Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/564d3e3b-605b-31f4-b996-a7b3ed534a75.roa
File: 564d3e3b-605b-31f4-b996-a7b3ed534a75.roa (raw, json)
Hash identifier: 5hfyYWsHLCMG+HAkNbwR/4erc4IH6IMJEKeaXtzfUXU=
Subject key identifier: 40:57:AA:E6:60:1A:B7:1E:25:76:CB:29:F4:F5:B2:45:5B:3F:7F:8D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FFD6DE3503ACC34F0EDDCB600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/564d3e3b-605b-31f4-b996-a7b3ed534a75.roa
Signing time: Mon 21 Nov 2022 12:00:00 +0000
ROA not before: Mon 21 Nov 2022 12:00:00 +0000
ROA not after: Tue 27 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 136.132.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fd:6d:e3:50:3a:cc:34:f0:ed:dc:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 21 12:00:00 2022 GMT
Not After : Dec 27 05:00:00 2022 GMT
Subject: CN=719a9506-1b3a-413c-9949-3c8214718bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:8c:67:60:3c:7f:cd:0a:56:70:45:04:6f:
bc:96:8d:3e:9e:06:5c:fc:02:81:36:27:74:cf:20:
db:bf:69:da:82:0a:59:03:14:c0:ea:d6:b3:fe:50:
22:43:55:a0:e4:05:f2:05:f9:ce:8a:6c:8c:fc:99:
75:ba:8a:24:bf:6c:b6:13:56:67:a5:c9:86:c5:f7:
d7:32:e0:20:ce:83:3d:4a:5c:17:c6:56:a4:fc:c6:
f0:ca:82:4a:84:b5:94:7d:aa:e5:bf:1c:8b:d2:ff:
94:47:34:66:04:bc:f1:16:a6:ef:c7:1d:d8:61:41:
40:30:6c:58:2f:d9:c8:c9:7b:58:0b:9f:cc:2b:c5:
18:30:49:43:f4:f2:db:e9:9c:61:b2:17:c4:81:0e:
c9:5b:ab:ab:18:12:0f:a9:d0:73:ce:2a:46:4d:23:
fb:fc:9d:45:2e:10:71:73:61:a7:86:3c:d6:85:3d:
a5:67:92:07:42:67:b7:ce:de:c6:90:a4:74:f6:83:
10:25:b5:44:77:a7:ae:b1:f7:59:b5:ec:d2:c9:5e:
58:17:77:6f:c7:d7:f7:88:ff:aa:b6:7d:1d:06:f3:
b1:49:b6:17:a1:61:15:ff:03:98:14:e4:bd:91:c6:
e5:cd:ac:42:f3:ad:54:29:77:d7:1a:c1:fe:bd:0f:
ae:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:57:AA:E6:60:1A:B7:1E:25:76:CB:29:F4:F5:B2:45:5B:3F:7F:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/564d3e3b-605b-31f4-b996-a7b3ed534a75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.132.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:49:8c:86:95:38:42:e7:67:4b:03:ca:6a:aa:5b:22:71:da:
b9:12:89:5c:cd:c8:7d:8c:63:8f:3b:39:52:36:02:de:c1:92:
85:6e:25:f7:c1:df:29:44:43:46:97:6f:1e:13:45:30:52:56:
6d:c1:10:0d:b1:7e:ea:af:b4:ed:06:fd:b6:21:53:55:19:95:
57:d5:47:bc:ee:d3:74:7e:e5:65:9a:21:08:24:d5:cf:34:07:
3e:d1:6e:b0:5b:f0:9f:a4:f7:c6:5d:8a:1a:33:ec:ef:51:af:
e2:6a:17:25:c4:1e:8f:7e:99:63:5d:0d:6c:9b:ad:8b:c9:37:
58:b3:48:a5:cb:21:c6:7e:72:62:7a:9c:5c:23:2b:29:60:ec:
ba:c5:a5:4d:02:20:e4:38:16:90:88:44:13:b5:04:7f:b1:14:
7e:dd:3a:7d:85:15:6a:78:32:30:49:75:3b:95:93:e9:54:23:
18:ba:25:6c:af:e3:93:be:9b:3e:b9:d2:ed:cf:fe:af:b0:f3:
8a:54:7b:fe:7a:56:8b:1b:58:5e:0b:a6:0c:60:bf:34:c7:78:
be:6e:c3:80:27:86:71:cb:ea:ff:62:0f:c9:1f:8c:53:2a:35:
d7:af:ff:91:7d:87:2e:1f:7a:c1:13:39:7f:a8:c5:39:85:a1:
c9:40:b8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:40 2025 by rpki-client