Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6d37cec9-4e56-35f6-a773-be82d2491b5b.roa
File: 6d37cec9-4e56-35f6-a773-be82d2491b5b.roa (raw, json)
Hash identifier: 8oJ2qb3BWogRpgKq+Vfkwfhvpu+F6EudQ9uHIypbuVI=
Subject key identifier: E8:46:92:33:57:C5:E9:00:9B:06:E3:F7:CA:3D:B6:A6:8F:B5:2F:E7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409AD7B217B9727B661F016900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6d37cec9-4e56-35f6-a773-be82d2491b5b.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.140.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9a:d7:b2:17:b9:72:7b:66:1f:01:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=d513d60a-45f5-46f7-b4ba-18770edc9389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:42:65:70:cb:a1:72:24:d6:32:dd:d5:f3:
75:30:33:b0:4e:57:c1:7b:71:9f:4f:dd:b9:bf:1e:
da:14:e6:51:9e:b0:b8:c6:43:13:35:84:65:84:62:
c6:86:19:46:64:30:46:2a:7f:87:9d:bc:01:b7:92:
68:8f:2d:20:b6:cf:f4:0f:94:f0:68:74:45:20:be:
e9:a0:94:5a:16:84:3f:65:a3:8b:db:34:2d:27:89:
df:0c:ef:4f:73:5d:06:63:c0:74:ae:3a:bf:92:b3:
c2:43:39:90:07:57:78:3a:c5:27:98:99:68:cd:8e:
73:7b:01:ec:17:ea:2b:d0:b8:0e:0f:6f:95:e7:d0:
ef:dc:d1:df:92:25:6f:35:35:63:1c:e1:71:54:36:
be:3d:5b:54:a5:5f:48:09:6b:2b:9e:ba:88:7e:59:
01:60:ce:76:99:3c:a4:d8:9c:89:f8:86:9a:ad:b5:
5e:1e:b9:86:31:87:c4:6f:96:73:05:a1:6f:4c:57:
63:d3:da:1e:16:ce:39:34:99:1a:d3:6a:1a:c9:3b:
a7:e5:d7:0d:98:57:af:36:67:2a:9a:c1:04:45:0f:
09:6b:2d:43:6f:21:66:ce:2a:fa:ef:6a:83:33:ea:
02:b7:8b:24:e9:b6:a1:9d:f7:62:0f:ac:31:44:aa:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:46:92:33:57:C5:E9:00:9B:06:E3:F7:CA:3D:B6:A6:8F:B5:2F:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6d37cec9-4e56-35f6-a773-be82d2491b5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.140.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:d2:75:83:31:c3:e3:fa:35:e2:58:dd:33:db:ac:54:3d:9f:
04:e2:13:9d:d0:87:b6:31:33:6d:ae:92:c9:bc:c6:0e:4c:9c:
5f:ae:21:95:9d:25:4d:75:3b:74:aa:41:53:f8:12:1e:a2:19:
a7:69:84:20:af:ca:1b:77:82:ac:dd:50:07:fa:70:ca:1b:e1:
e8:6d:c4:09:12:0d:17:d0:40:fe:f8:b8:6e:70:47:0a:65:be:
e0:e0:46:b1:6d:10:f2:12:fb:d1:76:21:53:e8:d5:72:d7:31:
f2:74:20:5b:87:a1:39:fd:21:a2:66:37:cb:89:f1:2b:6e:5b:
2a:cf:24:e9:c8:b4:43:b5:f2:95:eb:18:5d:9f:80:ae:23:32:
46:6e:47:81:10:b8:73:7b:fc:e5:63:09:ea:8a:fa:68:83:40:
62:4d:1c:20:3b:0d:d8:03:e1:68:95:ac:73:4f:a4:1e:73:4a:
93:b8:cb:49:aa:91:82:8e:93:a8:e1:ab:12:c9:0c:e1:26:fc:
55:ad:de:f7:e6:2f:96:7a:48:83:33:03:32:6e:70:d3:c9:47:
65:75:91:f0:8e:86:56:bc:a9:4a:f6:5d:ea:b3:bc:94:86:12:
68:67:33:bb:ef:da:18:d0:9c:d2:ed:00:a4:fb:f8:4b:ef:85:
89:0d:5e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:49:57 2025 by rpki-client