Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df14a0aa-36c6-33cc-9dd1-88d949082c64.roa
File: df14a0aa-36c6-33cc-9dd1-88d949082c64.roa (raw, json)
Hash identifier: 9WsGf55bOZyiq60qM6mj3ZMhl1ciUX2FS9nP6J1XbGU=
Subject key identifier: BE:1D:90:A8:4A:BD:63:B6:D8:6E:1E:22:BE:2A:61:E0:9C:BE:8E:52
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EC678929BAFB10C77546B9120
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df14a0aa-36c6-33cc-9dd1-88d949082c64.roa
Signing time: Mon 01 Aug 2022 12:00:00 +0000
ROA not before: Mon 01 Aug 2022 12:00:00 +0000
ROA not after: Tue 06 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:c6:78:92:9b:af:b1:0c:77:54:6b:91:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 1 12:00:00 2022 GMT
Not After : Sep 6 04:00:00 2022 GMT
Subject: CN=3f4cebd0-08af-4b67-9ee4-1ce558ecb680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a9:86:ee:7e:7e:ee:a4:e5:00:ad:a8:3b:98:
46:ea:80:4f:c7:06:51:60:22:97:83:f4:f7:3d:76:
2b:b7:b4:3e:23:fe:4c:22:da:5f:25:04:b3:fa:c8:
be:ab:8f:d3:67:a4:ee:07:20:fe:3f:23:6a:42:9f:
7a:e0:ee:c9:1f:4d:7c:9d:b3:8f:8b:78:67:aa:7d:
be:41:88:b7:9c:38:f5:3e:dd:fc:2b:bc:42:88:62:
93:b4:a3:ee:44:04:07:e5:4e:d6:a9:63:ae:27:75:
5e:76:c6:ab:c9:11:69:88:fa:a2:be:1e:5d:96:a9:
39:d8:09:52:df:75:91:36:f4:c6:50:6d:ad:90:6b:
e2:d7:3b:6d:33:22:ac:a9:7b:34:0c:f2:f3:17:13:
62:7e:d0:4d:a1:90:e0:f8:64:84:96:54:af:cf:84:
4b:f1:75:62:d2:99:34:9c:ed:13:f9:8a:14:4c:94:
14:d9:0f:39:63:d3:df:24:5f:99:73:e6:98:e5:40:
5e:69:00:4e:15:49:d0:ed:c4:a4:c1:bf:fd:56:24:
cf:a6:6c:ec:80:3a:5f:37:f3:67:af:bf:5b:bb:5a:
d5:1d:8b:c9:fb:38:08:8a:20:e8:8e:66:60:1d:6e:
e0:8a:44:fc:b4:b2:96:dc:07:8c:a5:83:58:69:12:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1D:90:A8:4A:BD:63:B6:D8:6E:1E:22:BE:2A:61:E0:9C:BE:8E:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df14a0aa-36c6-33cc-9dd1-88d949082c64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:43:02:33:a0:37:14:4a:b4:36:0d:c5:8b:ef:b6:e2:fd:29:
92:59:da:8c:42:1d:81:71:b7:a7:1b:e8:5d:0a:40:95:39:46:
02:62:ea:ec:96:9e:34:d3:64:db:f8:21:11:6e:1c:90:34:68:
6c:e4:10:05:f1:51:30:40:7a:0f:36:2b:c1:a3:2a:ca:ff:46:
ea:50:86:a5:22:d6:5e:e8:1f:c6:0f:53:c8:4f:8c:46:4f:cc:
07:27:e7:d9:2d:b5:ad:6b:f2:46:b5:18:23:a9:5a:5a:b7:7b:
a0:44:3c:e4:0e:96:54:98:43:c5:6e:48:47:55:25:b9:58:0b:
60:ef:b8:2d:bb:94:6f:6f:e8:1b:59:13:f2:f6:90:40:74:8b:
46:b5:56:6d:60:55:6d:5c:5b:99:d0:56:71:bf:5a:84:72:72:
84:16:99:f6:11:ab:b3:01:dd:be:39:ef:ff:0f:7a:6c:3a:15:
c2:13:66:7a:6a:e9:af:9c:5a:f2:a2:16:65:76:85:de:b6:58:
19:36:f9:54:d2:d9:80:bb:11:9f:37:08:ac:64:8b:fc:11:53:
a7:25:e0:9f:26:25:d9:72:83:50:a1:de:88:89:bc:f6:b2:92:
6b:c3:99:b9:82:67:87:4b:20:21:36:c4:5f:b3:92:b5:72:80:
9d:37:08:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:16:57 2025 by rpki-client