Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c7dd9e6-b95e-30cf-802c-48bca8688624.roa
File: 7c7dd9e6-b95e-30cf-802c-48bca8688624.roa (raw, json)
Hash identifier: W/CeZfIoc99shp4MtEhIXR4Oug/WBQO9abQ0zC9GG3Q=
Subject key identifier: A8:6C:F7:35:15:E3:0B:BD:CB:21:3C:36:40:80:65:10:06:3D:18:D5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584099B4F6F3609479D1F73EFD20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c7dd9e6-b95e-30cf-802c-48bca8688624.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 136.20.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:99:b4:f6:f3:60:94:79:d1:f7:3e:fd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=3107623b-a8ea-43b7-830b-c045f9b5310e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:87:41:d8:21:7a:9f:c0:0d:4e:90:d0:c8:
98:48:03:6f:2e:c3:6e:5f:53:cf:99:44:11:3f:85:
0a:77:fa:de:0c:5e:ef:4c:e4:4b:c4:7d:3f:eb:6a:
c6:ea:aa:ce:8a:47:13:a6:11:85:1b:e5:29:d7:1e:
96:65:2d:27:15:13:a9:29:4c:d8:55:42:7c:1d:fd:
a1:52:8d:72:b8:e7:54:6b:90:f3:8b:d4:e7:aa:87:
6d:f0:cf:c9:48:f2:13:86:df:ab:aa:df:31:a7:ab:
ab:0b:ac:e1:95:31:86:6d:30:eb:0c:53:ab:97:a1:
43:24:23:af:33:3b:ff:81:43:e7:fd:cb:a3:0f:40:
d1:16:09:18:34:96:55:23:5b:9a:e8:af:8d:44:97:
4e:0f:50:07:b7:d1:4c:e1:76:c9:0e:75:36:f2:3b:
96:9d:ca:7b:eb:4d:2a:42:51:91:2d:21:42:6a:15:
cf:2a:b2:d7:d9:54:a9:8d:16:9c:7e:68:71:db:0a:
7c:cd:51:8f:f9:18:84:10:49:36:9f:d4:0e:0c:d8:
cf:be:55:0d:3b:1b:6b:92:0a:c0:88:87:ce:de:24:
57:8d:08:55:a7:8e:eb:1c:15:75:93:70:b1:87:03:
ed:ec:18:42:0e:74:3e:6c:b6:c0:24:91:51:ad:71:
bb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6C:F7:35:15:E3:0B:BD:CB:21:3C:36:40:80:65:10:06:3D:18:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c7dd9e6-b95e-30cf-802c-48bca8688624.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.20.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:ce:b8:5a:7c:0f:5a:e3:c2:11:1b:c6:eb:02:38:24:c4:a7:
3c:2e:90:7c:0f:8f:ab:0b:e9:02:13:23:c5:36:50:1d:91:74:
96:59:22:2a:f3:63:b5:59:d3:4b:0e:6f:28:68:c3:ea:e6:06:
1d:09:40:2e:ad:2d:89:4c:23:17:9f:23:4b:64:c1:cf:0c:13:
29:bb:37:71:4d:1e:f0:0b:12:00:85:94:8c:8a:94:b6:bc:5d:
c6:a4:a6:42:8b:15:88:a7:59:5d:35:98:65:d2:11:14:5e:80:
cc:80:56:00:3b:e0:f6:a6:6a:d0:5e:2a:84:03:83:97:ee:46:
f8:38:ae:bd:58:7a:cd:94:77:7d:36:dc:f7:90:64:ff:ad:50:
ba:20:44:5b:2b:5e:03:88:21:d3:c4:4c:7d:28:a1:fd:ce:7b:
12:23:c3:de:f2:57:b5:a8:1e:98:34:9b:af:1d:15:65:99:3c:
28:0d:85:e1:4f:ec:9d:2b:da:58:01:aa:f9:21:b0:52:20:73:
30:e0:2e:e8:d1:df:b8:e6:54:a0:04:89:c5:21:20:2a:ec:a7:
72:03:b3:ff:cf:b9:cf:e5:41:86:bc:69:1a:44:c2:10:71:42:
1a:b9:1e:5b:e8:c4:eb:c9:d5:cb:01:2e:b2:56:48:4a:32:04:
de:ee:b9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:42:00 2025 by rpki-client