Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b4cce48-e888-372b-96a7-492509272a2e.roa
File: 9b4cce48-e888-372b-96a7-492509272a2e.roa (raw, json)
Hash identifier: /MEOfAY3S0PrEqlVwKL7rpsm5jfiv0kI+vX6we86Il8=
Subject key identifier: 67:E8:2B:79:D8:2D:A2:52:C1:4C:4D:30:71:DA:E4:30:10:1F:FA:41
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CA0E7CFB42DBA6D2B87633040
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b4cce48-e888-372b-96a7-492509272a2e.roa
Signing time: Tue 18 Jan 2022 05:00:00 +0000
ROA not before: Tue 18 Jan 2022 05:00:00 +0000
ROA not after: Tue 22 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 136.134.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a0:e7:cf:b4:2d:ba:6d:2b:87:63:30:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 18 05:00:00 2022 GMT
Not After : Feb 22 05:00:00 2022 GMT
Subject: CN=13a1b502-dce1-45bd-84d3-b4ff0f843526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:70:8c:29:74:14:74:bf:1d:44:aa:2f:b1:
0e:04:c4:db:74:1d:d2:b9:bf:63:11:a4:e4:ac:76:
91:51:2b:95:c0:09:7b:2b:2d:36:da:26:58:05:85:
4d:8f:02:48:0d:35:d0:58:29:c8:d2:99:e8:85:07:
7a:0d:a9:fd:51:c0:af:a4:d0:29:1d:d4:68:65:95:
3b:fd:07:04:7a:db:52:44:1f:55:65:dc:62:a3:e8:
22:fa:57:1b:cb:59:98:ab:d7:49:b5:b3:b4:04:1e:
a2:8f:ff:01:2a:e1:b5:4c:dc:01:fd:e4:94:b4:c7:
7a:44:71:43:73:eb:c0:e5:01:4c:e8:0c:b5:6b:d5:
31:cc:54:b6:b1:9d:ff:f2:e3:ac:96:88:ad:5b:ba:
ca:7e:29:b5:d8:cd:02:2d:5f:09:05:2e:0a:12:56:
42:19:f6:74:66:39:d8:28:54:49:79:2c:d8:03:bb:
8f:e6:f6:35:92:62:52:47:61:d8:c1:b0:70:5b:dd:
47:39:57:16:bb:9a:cf:b0:f8:8c:bd:1b:9b:04:a3:
70:e6:fc:9d:d5:84:d0:6d:fa:b2:86:9e:42:8d:71:
11:b6:d9:a1:66:ba:45:1d:51:0d:d0:c9:0a:ac:b0:
9f:b6:1f:80:4d:e3:0a:56:94:70:79:1f:35:38:18:
a0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E8:2B:79:D8:2D:A2:52:C1:4C:4D:30:71:DA:E4:30:10:1F:FA:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b4cce48-e888-372b-96a7-492509272a2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.134.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:46:9c:c0:ab:b4:c2:5e:2f:dc:36:a7:e8:44:40:9e:bc:b9:
6c:0c:13:d1:8a:92:bf:12:20:9d:66:a3:f4:4c:a2:07:c3:03:
5f:f9:24:50:ee:93:8b:7a:b5:04:b6:07:44:64:13:3f:53:85:
b3:e8:82:85:77:1d:0b:27:c3:28:0b:91:72:c1:91:2f:b4:90:
81:70:33:98:96:d7:93:8f:e4:30:ea:34:36:4e:3e:18:45:82:
3a:4a:39:78:34:6d:8a:4d:59:f1:d2:cf:11:09:14:5e:fc:82:
d2:13:87:9b:b2:b8:0d:98:52:ca:70:7c:a8:d7:42:7f:88:5d:
be:a5:0e:ff:0f:52:8d:5f:0f:63:3c:b7:f0:c7:25:04:4e:e8:
29:26:57:be:39:00:a4:aa:22:a1:9a:d4:ad:2b:4b:51:a9:64:
dd:dc:ec:dc:3a:28:73:02:f6:f0:20:a1:eb:d4:17:56:a8:56:
2f:af:ad:ab:70:01:97:cb:6a:cd:0a:68:9c:46:cf:cc:8d:2e:
79:25:4d:5e:58:bd:4c:6e:22:1e:d6:a2:24:a7:de:25:1f:06:
3c:9a:11:be:2e:29:69:22:9e:f7:9c:f2:d0:c7:37:f6:57:80:
73:0d:ea:a7:d3:d0:fc:55:14:b7:14:49:dd:b8:87:ae:ba:5e:
9f:b5:41:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:43:02 2025 by rpki-client