C9191395340
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4eb29d28-8234-3bf4-8ff1-7ea282fe5f4a.roa
Signing time: Mon 21 Nov 2022 12:00:00 +0000
ROA not before: Mon 21 Nov 2022 12:00:00 +0000
ROA not after: Tue 27 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 136.16.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fd:a9:4d:d7:89:4b:7c:91:91:39:53:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 21 12:00:00 2022 GMT
Not After : Dec 27 05:00:00 2022 GMT
Subject: CN=2e51e139-6584-4a4b-8047-9e62fe71317e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a2:a6:b1:34:78:ee:02:b3:40:45:95:40:7f:
f1:1c:fa:26:f8:62:41:6f:c5:3b:98:0d:2d:94:3f:
3c:11:19:61:3d:35:de:0a:7c:86:ec:54:fd:22:8e:
74:8e:01:2c:86:a2:ce:09:9c:df:81:3f:64:23:e3:
97:78:93:ed:6e:13:d8:7b:57:17:c9:9b:d2:49:c4:
c3:c2:da:1d:77:c4:61:77:b8:26:9f:e7:35:55:be:
61:8a:92:6b:29:5f:cb:f4:72:9d:d9:44:e8:8a:c2:
e0:7b:e3:f1:db:f9:f7:12:3a:ad:d8:a4:91:13:9c:
a3:de:48:e8:99:3e:82:29:a6:49:01:40:d0:a5:a7:
30:3f:e4:9e:2f:01:16:d8:1e:16:4f:fd:49:cc:e4:
83:61:26:c0:dd:ee:51:06:56:23:41:b6:4a:d8:bf:
c1:a4:c5:7f:72:22:9c:9c:88:94:d5:73:58:fd:25:
8c:df:8a:79:04:d9:ce:fa:e1:20:44:5a:83:2a:b7:
ad:0c:51:5b:30:94:64:b8:98:fb:da:62:7e:9f:51:
28:f8:11:25:c1:fe:42:55:77:bf:4b:8d:62:5f:81:
1d:dc:85:ea:83:35:fc:0b:ed:4c:c9:5d:7a:45:e9:
a0:b9:34:cf:d2:06:1a:c9:03:b9:d9:3c:69:77:de:
7c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D7:9F:DC:BD:2E:64:52:3C:E6:32:21:95:A2:15:94:53:64:3E:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4eb29d28-8234-3bf4-8ff1-7ea282fe5f4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:ef:46:86:9d:b2:07:92:cb:2f:42:c1:f9:23:1c:ba:56:38:
0d:b0:13:f5:df:b1:8e:8a:b2:26:60:5e:1e:6b:51:68:55:79:
ea:bd:25:91:e0:be:5d:17:ba:9a:ea:bf:eb:8f:2d:6a:df:65:
b1:cf:33:34:ff:79:7e:bc:a3:f1:92:ed:55:37:ba:81:55:9f:
99:c5:02:b0:b1:fb:a7:a5:bb:37:b4:3a:6d:2b:fc:4b:c1:ac:
a4:7d:37:0e:1b:0f:f5:74:36:7e:59:19:ee:13:46:43:a8:9e:
e4:24:e1:a4:1e:f1:6b:93:48:c4:fb:84:c7:51:60:e1:ad:67:
98:72:7f:44:ff:a6:1b:c9:78:21:42:0d:08:89:72:9f:57:b5:
b5:a5:65:76:6c:51:b5:ee:0e:8f:2a:b6:e1:2c:97:ed:a8:90:
21:e3:be:2a:bf:a6:c1:9a:1a:ca:b5:f7:81:c9:c9:49:22:08:
a3:77:08:8f:0e:28:f1:82:96:4f:63:fb:8c:e8:9f:a8:10:1c:
2e:05:34:1c:77:cd:72:e0:11:27:25:65:61:f7:16:7c:05:8e:
75:c1:02:00:62:8e:f7:bf:8b:6c:ce:c0:37:d2:a2:02:fd:8f:
64:6a:95:25:41:52:49:33:bd:2d:48:ec:4b:e3:30:21:56:db:
aa:b3:83:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:51 2025 by rpki-client