Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9841d8b9-56ed-3fc5-ab0b-52ec490a512f.roa
File: 9841d8b9-56ed-3fc5-ab0b-52ec490a512f.roa (raw, json)
Hash identifier: p3xycNFYRuSb5mkoD9v5ziPK9E9z/IjOabiUuwb57PY=
Subject key identifier: 81:25:0F:EE:C2:66:DA:2E:5A:6E:48:65:7F:7B:8F:4C:B5:16:2D:6E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D460DB251E930D7C06EBB2900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9841d8b9-56ed-3fc5-ab0b-52ec490a512f.roa
Signing time: Fri 18 Mar 2022 04:00:00 +0000
ROA not before: Fri 18 Mar 2022 04:00:00 +0000
ROA not after: Fri 22 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.12.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:46:0d:b2:51:e9:30:d7:c0:6e:bb:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 18 04:00:00 2022 GMT
Not After : Apr 22 04:00:00 2022 GMT
Subject: CN=8a66bdd2-4ed6-4ba8-8fe0-108b1e22ba43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:07:84:cc:33:b6:97:22:7b:4c:d1:5d:64:9f:
13:8d:48:0e:67:3a:e7:e4:8d:07:47:15:58:45:c1:
8e:a1:9c:6c:63:b5:39:2d:1c:6e:1d:74:58:4a:2e:
c0:42:14:5a:97:ec:97:f1:01:01:0b:6d:64:93:64:
8e:33:14:96:60:d9:f7:10:a1:0b:bb:30:12:dc:4b:
ec:a7:53:65:0f:8e:4a:3e:c4:6f:c8:e7:98:aa:62:
93:f4:de:e8:d3:cf:35:38:3c:36:93:7e:07:d8:67:
0a:18:a5:1a:af:5b:98:bc:89:b0:04:48:d2:42:74:
cc:44:eb:b5:ad:b0:9e:0b:3e:82:5c:8e:2d:32:54:
95:f7:f7:a4:2f:2c:9c:29:f8:ab:b1:dd:c7:8b:44:
5a:92:ec:e8:2c:71:73:78:a6:87:22:e7:99:1b:a5:
40:1c:5c:d5:44:76:d9:62:b7:ec:d3:ed:1d:c2:28:
b4:f9:3b:29:a7:45:be:fa:32:77:7f:7c:69:b0:30:
5e:b2:64:be:a2:4e:52:6c:e8:6a:81:17:79:da:b6:
6b:3f:08:88:35:8c:22:17:f2:fc:43:b6:ca:77:85:
29:ad:39:9a:07:a4:ec:f1:56:ba:7e:b4:83:ca:df:
4a:6f:ac:16:f4:a5:d9:0f:8d:a5:3e:a1:5d:ac:cb:
0c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:25:0F:EE:C2:66:DA:2E:5A:6E:48:65:7F:7B:8F:4C:B5:16:2D:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9841d8b9-56ed-3fc5-ab0b-52ec490a512f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.12.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:d7:5f:d5:1c:f7:78:7a:17:50:3d:38:72:c5:3b:1d:2f:c5:
65:3e:8d:c5:1e:ac:75:4c:f1:67:04:57:c0:4e:6e:19:d9:e7:
46:30:43:db:4d:5d:11:41:ea:dc:b0:5e:c5:32:08:87:42:fa:
0c:0f:77:4d:87:ce:a2:af:eb:41:b4:75:d6:45:ab:94:12:4a:
f9:c0:ea:cb:b3:5d:73:f3:17:f3:8a:ae:8e:ec:e9:38:f3:50:
f2:b2:70:a1:6f:db:94:8e:56:ae:01:5b:e7:5c:6a:81:80:d2:
18:50:88:c5:fc:0a:fb:8f:86:9a:b0:74:3e:42:ec:be:d8:7a:
8f:4b:a3:9c:31:f6:e2:9b:f8:13:92:a1:13:b5:a2:50:98:65:
1e:78:b5:82:84:52:55:27:46:7c:99:af:d0:7b:81:4b:7c:aa:
eb:91:ab:29:5a:d2:c7:2f:11:77:fb:98:3a:e2:50:bd:30:74:
2a:b8:28:8b:6e:b2:93:8e:07:58:6a:db:bd:38:a5:b7:9c:9a:
a2:15:89:c8:9d:13:31:db:b2:8b:a2:57:44:37:f0:ce:03:64:
0b:96:43:bb:75:23:be:3e:aa:83:d9:a8:dd:43:2c:95:ff:32:
fd:df:25:1f:07:5a:56:b0:33:3b:3e:00:20:17:0d:2f:2d:23:
46:70:3f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:43:41 2025 by rpki-client