Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/90131457-899a-3c10-b1d8-c3a87d1be575.roa
File: 90131457-899a-3c10-b1d8-c3a87d1be575.roa (raw, json)
Hash identifier: NnBG2fsqZJpqNu+BPVmRO4rTovXJroi9yRWQ0JkyfRU=
Subject key identifier: A9:B8:0D:2E:31:45:BF:68:C9:0E:E0:35:29:C6:F5:BF:28:1E:93:A0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DB2B2CDC74612E7DE0D27F200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/90131457-899a-3c10-b1d8-c3a87d1be575.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 31 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.134.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b2:b2:cd:c7:46:12:e7:de:0d:27:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : May 31 04:00:00 2022 GMT
Subject: CN=fed1e9dd-5ff3-4882-b055-d1cae7921c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:09:c9:85:11:32:6d:f2:c8:c5:40:11:a8:f4:
a4:93:3c:eb:d3:f0:41:66:57:35:fa:1b:dd:e3:81:
67:d0:be:93:6a:52:b5:ee:7c:aa:ad:a1:a5:72:d3:
98:1e:bc:b8:38:5e:7a:3f:1c:0d:7d:4e:09:2b:93:
30:3f:d8:a0:80:47:41:40:ea:52:d6:6c:98:9c:3a:
7d:04:0f:d9:f4:b8:1f:98:e7:a4:87:87:f0:5e:fc:
bd:04:2b:3b:6a:26:72:2c:12:33:51:a1:61:6e:69:
af:e3:8f:51:c2:ff:cd:4e:30:d3:57:98:06:ae:85:
e5:96:6b:a7:21:94:86:86:e4:26:1d:e9:11:22:92:
7c:11:b9:cf:80:fd:ac:39:a9:a4:7f:05:f4:ed:c8:
2a:e4:46:85:7c:6d:f8:c7:37:5a:6b:e8:00:1c:dd:
0d:ba:59:55:59:f2:e0:66:17:89:5a:4f:73:a8:eb:
b9:fb:d1:e7:f5:72:d0:6a:88:3e:b5:13:ff:7c:44:
e9:b3:4f:07:95:bd:70:4b:d4:aa:d1:4f:da:ab:c0:
46:54:91:28:29:24:84:ef:6c:b0:76:5d:c4:59:d1:
30:b6:f3:02:24:6b:16:f2:70:c5:06:45:2f:0a:7a:
8b:41:fd:ea:a5:dc:3c:ee:66:50:ab:60:a6:11:58:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B8:0D:2E:31:45:BF:68:C9:0E:E0:35:29:C6:F5:BF:28:1E:93:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/90131457-899a-3c10-b1d8-c3a87d1be575.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.134.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:40:bb:d0:d1:cf:f8:df:ff:22:59:3c:67:45:86:92:68:25:
ae:e3:cb:3f:c3:29:8a:46:99:e8:54:cf:fb:d0:c4:2a:4e:72:
ef:a1:a1:a6:23:f4:17:3f:d9:13:8f:c4:bf:f6:0b:29:ed:aa:
d2:87:23:1c:1f:8c:61:f8:ea:92:6d:a6:f5:9c:20:63:c6:b7:
fc:46:c4:fc:8c:00:ae:85:d7:04:3a:67:74:a5:24:32:d9:5e:
82:6c:8e:b0:cb:0d:d1:9d:97:5a:8d:4f:ad:e4:40:6a:b0:1c:
0a:74:86:53:98:65:d8:7a:0d:a6:b1:bb:43:fa:5d:25:7e:0c:
16:b4:01:ab:fa:41:ec:1f:c3:f5:9f:ff:45:d4:e0:2c:cd:ed:
5d:85:2a:3b:d3:6c:69:08:42:6e:77:32:78:fa:fd:7e:30:0d:
c0:9f:c3:37:da:fb:e6:f1:36:46:be:9b:40:5e:c5:d8:e3:62:
b4:58:d3:a0:0f:d7:d4:af:ca:5a:f7:b7:51:81:6a:b5:fd:ee:
f3:f7:0c:54:5d:04:e3:b1:c8:21:1b:3d:eb:4f:d5:ad:eb:78:
b3:45:07:b8:12:0f:72:55:15:c9:f3:2d:14:72:83:d9:b9:05:
ef:10:b9:1f:ae:f1:eb:42:5e:a6:d0:c5:60:54:cf:cb:4c:4a:
f4:cb:51:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:05:35 2025 by rpki-client