Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7dc302b8-1064-32d0-9f1a-56da30f94fb8.roa
File: 7dc302b8-1064-32d0-9f1a-56da30f94fb8.roa (raw, json)
Hash identifier: t+RZraKgHwRKGOvZUcZlJIBj9LLr0kyaQQ5SB05HPSY=
Subject key identifier: 83:15:51:D5:49:E7:4D:1B:8D:95:70:33:5E:99:EE:B0:77:FB:F4:6F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FAF6868568E6F106740495200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7dc302b8-1064-32d0-9f1a-56da30f94fb8.roa
Signing time: Mon 24 Oct 2022 12:00:00 +0000
ROA not before: Mon 24 Oct 2022 12:00:00 +0000
ROA not after: Tue 29 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 136.14.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:af:68:68:56:8e:6f:10:67:40:49:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 24 12:00:00 2022 GMT
Not After : Nov 29 05:00:00 2022 GMT
Subject: CN=f17a9503-7434-4122-96b0-a17fbe4a8cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:9f:65:1c:65:bb:b8:c6:dc:78:56:8a:34:
a2:8f:6a:04:39:fa:b9:c0:18:e8:4d:e0:af:00:ff:
b6:7a:33:4e:94:fe:34:a9:85:b1:05:68:70:d9:4e:
ab:af:f7:c2:e3:56:7e:2a:04:a8:1b:af:2a:78:03:
f8:c9:6d:7a:9f:43:41:ce:ef:9c:de:6c:c0:36:5f:
5c:d1:41:a6:26:e9:ef:79:38:8b:7b:41:5b:3b:73:
f3:f8:ba:26:60:87:f1:bf:0d:9c:9c:31:7d:97:c9:
8a:13:c5:39:5f:fb:76:37:e9:81:a3:77:42:44:fc:
02:a9:44:03:55:e2:fe:bd:d9:1c:12:3b:4e:76:30:
df:b2:8b:ab:0e:dd:86:4b:98:a3:aa:12:52:ce:78:
a5:f8:80:95:47:d5:65:8f:44:1e:1e:de:db:94:78:
dc:89:af:74:69:4c:b6:13:59:0f:3e:13:37:73:a0:
9e:ce:f3:75:6e:3a:50:81:7e:bc:20:c6:ec:e1:eb:
f6:9d:82:83:f1:0a:02:2a:ae:8c:e1:b6:69:fb:52:
d0:4f:77:e1:bd:84:1b:d8:d3:b9:de:f1:77:91:fd:
d5:f1:d0:09:c1:ad:13:70:ea:d7:12:2f:73:56:ed:
e2:64:5f:63:99:7e:7d:cc:a8:71:55:80:7e:f9:cc:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:15:51:D5:49:E7:4D:1B:8D:95:70:33:5E:99:EE:B0:77:FB:F4:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7dc302b8-1064-32d0-9f1a-56da30f94fb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.14.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:cb:8a:2b:dc:35:36:c2:45:1a:28:51:4c:e5:7d:35:1c:a0:
0c:9d:2d:89:6f:b1:c6:c3:6f:8a:9a:65:8c:4c:f8:6e:6f:21:
4a:4e:22:84:a1:f8:73:f0:06:28:de:a5:a7:5b:6e:b2:3f:4d:
ed:3c:9f:f9:c9:8b:a4:0c:9f:7b:ca:eb:2a:d5:d7:f5:63:79:
56:fd:c2:56:3c:1a:71:37:eb:2a:47:15:67:a9:69:e1:b7:0c:
62:b4:99:f6:b8:48:dd:8a:b0:cf:72:c7:ee:1c:37:0d:b1:cf:
ba:f1:b3:85:09:fe:da:6b:df:f5:0c:d1:5f:d8:70:91:db:dc:
ce:31:28:c1:48:99:d5:89:79:96:d8:de:b7:95:95:2f:e7:a1:
0c:8f:4a:48:b5:1d:c0:16:f0:b8:e3:68:bc:97:2d:6e:58:75:
35:6e:d2:21:e9:09:c6:e2:53:03:e1:e7:ed:dc:e9:ad:f2:68:
74:75:cb:ee:64:97:fe:cc:ff:37:e7:08:ec:90:c0:74:4c:96:
ae:81:ea:c3:92:5e:1e:45:6c:bc:b6:87:3a:99:3b:e0:17:3c:
90:ec:38:e3:29:e1:a1:b1:73:c6:e1:00:b5:ab:47:17:01:d0:
92:f8:e0:98:e8:b6:46:13:22:90:b3:de:9d:09:5c:37:e0:ba:
36:4a:3f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:43:49 2025 by rpki-client