Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/98b8fe3d-9f5d-3da3-ae28-4f5ed11af735.roa
File: 98b8fe3d-9f5d-3da3-ae28-4f5ed11af735.roa (raw, json)
Hash identifier: f6FyiUnZ0zBbm1tmoLYDxmyy/CtrKEslDwyBJOLqfKM=
Subject key identifier: AC:C6:58:F9:43:9A:7F:A4:B1:14:7F:0F:63:E6:B9:2F:18:2D:60:3A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CC80516D28D6C3328FA0DFB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/98b8fe3d-9f5d-3da3-ae28-4f5ed11af735.roa
Signing time: Tue 01 Feb 2022 05:00:00 +0000
ROA not before: Tue 01 Feb 2022 05:00:00 +0000
ROA not after: Tue 08 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 136.20.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:c8:05:16:d2:8d:6c:33:28:fa:0d:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 1 05:00:00 2022 GMT
Not After : Mar 8 05:00:00 2022 GMT
Subject: CN=9f00a133-8bb4-4bc6-93cf-ad228e2e28bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ee:76:33:cf:f5:97:c2:67:8f:a6:5b:9a:b2:
3a:dd:59:fc:4d:b6:2f:cf:5e:4a:45:ef:35:0b:20:
96:75:06:5d:87:50:10:c4:ed:7f:ab:b4:97:a9:3b:
d3:d9:1a:56:7b:c5:7d:63:0e:8a:f7:f9:8d:e5:65:
cf:3d:92:b8:44:2f:26:98:1f:83:86:08:99:b4:72:
21:13:c8:91:11:d7:e7:22:2e:1b:2d:38:6a:87:57:
30:05:bb:c2:39:d0:3d:6f:3f:97:d5:73:f9:72:4d:
7a:07:41:18:fc:5c:6d:7b:67:eb:5e:d7:cd:f3:72:
ca:79:57:dc:2c:bc:08:2f:1b:e2:82:e0:83:f3:81:
df:0f:e8:23:c4:ec:0d:95:1f:bd:fc:08:70:c4:c2:
ff:42:10:07:bd:cc:46:24:39:bc:06:24:7f:d6:ab:
93:4c:42:92:b1:dc:e9:16:e9:92:ee:f6:07:c7:32:
7e:19:10:0c:c3:d5:40:3e:97:71:3a:d8:fb:94:71:
5d:09:11:0e:e8:46:cf:34:c6:e8:64:91:5b:30:4f:
01:37:ce:fc:86:4a:70:a7:2f:9c:90:8d:2c:25:24:
ae:ad:5d:2b:50:02:64:f5:2c:ae:21:7d:c7:a4:d9:
dc:97:e9:b8:f3:12:22:f4:ba:b2:67:46:c5:3a:5a:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C6:58:F9:43:9A:7F:A4:B1:14:7F:0F:63:E6:B9:2F:18:2D:60:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/98b8fe3d-9f5d-3da3-ae28-4f5ed11af735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.20.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:57:3e:e8:fe:1c:70:5b:55:2e:e4:e4:15:9d:34:be:3c:6e:
8a:bd:bb:07:69:9b:4f:72:b3:34:70:73:b8:25:30:f1:d0:13:
7a:95:17:a0:ed:8b:b9:2e:ef:95:d9:37:db:49:ca:35:3e:ba:
b9:96:1e:4d:0c:67:99:2e:75:75:87:30:9f:be:18:bc:37:a9:
c4:50:82:37:7f:7d:88:16:f1:ef:c0:5b:8e:30:95:f1:4f:44:
45:8c:4c:fb:62:8b:69:f9:22:bb:6b:24:de:f7:78:df:e9:84:
43:f5:9f:ff:55:07:2a:47:ab:25:f4:8f:d7:06:60:2a:d0:79:
cf:6d:35:8c:85:b6:c3:95:10:6c:e3:80:a6:68:e6:f2:85:95:
00:cc:65:59:58:d5:8e:67:af:a5:ac:8b:13:c7:be:d5:bc:ca:
4d:90:d3:00:05:00:2e:0e:83:8c:d1:4e:72:ec:ae:ba:7d:78:
49:0c:d0:63:ab:27:8c:30:ae:6f:78:51:31:82:b8:16:77:ec:
bc:e0:06:01:94:4b:89:ca:d6:9c:b4:5a:e0:f5:a0:00:27:7b:
f7:c3:ea:b5:b6:69:62:93:6f:8f:bb:f9:ff:9a:32:c3:40:2d:
33:bb:bd:fd:b9:dd:9d:04:49:b5:a9:90:5c:ad:75:f9:62:b5:
e3:1a:09:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:50 2025 by rpki-client