Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d886d9dc-2718-3571-b6ed-78b2894e9c02.roa
File: d886d9dc-2718-3571-b6ed-78b2894e9c02.roa (raw, json)
Hash identifier: +rWh+aJtVpdMabfxnaSJ8EYNhsZersCBm5pmV1BrGIc=
Subject key identifier: 30:20:0E:CB:91:55:CE:A0:24:A5:D6:71:ED:89:85:A2:A3:FF:AE:9B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E51034BA5DEFCB226375C80A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d886d9dc-2718-3571-b6ed-78b2894e9c02.roa
Signing time: Mon 20 Jun 2022 12:00:00 +0000
ROA not before: Mon 20 Jun 2022 12:00:00 +0000
ROA not after: Tue 26 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.3.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:51:03:4b:a5:de:fc:b2:26:37:5c:80:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 20 12:00:00 2022 GMT
Not After : Jul 26 04:00:00 2022 GMT
Subject: CN=a21563ad-57e3-4ec6-93b3-9d249d61b1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2c:41:a4:63:99:91:56:76:e9:84:7f:fd:54:
6e:8b:a6:f9:f5:93:05:34:7f:56:ba:35:67:9a:d3:
4a:84:b0:f9:e7:15:3a:d1:57:23:a9:5f:62:d2:c1:
1b:80:d2:9e:e8:18:08:ae:f1:d3:81:fd:35:1e:6e:
9d:cc:66:e1:61:64:3c:70:06:3f:f5:71:7a:33:77:
de:b7:b1:53:20:d3:9a:00:8b:8e:49:6a:41:91:bd:
09:d2:61:ee:36:eb:24:a3:4a:9d:3a:24:36:92:1f:
3f:4c:6b:2e:42:76:35:7a:77:5d:99:35:01:86:c0:
7f:d0:08:e6:17:4d:43:cd:18:38:ff:35:b3:ef:5f:
de:c2:53:38:6b:17:b8:86:d2:ae:a8:a8:77:7b:d4:
61:c8:23:33:6e:9a:29:1d:83:d0:ec:fb:ca:c7:ec:
d4:d8:81:ae:81:fc:01:37:ad:a7:48:ce:c9:e4:51:
f9:db:07:bb:8b:10:c1:32:fc:7d:73:7c:96:01:ed:
7f:11:8a:19:e3:87:74:24:29:25:b6:2e:89:e1:92:
26:2f:b0:8a:63:45:57:96:81:ef:5f:d0:38:75:63:
b8:9f:e9:02:e4:1e:75:9a:16:6d:bd:80:32:f8:b5:
1f:7a:3c:bc:2f:33:f0:fb:cd:af:cf:c9:a8:d7:91:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:20:0E:CB:91:55:CE:A0:24:A5:D6:71:ED:89:85:A2:A3:FF:AE:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d886d9dc-2718-3571-b6ed-78b2894e9c02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.3.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:0e:84:58:99:15:c2:ab:bd:d8:ae:a4:fd:bc:5a:05:24:b9:
cd:d8:f9:e1:fe:e7:6a:cf:ac:13:58:76:2a:fb:d3:6e:79:5a:
32:94:24:93:8a:08:61:2d:41:8a:90:36:5a:46:f2:7f:a3:1a:
55:26:ba:c2:d1:d3:80:35:33:e7:b6:89:f2:50:22:39:64:c1:
25:3f:bc:24:48:be:e1:7b:a2:40:45:fa:9f:22:bf:04:24:86:
19:74:e6:00:f9:7d:60:19:27:b3:16:c6:8d:42:01:93:5c:b4:
7b:75:21:f9:10:77:4c:57:75:6f:8c:1d:c8:54:c4:a9:f2:39:
93:27:e4:80:e3:c4:71:a4:94:bb:16:35:de:95:9b:25:05:dc:
dc:6c:08:5d:11:45:31:90:1b:64:c9:0e:8d:36:ee:20:c0:6a:
9c:f5:d3:35:e2:ef:b9:bb:25:8a:62:e2:20:04:5e:bc:5c:dd:
b4:59:82:fc:c5:04:25:cd:15:1c:94:76:ac:33:be:6f:26:74:
a5:38:76:30:0d:89:38:4f:c5:4c:44:8e:30:ad:fb:92:4e:93:
65:4c:f3:27:f5:c9:0c:f4:89:34:3f:7f:6d:f5:ba:86:1c:71:
6f:b7:97:b7:be:eb:46:54:e9:c3:68:80:c2:35:5f:06:e8:6d:
fa:f7:7e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:15 2025 by rpki-client