Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6b207e43-6c00-36bf-824a-0fafc790f393.roa
File: 6b207e43-6c00-36bf-824a-0fafc790f393.roa (raw, json)
Hash identifier: ClY2P24X2Q/87un/C5EmBKCtO+CqzDXdG0ZnyF/xez0=
Subject key identifier: D3:A9:50:57:B0:E3:60:0F:DE:EF:78:37:2C:0B:4F:41:C6:70:ED:30
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D8B96DADB979E4A83A0879400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6b207e43-6c00-36bf-824a-0fafc790f393.roa
Signing time: Tue 12 Apr 2022 04:00:00 +0000
ROA not before: Tue 12 Apr 2022 04:00:00 +0000
ROA not after: Tue 17 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:8b:96:da:db:97:9e:4a:83:a0:87:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 12 04:00:00 2022 GMT
Not After : May 17 04:00:00 2022 GMT
Subject: CN=4debad1a-b4e2-4efe-9c4c-f92870c48837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:50:05:fd:04:5d:3a:fc:ce:af:d5:f1:ef:
3c:7f:eb:29:c5:46:cd:5c:d7:ce:b3:d7:7b:ad:a5:
7d:5b:75:76:b4:e2:70:80:47:b7:b5:86:3e:cd:23:
ac:2c:de:9c:cf:cf:b8:2e:b0:b8:3c:5a:51:67:b3:
bc:78:ea:d9:86:64:cc:b9:c0:a9:59:3c:5a:95:20:
ee:82:38:c0:0b:6d:d9:97:51:a0:13:f2:5d:82:85:
62:7e:21:56:ac:62:63:c6:5b:19:1f:b1:a9:d0:e8:
e2:0e:55:19:f4:ba:ba:9e:3d:5a:9b:1f:1f:66:ee:
59:18:7b:83:73:33:5e:a7:e5:4b:4b:8b:26:b9:2b:
42:9a:ab:d2:2c:0d:7f:8f:78:77:42:35:f7:da:60:
c6:76:e9:61:67:9c:86:2d:0a:c3:a1:db:f7:00:a9:
c3:62:b8:22:8c:cd:64:79:4e:01:af:0a:35:90:54:
f9:78:ad:3f:72:fe:49:d0:32:ee:8f:08:c9:a6:1f:
67:63:fd:0b:70:4f:b3:e8:72:6f:5b:2d:ee:b0:35:
3b:c4:17:26:cb:d2:c7:62:40:2e:53:90:6b:26:7b:
9a:0d:1b:d3:66:c4:52:e8:f4:9b:eb:c5:17:b3:a9:
58:c4:f4:a1:15:65:74:0a:ba:25:84:50:f6:ac:0d:
b6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A9:50:57:B0:E3:60:0F:DE:EF:78:37:2C:0B:4F:41:C6:70:ED:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6b207e43-6c00-36bf-824a-0fafc790f393.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:1f:86:54:15:39:e1:26:3e:31:93:4a:a1:0b:52:73:24:3e:
20:40:98:b8:0e:3e:99:9b:c1:55:86:b2:cc:cd:74:07:59:da:
d0:3d:8a:5a:32:be:92:3d:a5:e8:c7:7e:b6:7c:39:9d:a1:46:
23:a3:40:92:c5:1d:3a:cb:0c:83:5d:0d:64:a6:3c:1d:d3:bf:
68:25:39:c4:67:7a:ea:ef:1b:12:3c:f4:5d:38:59:dc:73:a8:
b4:73:83:80:ca:f9:d5:15:ef:7f:67:7d:67:ab:fe:04:b6:43:
36:5d:dd:89:24:f0:3f:d7:81:54:d4:b4:af:c2:01:29:d0:e4:
51:dd:28:14:ce:5a:4a:74:9b:4a:71:ee:5d:6f:1a:26:e5:50:
ca:e7:30:03:a2:13:3d:de:87:ec:54:fb:d9:95:f1:cd:01:00:
ff:2b:ed:e6:b0:8d:ab:43:a7:60:1d:99:d7:08:52:53:33:c9:
51:c8:ce:8f:35:d1:3d:84:15:85:0c:4c:d7:8c:7b:b9:d3:04:
93:57:b6:34:2e:5b:45:ca:51:7c:3e:c1:d6:f5:e8:70:55:86:
66:57:e7:8a:41:7d:c9:19:83:eb:95:dd:e5:0e:61:e4:9b:72:
8b:89:4e:c3:b2:30:d8:23:0d:ec:02:4a:33:a7:22:84:34:8c:
c8:fa:65:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:56:57 2025 by rpki-client