Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f4bf4b91-0e9e-30de-98ef-9a04041ba130.roa
File: f4bf4b91-0e9e-30de-98ef-9a04041ba130.roa (raw, json)
Hash identifier: I7R7Mk8IoKLVhvl9uT/EdcJ+aeEWNHKm5Cjaz7XGAtc=
Subject key identifier: E6:BD:FB:CD:78:41:7F:89:0D:20:65:5A:99:98:39:3B:E0:94:FB:DA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E7802CBE5DD4303C66D1B1280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f4bf4b91-0e9e-30de-98ef-9a04041ba130.roa
Signing time: Mon 04 Jul 2022 12:00:00 +0000
ROA not before: Mon 04 Jul 2022 12:00:00 +0000
ROA not after: Tue 09 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.4.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:78:02:cb:e5:dd:43:03:c6:6d:1b:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 4 12:00:00 2022 GMT
Not After : Aug 9 04:00:00 2022 GMT
Subject: CN=c3d5657b-35f0-406b-b584-80b804d3c009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:c5:4e:f8:f2:4e:02:76:93:12:39:1c:d3:
34:2f:ec:9c:99:61:99:c5:c7:96:ff:f7:3b:ad:2f:
1a:c8:65:c4:1b:4c:f5:2a:47:6a:e7:3d:96:48:6a:
46:e0:65:42:8e:1a:b0:fe:c1:ef:fe:f9:2a:28:ab:
24:ba:6c:79:e9:fe:af:c4:51:65:b7:03:b3:be:da:
99:e5:93:74:c8:9e:fe:ed:30:c8:79:26:ed:af:a4:
dc:73:ec:09:91:76:2e:a1:18:ee:69:6b:cd:ca:23:
a3:d1:6a:8f:94:d6:91:b6:03:7d:c6:ef:b6:ae:0c:
35:fe:70:3e:b4:76:74:71:e5:c4:63:d6:98:82:22:
8e:8e:65:74:91:5f:2a:c6:4c:16:f4:49:05:65:9b:
9b:4c:f5:cf:b7:6b:dd:5b:e3:d1:31:09:83:32:fc:
7f:c9:9d:c2:09:78:1b:8b:0c:a3:7b:2d:54:59:29:
24:be:f4:77:8d:1f:60:ef:97:f0:19:bb:5c:87:40:
95:0f:c6:2a:a8:74:be:5b:86:ae:fd:d6:aa:31:5e:
88:e7:0c:4f:47:71:a3:46:29:f2:cb:c1:18:86:ea:
76:b5:65:b7:95:3a:84:12:69:4f:15:d1:4c:d3:b4:
be:b6:01:8a:7c:a7:7b:eb:51:b8:7d:ef:ea:44:aa:
9b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BD:FB:CD:78:41:7F:89:0D:20:65:5A:99:98:39:3B:E0:94:FB:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f4bf4b91-0e9e-30de-98ef-9a04041ba130.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.4.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:86:a8:0a:ca:1c:84:0f:c7:88:22:ca:11:01:49:16:70:cf:
c7:b3:76:82:65:df:69:b8:74:f2:82:9a:40:d4:05:dd:60:aa:
04:53:a6:1c:9e:c9:cf:99:08:e1:7a:61:d6:74:31:ca:65:d2:
6c:ca:68:75:9f:9b:fb:00:f9:86:3c:f2:0a:15:4e:69:f9:bd:
37:31:20:5b:52:5a:7d:b5:09:6f:53:34:7b:02:35:97:e2:c9:
cd:c8:93:ce:2e:0e:4b:cb:e5:f7:ae:ce:36:dc:17:32:6c:9b:
ed:76:df:b0:78:1f:c9:e5:78:8f:d7:93:51:02:88:51:3c:f5:
42:9e:d4:5a:7a:ba:fe:24:9c:25:5e:40:62:28:89:42:75:4f:
3a:7f:59:c3:4e:c6:aa:b5:3e:8d:59:67:a6:af:72:0e:47:0c:
28:8b:a1:81:1e:f7:06:ed:de:58:37:45:87:b1:58:90:ff:f9:
fc:62:25:9c:47:db:06:7b:1e:1d:31:b2:11:03:01:bf:89:e4:
de:58:6a:da:45:f5:43:c3:28:33:01:4f:34:44:44:1f:33:71:
8d:6e:ac:4f:a2:61:f4:15:a3:47:44:c1:a0:34:71:5f:bd:dd:
51:23:82:b4:71:f2:18:32:45:b1:4e:46:42:ee:51:87:22:bd:
a3:7b:b8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:41:59 2025 by rpki-client