Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d70f99ff-a551-3038-942d-636cfbea1753.roa
File: d70f99ff-a551-3038-942d-636cfbea1753.roa (raw, json)
Hash identifier: OiikA8abbpkvqkt8dSKyT4XM0IIvLSXIvf+wCLjTcEk=
Subject key identifier: 68:5B:E0:0F:1A:66:F6:F4:21:BC:5F:F6:30:46:AF:50:29:8A:B2:5E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FAEFF5D07C379EA63C5895300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d70f99ff-a551-3038-942d-636cfbea1753.roa
Signing time: Mon 24 Oct 2022 12:00:00 +0000
ROA not before: Mon 24 Oct 2022 12:00:00 +0000
ROA not after: Tue 29 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 136.20.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ae:ff:5d:07:c3:79:ea:63:c5:89:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 24 12:00:00 2022 GMT
Not After : Nov 29 05:00:00 2022 GMT
Subject: CN=6ff483fc-26e2-4d5b-9156-70a75fc751c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:52:1e:6b:d6:b4:07:bc:ac:b9:5e:08:e4:d4:
6d:2b:09:88:9f:9a:da:ee:65:22:c1:bf:be:21:4c:
4b:a4:ff:2a:b4:a9:a8:76:81:44:2d:99:89:d4:03:
52:6e:88:5c:6f:b4:36:e5:1c:1a:a5:ae:58:c4:84:
92:5a:b5:a9:38:73:d9:33:02:c9:a0:53:3a:3f:b3:
7c:a2:be:89:7b:86:ef:1f:a3:57:c0:60:e6:f5:b2:
30:4e:15:55:fe:01:28:d9:c3:4e:f3:6f:9e:3b:43:
6d:66:8c:be:67:33:e6:10:c0:58:95:5c:c3:cf:f8:
11:fe:fc:7b:37:a2:3c:73:ae:30:b9:c9:a3:64:c9:
c5:d8:68:2d:dc:8f:0a:76:89:d4:28:16:09:f8:13:
9c:50:a1:69:7c:a9:c4:0d:57:3a:d5:29:ba:0b:f3:
27:37:ce:5f:34:a5:0b:a8:7a:c6:27:10:1b:8a:58:
3b:c6:1e:6e:0c:b2:7a:6f:42:80:51:89:dc:1b:b4:
23:06:cb:2c:5c:ec:0e:7c:41:27:e7:5a:ca:0b:91:
59:84:cd:64:df:50:54:75:2f:23:5b:04:5a:11:15:
1c:81:3b:21:bd:64:f2:98:79:15:57:23:18:b8:d8:
03:c3:0d:80:66:e8:8a:1d:61:24:23:71:2d:dd:60:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5B:E0:0F:1A:66:F6:F4:21:BC:5F:F6:30:46:AF:50:29:8A:B2:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d70f99ff-a551-3038-942d-636cfbea1753.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.20.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:3e:71:70:37:1f:eb:e9:86:38:c5:0d:7f:77:e5:ee:a6:cb:
3d:26:29:73:ec:33:0e:b6:0b:f4:3b:32:8e:4d:e9:ae:6a:40:
19:17:0d:02:f7:71:04:56:35:1a:e7:8d:d7:5b:3f:c6:35:9c:
c4:ab:14:7a:09:e8:4e:47:e6:3b:d4:13:0c:96:29:6c:d7:fb:
90:5f:7f:8f:e2:80:5e:70:39:8b:4a:74:bc:e1:56:1c:4c:62:
ed:eb:a8:08:87:5b:22:94:3b:ef:35:cf:0e:ba:6c:13:9c:00:
40:de:2c:75:5a:eb:39:6b:42:c5:04:08:9d:be:66:9f:27:cb:
01:39:67:0e:5a:e5:93:90:5d:81:1d:1e:61:33:e9:71:7c:58:
a6:8e:e3:54:fb:14:48:6e:09:c0:3c:84:91:62:0a:05:4b:da:
4a:68:a1:45:92:20:f3:04:4f:8e:dd:d7:b5:20:3f:dc:08:71:
b6:cd:49:d3:45:b6:9b:db:46:dd:fa:f0:cd:4c:fe:6b:da:7d:
6b:3a:94:f0:6a:0e:05:64:ea:19:a3:2f:30:d4:ae:d5:16:b0:
65:25:e3:15:e7:eb:bc:f1:1c:3d:08:0d:f6:25:6e:26:9e:c0:
be:32:8f:53:a4:4f:88:46:c9:ee:90:9a:30:54:e3:e0:ee:b5:
19:af:5a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:15:35 2025 by rpki-client