Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/692fba09-4edb-314a-a6ce-e3a784c7437f.roa
File: 692fba09-4edb-314a-a6ce-e3a784c7437f.roa (raw, json)
Hash identifier: JisjbdnTfKbHY0h3gQhOcYa8Flm7PArAgSp4a1D8RaM=
Subject key identifier: 9B:FF:B9:EB:76:04:7F:6E:27:E5:8D:C3:1F:5C:87:CD:EA:9F:D3:A8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840731E0189785B1D98EC067A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/692fba09-4edb-314a-a6ce-e3a784c7437f.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 136.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:1e:01:89:78:5b:1d:98:ec:06:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=16d8809b-c1ef-45c7-bd7f-1b8367b1afff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:05:58:34:30:b0:a2:5d:61:3a:ab:0e:a0:
2f:e1:a6:a2:ce:35:d1:b4:c0:bf:bf:77:2a:97:7f:
15:a6:4f:58:92:b5:98:c1:e0:89:1b:65:8c:ba:bb:
a3:84:b2:4c:e1:d9:91:d5:d4:a3:24:40:cb:e3:dc:
80:27:ed:8d:ae:c0:ad:ca:9e:b3:0a:78:04:99:53:
d0:08:00:b1:e0:df:f9:ab:41:dc:76:56:21:11:84:
46:6d:99:43:d7:2e:7a:8c:a7:97:49:09:55:90:8f:
b3:7b:fd:31:e6:6e:3c:37:63:cf:0a:34:93:c3:21:
f0:e5:e4:b8:5c:74:f0:b6:d4:cc:6b:6b:c2:97:32:
a7:b0:a3:c0:70:7a:9e:51:50:f1:42:e3:3f:c9:8b:
1e:b6:7d:27:99:86:97:69:0d:60:1d:d8:83:07:f6:
4e:ae:61:a0:9d:1e:56:40:b8:53:ec:df:61:2b:28:
0a:01:53:da:1b:ac:a5:9a:b8:61:06:bd:2e:bb:5d:
65:f0:85:22:8e:c3:e4:b3:f9:86:92:c7:18:d9:7b:
af:c1:f7:69:82:f1:85:69:ed:87:a1:57:15:df:cd:
a9:c5:e2:e0:d3:d9:d5:5f:03:40:f6:5b:1b:0a:23:
55:c1:2e:c5:d2:27:fa:30:e4:26:28:1b:39:55:44:
ef:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FF:B9:EB:76:04:7F:6E:27:E5:8D:C3:1F:5C:87:CD:EA:9F:D3:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/692fba09-4edb-314a-a6ce-e3a784c7437f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.136.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:bb:c0:f2:5b:23:f9:18:a0:ac:cb:3f:f2:44:76:c0:ac:96:
c1:3d:8b:09:c0:2b:11:0b:88:37:96:5b:ee:48:f0:d4:3c:69:
c5:de:53:66:96:d6:bc:cf:55:a5:bb:3e:2a:96:c8:fd:e9:5c:
d6:b6:58:5b:7a:47:8e:a5:23:9b:c9:23:b1:77:ac:ea:05:5b:
82:21:ec:fa:ac:16:4e:85:47:0b:bd:bd:84:8a:5d:be:b8:59:
cb:78:7f:5b:a2:35:59:3a:be:3c:d0:1c:f1:ec:46:09:77:de:
11:e9:20:29:2f:55:16:18:d1:0e:42:ff:9c:c0:15:9f:cd:45:
cf:af:01:58:55:96:ca:5d:48:44:60:e1:a8:2d:42:19:9d:da:
9b:db:90:96:4e:03:03:f0:e7:d5:c7:87:f2:8f:76:de:1c:8a:
dc:81:09:53:a0:98:c5:04:98:4e:44:31:7f:d2:f7:f4:6a:8c:
c8:85:23:02:16:6c:e6:9a:5f:68:fa:00:b8:7c:8f:a2:f3:4e:
31:3b:f1:18:f6:8d:26:52:61:b6:07:a0:09:08:22:51:4c:49:
e4:ad:d4:51:8c:0c:a6:0e:de:a3:6f:4d:e6:43:af:34:62:ec:
37:3f:8e:49:11:99:87:4f:69:0d:7b:12:0a:8f:c3:64:b9:f0:
96:33:04:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:39:41 2025 by rpki-client