Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/93243711-fa90-3521-8db5-d13fffc9836c.roa
File: 93243711-fa90-3521-8db5-d13fffc9836c.roa (raw, json)
Hash identifier: x3CpFVbi7E54bdXu+AWTAZyrA8WVdEAl1G9+DLESx+8=
Subject key identifier: 1C:F9:D3:C6:51:1B:81:DF:69:B8:0A:4D:A3:60:43:FC:FC:4C:39:EA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F1485F2F9031492C5EA107780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/93243711-fa90-3521-8db5-d13fffc9836c.roa
Signing time: Mon 29 Aug 2022 12:00:00 +0000
ROA not before: Mon 29 Aug 2022 12:00:00 +0000
ROA not after: Tue 04 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.14.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:14:85:f2:f9:03:14:92:c5:ea:10:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 29 12:00:00 2022 GMT
Not After : Oct 4 04:00:00 2022 GMT
Subject: CN=ca0b6fa4-20d2-479a-99e1-ef005dd062b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ba:c7:ea:40:c8:06:aa:11:85:a7:5a:21:18:
96:36:37:47:ef:7e:27:58:30:08:46:f8:4a:d2:8e:
47:7f:e8:3a:bb:b4:d9:20:80:cd:5a:b1:e1:b2:05:
d6:64:cf:da:02:25:f1:e9:ad:f8:b5:02:99:3c:1f:
b7:54:52:af:d6:99:4e:04:b8:99:88:ef:4f:02:66:
5e:a9:f6:88:13:69:b2:07:84:35:e3:fc:84:00:71:
43:db:45:4e:67:63:69:f7:ca:56:b5:a1:32:ba:99:
6f:b5:26:07:f6:cc:36:7a:80:b5:9d:3a:5d:69:c5:
34:b3:92:7e:90:db:03:50:1f:2f:4f:f4:41:98:9b:
51:e4:d3:e6:5a:ff:d1:8c:16:19:e3:1c:bd:c3:a0:
08:35:18:57:1c:3d:11:98:3c:02:81:da:8b:cb:40:
30:fd:20:7e:be:80:2e:47:69:1a:e6:2e:57:3c:b3:
70:d2:ab:08:1b:46:30:ce:83:88:75:2d:b0:c9:c2:
58:8e:a3:0a:75:5d:ee:97:5f:6a:c6:b9:45:35:d1:
cf:b5:ac:7f:35:ca:4b:49:33:f3:af:c4:84:9c:57:
18:7b:91:f8:d4:34:30:45:d4:d4:0f:3a:1b:93:e8:
c5:37:1a:f1:3a:48:a4:d8:e8:fa:2f:b3:71:24:84:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F9:D3:C6:51:1B:81:DF:69:B8:0A:4D:A3:60:43:FC:FC:4C:39:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/93243711-fa90-3521-8db5-d13fffc9836c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.14.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:11:1d:e8:b6:06:87:86:66:64:63:2e:0a:4d:ec:8e:18:10:
d3:6b:35:f3:73:1a:0b:75:08:b9:00:63:a6:8b:9f:10:fc:33:
46:e0:c4:1b:8b:ec:a1:61:69:8e:16:de:4f:73:fb:de:a2:2d:
da:9c:27:6b:87:06:80:8f:60:e2:05:ff:f0:9b:a5:a2:6f:14:
aa:ed:48:a7:ad:e1:2c:a2:ca:d4:b2:10:e9:8c:52:70:29:14:
5a:2c:90:4b:f8:71:a3:20:48:3f:e7:84:6a:2e:80:9a:9c:98:
df:f8:46:9b:16:eb:a6:2b:a6:c2:72:28:f2:26:ca:aa:d4:9c:
db:2d:b1:0b:8c:ae:4e:37:26:1b:9f:45:71:44:64:13:ae:5d:
a7:c0:aa:1c:0c:4a:a4:b6:24:9e:c5:f7:be:4c:84:d1:0a:03:
80:63:cd:05:5c:2a:73:1f:7b:0e:0d:bb:ae:6e:4e:af:42:2e:
00:fa:9e:b8:15:84:e8:40:e9:6b:2d:91:cf:b6:bb:7c:cb:33:
da:8d:7a:01:33:04:d9:b0:a5:0c:0e:e1:fb:49:ad:d7:7c:dc:
55:3e:6b:fc:82:8d:f6:42:ca:f6:91:6a:6f:22:04:f4:bc:aa:
16:b4:f7:e0:dc:ca:bf:6c:da:5c:7c:21:d8:46:2b:83:b9:0d:
2f:08:3e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:48:23 2025 by rpki-client