Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ee23104a-3561-3302-a2c6-c0fe8c362e50.roa
File: ee23104a-3561-3302-a2c6-c0fe8c362e50.roa (raw, json)
Hash identifier: yCueW8aRDFHA71Ne0iK8UzRj8gH1X+RFLxFgC5v/B/s=
Subject key identifier: EB:66:33:B9:80:73:C2:B1:35:71:E8:B0:49:0F:00:E0:6E:D6:FB:40
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584024C65CF4694C134C2BBA2C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ee23104a-3561-3302-a2c6-c0fe8c362e50.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 136.14.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:24:c6:5c:f4:69:4c:13:4c:2b:ba:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=c2630229-b8ec-4f5e-b5f7-0496e240f643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:72:04:45:97:cf:ba:d5:93:57:1d:b0:d6:
10:2f:95:52:86:11:5e:a7:86:d8:9e:c8:44:7b:13:
78:e0:49:0d:91:9c:a7:5c:d6:9c:74:9f:ef:2c:5a:
7a:d1:bd:dd:57:a7:da:92:dd:f0:30:5e:0b:3d:c2:
f8:38:0d:15:38:e2:95:c5:f7:f0:05:03:95:ae:05:
be:2a:e8:04:c7:13:9b:56:7f:6a:a5:1d:16:22:42:
f1:eb:55:1a:f3:86:3f:30:98:97:1f:9d:f0:cf:68:
a7:c0:fa:83:bb:2e:ae:6c:55:ae:a0:d0:52:3b:28:
ec:39:bc:b5:53:da:e6:c0:6c:9b:ef:1a:2f:7f:00:
5b:2f:cb:df:b9:2e:36:b1:bc:1e:c7:1a:51:60:3d:
50:6a:15:01:33:aa:bf:3a:32:37:d5:4b:dd:57:5b:
0f:df:46:27:ab:dc:7f:49:25:f1:aa:1b:29:97:81:
39:8c:2f:38:5e:b4:1c:1f:8b:fd:7b:ed:72:c1:86:
b6:2f:41:75:bd:63:db:eb:23:42:8d:0f:22:a9:8e:
35:35:fd:ab:61:c9:31:f4:9f:58:19:5c:4e:d3:e1:
12:46:7b:55:9b:df:28:47:fa:6f:6a:d9:eb:4e:39:
4e:98:0c:8e:eb:15:1f:f1:0c:c3:50:8a:b7:4d:27:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:66:33:B9:80:73:C2:B1:35:71:E8:B0:49:0F:00:E0:6E:D6:FB:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ee23104a-3561-3302-a2c6-c0fe8c362e50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.14.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:9d:9d:f7:39:31:7b:12:a7:ae:12:16:68:90:2f:78:23:fc:
7b:b5:5f:0f:f3:57:e7:94:02:d6:c7:47:9f:29:77:b5:fb:41:
ac:e7:f6:d2:ca:e5:fb:67:db:31:c1:c0:16:ba:fa:9b:5c:ff:
72:d1:d6:27:a6:00:ad:82:9e:88:09:a6:cd:72:79:0f:59:97:
be:ce:4d:0c:2f:25:9d:9a:2c:21:90:bf:e8:9b:d5:6f:83:21:
96:46:1e:5f:47:2a:f2:da:2e:60:07:22:e7:b3:5d:af:68:bb:
36:cb:f8:18:be:ae:bf:21:71:26:5b:ac:c0:ca:d2:a1:94:8a:
ea:51:3a:0d:b1:52:09:5b:e7:75:8a:8d:70:e4:93:67:6f:35:
ff:0b:12:3b:12:9d:cc:bc:e7:99:8d:ae:a1:07:03:6b:2b:43:
a5:00:9f:c2:ee:86:72:c8:f5:09:b1:cc:1b:2d:a4:5f:77:48:
1f:6e:26:cd:22:51:be:47:c7:c2:4c:0e:c8:f8:01:87:83:ce:
db:6c:aa:b4:a8:be:20:32:bf:0d:b0:c7:d2:d4:69:4d:7d:01:
52:ed:df:ee:0c:6f:ff:9b:1d:c0:c6:28:f8:ae:46:26:e5:79:
5a:03:76:8d:85:fe:e3:b4:69:b6:6e:3a:b2:8e:b7:07:b0:61:
a7:45:84:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:03:22 2025 by rpki-client