Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae8ab692-6902-34db-a41d-5143804efa67.roa
File: ae8ab692-6902-34db-a41d-5143804efa67.roa (raw, json)
Hash identifier: GhjSIEgQ8qBKA7FfVSXkX89yJd5UB0Qcch2PjsofkZc=
Subject key identifier: BE:5A:F8:FC:B1:0A:18:C7:9D:47:27:64:29:C5:2B:06:D5:40:D9:DA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E9F35EF2409A0038DECEBB5E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae8ab692-6902-34db-a41d-5143804efa67.roa
Signing time: Mon 18 Jul 2022 12:00:00 +0000
ROA not before: Mon 18 Jul 2022 12:00:00 +0000
ROA not after: Tue 23 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.13.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:9f:35:ef:24:09:a0:03:8d:ec:eb:b5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 18 12:00:00 2022 GMT
Not After : Aug 23 04:00:00 2022 GMT
Subject: CN=c94be13c-c24a-45ee-9ddd-065f08e6b714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:04:a0:01:ef:06:6a:e6:6e:5e:e0:de:0e:f2:
27:b6:90:b1:47:cf:be:53:56:01:32:09:6c:8c:7e:
10:b8:bf:e8:0f:05:85:fc:d3:a1:64:f6:30:80:2d:
4c:0e:f5:45:90:26:9b:89:2c:40:c4:62:a6:dd:5c:
18:a9:ec:bc:a7:8a:86:fb:a7:3a:88:96:ab:64:2e:
26:dc:ae:df:2d:ce:49:01:aa:ec:80:c0:7e:23:42:
2b:53:e5:13:f8:3b:fe:91:e4:27:56:2c:a6:ce:19:
e1:1a:75:3f:90:a1:d1:9f:b4:58:1a:f6:e6:6a:ef:
fd:3a:35:d5:8f:48:57:41:72:40:eb:ac:ac:1a:c7:
6e:da:2e:44:37:ea:d7:45:1a:7e:48:8e:6c:ab:60:
99:53:b5:9f:04:45:a1:46:4d:83:26:15:75:62:27:
c1:f9:05:07:5b:6f:76:e6:93:2d:11:4b:0b:72:4b:
de:6b:1c:c2:d2:93:8b:78:86:45:a3:1d:ff:9f:fb:
ce:ca:ce:87:af:84:44:af:6b:6b:8c:29:6e:67:23:
26:5b:5f:30:8d:57:81:d5:25:a3:e5:ff:70:dc:45:
49:72:50:8d:37:db:14:e2:99:10:5d:ac:4e:44:46:
c5:07:e9:c2:f4:f1:d0:ec:e9:e8:c0:3a:15:e9:8f:
80:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5A:F8:FC:B1:0A:18:C7:9D:47:27:64:29:C5:2B:06:D5:40:D9:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae8ab692-6902-34db-a41d-5143804efa67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.13.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:09:b1:15:fa:8d:ed:65:94:f1:ba:37:d5:c1:8b:18:87:39:
6b:67:d4:0d:bc:50:d0:5b:fd:13:e4:5b:f7:82:66:46:44:52:
26:7c:73:6e:a6:70:ab:4b:de:63:5a:08:d5:3e:9b:b2:44:39:
17:cb:13:7d:3b:2b:8a:88:e3:29:8d:88:9f:ee:6f:dc:b1:62:
a8:c3:26:21:80:39:de:ea:0a:ea:c6:89:78:af:9d:56:0a:84:
07:c2:53:d3:85:9c:77:4b:b2:e2:c6:6c:a3:6e:a9:0d:94:ed:
79:05:3e:80:ed:68:b1:72:d4:f0:6d:fb:31:1a:ad:51:b4:48:
12:a0:8f:71:14:cc:90:46:65:ec:f1:87:40:53:02:e9:1f:a2:
5e:06:1a:95:cb:25:9a:a9:28:07:aa:a9:b2:e6:31:e6:66:82:
09:34:e8:99:ce:f3:91:3b:f3:7f:ee:12:37:65:18:05:63:35:
fb:51:c5:8e:9e:56:3c:90:a7:e9:f2:1e:1b:92:9e:2f:49:f8:
0f:9a:53:ca:a2:fe:f4:a7:f3:5c:86:97:1f:74:43:76:eb:93:
29:0a:70:d3:42:5a:c1:7b:e9:69:76:4a:e5:66:3e:b5:fc:77:
d2:78:27:a1:72:c9:87:ec:21:b6:cf:71:d6:77:83:b2:85:ed:
43:af:f3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:31 2025 by rpki-client