Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab2f0414-37fe-34c6-b410-b32404e3251b.roa
File: ab2f0414-37fe-34c6-b410-b32404e3251b.roa (raw, json)
Hash identifier: y2mryNElVBZ3n60IQ243VvtS1HFGbEuRApeT6R5/aGI=
Subject key identifier: 83:BD:B0:1A:E2:C1:B3:86:7D:4F:BF:B3:22:69:FF:91:6A:81:6C:DD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E29FCB79D25CFEBC6B2871700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab2f0414-37fe-34c6-b410-b32404e3251b.roa
Signing time: Mon 06 Jun 2022 12:00:00 +0000
ROA not before: Mon 06 Jun 2022 12:00:00 +0000
ROA not after: Tue 12 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.140.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:29:fc:b7:9d:25:cf:eb:c6:b2:87:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 6 12:00:00 2022 GMT
Not After : Jul 12 04:00:00 2022 GMT
Subject: CN=071ad299-2984-4ae8-b718-847d23780889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9f:88:28:a7:46:f2:8a:19:5b:31:fb:65:ab:
73:96:9e:1c:35:ba:be:ad:d2:12:6d:77:e6:5d:99:
4a:8c:97:60:64:85:ce:5a:d5:0a:5d:aa:b8:66:68:
ca:9d:79:05:f3:08:ff:07:c0:e6:29:fd:ab:d1:fb:
1a:95:d6:f2:f3:67:34:be:b0:22:34:dc:38:90:a4:
fd:99:25:56:c9:a2:92:34:b1:56:af:80:b7:0e:d6:
7f:30:6c:f0:a4:f0:ca:8f:2e:d2:25:50:50:1f:0a:
3e:6a:ce:55:18:81:e5:f7:c9:8d:5b:5a:74:68:07:
a7:75:4c:b0:63:8b:51:32:c2:f4:7a:04:f3:40:21:
11:fe:5a:bb:cf:2f:4c:d2:d2:55:4f:e2:f7:3c:07:
3b:60:e0:14:67:3d:1d:ca:38:ea:b2:b3:be:71:d0:
dc:3a:1e:da:6a:47:f1:74:1d:27:67:b5:4d:8c:6c:
46:9a:6d:e0:50:03:9a:d3:11:63:e5:91:86:42:83:
db:0b:6d:b3:b4:64:30:ab:5b:02:06:bf:7a:ae:c6:
c9:97:e5:b4:fb:b3:b3:b8:4a:4b:1e:2d:13:68:09:
8f:7e:70:88:74:e1:69:25:0d:d0:09:3b:d9:3a:16:
6d:a1:00:b4:74:43:5f:64:1b:b5:27:08:88:7d:00:
a3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BD:B0:1A:E2:C1:B3:86:7D:4F:BF:B3:22:69:FF:91:6A:81:6C:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab2f0414-37fe-34c6-b410-b32404e3251b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.140.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:ca:87:62:79:4d:56:fe:1a:27:76:94:f7:76:09:f0:0d:0f:
85:c8:0e:fa:68:09:7d:54:9f:6a:d4:45:b5:59:ab:b5:da:80:
05:61:bd:3c:bb:5b:ba:ae:ab:33:a0:6b:73:b3:74:a5:14:1a:
b4:77:44:11:a9:b7:6b:ce:94:a9:65:ae:80:49:11:bc:4e:5d:
fe:4f:9d:29:15:42:a4:c8:3a:f5:46:b7:e5:79:e8:60:95:0e:
b2:92:62:06:67:ad:9c:29:3a:1d:3b:8a:a9:62:23:53:b1:fe:
a6:ca:fd:c0:28:04:ff:17:67:76:38:30:19:b0:24:c0:f7:af:
44:a8:a7:58:56:22:29:c9:09:c1:94:e1:40:31:65:f4:94:d0:
db:fc:5a:51:b1:52:00:30:fa:38:17:ff:bf:5e:3b:81:80:c5:
42:96:3c:3e:54:d6:cc:c5:e5:71:30:de:7f:70:0d:70:a8:0b:
f6:e3:39:9f:48:fb:56:e3:01:f7:94:5e:b5:73:eb:58:06:d7:
e7:c8:92:37:1a:7c:73:a2:28:0e:8b:a5:21:00:1b:eb:1a:ad:
90:dd:71:d9:46:aa:b3:b3:44:a0:d0:08:0d:fd:df:17:9c:07:
54:be:11:3c:f3:ea:79:72:ec:0b:73:4b:bd:e4:d1:e3:c4:7d:
f9:f5:47:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:24 2025 by rpki-client