Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/84ed1ded-9f34-3d30-a884-9c59235721c2.roa
File: 84ed1ded-9f34-3d30-a884-9c59235721c2.roa (raw, json)
Hash identifier: zhzGjvc3C7q03yFi7Kz5uw5Nfs7qx97Ecr3JJzuHTRk=
Subject key identifier: 57:8E:8B:59:4A:22:4D:6A:9B:C3:FC:2F:0D:C6:0F:E6:E7:C6:43:F3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F1476B7FED18221D240A68700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/84ed1ded-9f34-3d30-a884-9c59235721c2.roa
Signing time: Mon 29 Aug 2022 12:00:00 +0000
ROA not before: Mon 29 Aug 2022 12:00:00 +0000
ROA not after: Tue 04 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.4.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:14:76:b7:fe:d1:82:21:d2:40:a6:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 29 12:00:00 2022 GMT
Not After : Oct 4 04:00:00 2022 GMT
Subject: CN=58d0c1bb-12ed-44de-9dc3-83eb6eb34dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:05:de:38:39:8b:ca:6a:3b:35:1b:61:20:
b4:55:53:da:56:64:63:2b:59:76:7b:97:3e:d4:aa:
ab:2b:70:92:2a:2e:a8:04:57:2d:0f:d1:0d:aa:e6:
77:cc:f3:24:04:62:e4:bd:e6:60:f1:77:e8:18:17:
5d:7e:c9:18:be:8f:34:a3:29:90:f1:b0:c7:d9:18:
d7:ac:66:c9:3e:a3:b6:e7:76:3b:bb:a0:6d:45:0c:
62:86:84:07:e1:ec:2d:4a:9d:85:bd:8f:77:ff:3f:
a1:92:01:cd:3a:64:fe:63:a8:ee:03:5f:a3:2d:f6:
95:19:a0:f8:c8:09:b6:df:db:40:14:84:e9:78:10:
9b:93:47:22:51:e1:aa:2e:23:44:1e:ac:4c:1a:9b:
14:d6:06:73:6d:f6:be:ad:dc:07:3b:ff:26:22:1b:
77:55:87:d1:bd:14:5f:a2:5a:6a:89:30:8a:47:6a:
ac:ed:fc:4e:40:62:89:2f:ef:c1:41:f2:a7:57:86:
2b:b5:9a:ab:60:29:7f:97:d0:48:b6:59:b0:37:24:
58:a5:fc:8c:98:f8:9b:e3:56:f5:b8:9a:d5:61:1d:
c0:04:a3:a0:17:75:a7:e9:43:2b:3f:77:f2:c3:d5:
b1:36:df:71:65:95:d0:f3:06:aa:75:58:d0:6e:36:
b0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8E:8B:59:4A:22:4D:6A:9B:C3:FC:2F:0D:C6:0F:E6:E7:C6:43:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/84ed1ded-9f34-3d30-a884-9c59235721c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.4.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:af:20:67:54:45:2a:0e:f9:15:66:5e:35:94:9b:bf:3a:55:
28:d6:f4:95:dd:73:b8:d8:06:30:8d:20:ed:f4:1c:16:84:1f:
91:3a:8a:a1:40:96:fc:e4:68:aa:60:ed:b0:3d:ff:58:d3:9a:
ae:4f:bf:52:10:c5:3d:c8:6b:cc:c1:0e:ae:34:d9:74:5d:c9:
9b:a8:44:fd:3a:70:a8:0c:f5:dc:38:23:80:a6:f6:55:b9:39:
45:9b:b8:65:ef:94:6c:51:f4:b2:1e:5b:31:62:8e:16:f9:76:
a3:91:60:9c:7f:39:c7:d4:75:49:4d:94:8d:e3:85:4f:4b:50:
18:a7:c8:af:27:ce:b6:2a:fb:a1:4b:29:e2:33:3e:c4:5c:c6:
36:f2:7c:9b:db:fd:f2:9d:0e:3d:ee:9a:29:cf:c3:40:ed:da:
81:9c:8b:07:56:d7:4a:dd:2a:b5:69:83:de:09:15:73:26:26:
bd:bb:98:d2:16:26:c5:08:ff:08:b4:41:1d:21:5c:de:da:7c:
47:5c:da:27:a9:7c:c6:32:59:b9:5b:08:9e:a4:54:e0:9a:07:
06:16:8a:c4:a7:56:4d:89:31:99:89:23:0d:2a:b8:95:87:bd:
bc:12:51:5d:b7:7a:86:aa:37:39:76:54:17:71:e9:dd:04:ae:
5c:c0:48:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:01:07 2025 by rpki-client