Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/059f5925-f40e-3779-8a6a-cdecd1294782.roa
File: 059f5925-f40e-3779-8a6a-cdecd1294782.roa (raw, json)
Hash identifier: Yn+ywpqjoomwr4sqGVMR3zI9RCx4RDZ7Anbki6tXPDo=
Subject key identifier: EA:FD:43:B3:82:14:D1:66:4E:1F:80:B0:40:AA:42:64:F7:F7:61:CC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858400363ADE387A0581880C46F40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/059f5925-f40e-3779-8a6a-cdecd1294782.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.214.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:03:63:ad:e3:87:a0:58:18:80:c4:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=d3552edf-4190-4baa-b625-18c074f2ad55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9d:a5:a5:1e:25:d4:4c:7a:cd:d3:42:b2:34:
39:6b:24:cd:4e:3e:f5:6a:ad:ca:ef:bf:fe:47:a8:
0d:7f:72:25:ec:24:f5:ab:af:77:2a:4f:1c:d8:a5:
9f:a9:21:c0:f7:95:b1:2e:1e:65:4c:0d:fb:ac:c1:
ea:a0:a2:b4:22:7d:d1:5d:1b:d2:70:d9:d6:0f:5c:
0b:24:00:b2:ff:19:53:93:da:6c:03:8b:44:e5:3f:
f4:f2:44:45:fc:d2:df:82:c0:dc:82:27:12:c4:ba:
52:38:60:53:dd:2a:d2:93:17:e5:8b:01:0c:d7:48:
69:23:bc:84:8c:8f:68:3b:a8:63:37:27:ca:e5:37:
89:9f:43:86:b7:ca:04:a4:64:12:b1:30:dd:b0:ba:
86:fe:90:c2:49:86:3b:fe:54:83:61:6b:31:a7:e3:
0c:d5:6b:be:90:31:5a:d0:e5:2b:24:ff:e2:d0:19:
23:5e:8d:f5:78:84:ca:dd:e8:85:a3:dc:36:f9:f6:
d6:51:cc:fb:4a:b8:f3:5a:49:5f:0f:ce:3b:ee:dc:
c6:8b:4a:94:de:91:36:37:6d:e2:e1:76:4a:dc:0f:
9e:76:6f:6e:e0:f4:56:1c:e1:3b:7b:63:98:03:81:
24:f4:97:11:6a:23:e5:52:8d:8f:28:67:d0:28:0f:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FD:43:B3:82:14:D1:66:4E:1F:80:B0:40:AA:42:64:F7:F7:61:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/059f5925-f40e-3779-8a6a-cdecd1294782.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.214.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:fd:0f:76:a3:76:fc:df:cb:c5:9c:b5:64:a5:03:bb:ae:67:
ef:1e:e8:b8:93:51:57:26:05:0e:dd:7e:68:fa:88:40:09:44:
ad:b1:31:55:d5:b7:95:8f:aa:90:ba:bc:c4:5a:a9:8f:22:7d:
e7:ee:d1:7d:c3:c8:38:43:47:be:c1:f7:66:de:5a:22:f5:8f:
68:8f:7b:02:f0:94:e6:e2:2b:e4:4e:d0:ec:66:ea:48:d0:19:
9a:dd:6d:b2:d7:2f:a9:b5:30:09:f5:a0:84:da:2e:6b:a5:3a:
a8:40:ff:5d:48:09:1d:42:df:4e:c5:cf:9a:a5:e6:2d:92:c3:
37:70:e0:19:ab:b5:39:de:34:f8:89:df:65:31:b7:62:bb:1a:
c0:ee:ab:94:ee:af:b0:96:41:f3:c9:ca:d8:2f:0a:5f:9a:96:
59:1f:07:ad:03:23:8d:92:11:f4:1b:71:48:51:39:e0:f5:fa:
ae:b4:8b:ee:02:5f:bf:1a:df:bf:55:92:1d:33:33:17:e5:5f:
52:9f:43:8a:8b:41:94:02:ab:8b:b2:89:19:07:2c:cf:c8:42:
59:38:be:fc:ef:ba:62:8d:5a:7b:40:e0:61:5e:3c:3f:7a:9c:
cc:39:29:5b:a1:c7:9d:c5:cb:22:ac:df:ec:3b:5c:e5:7f:b7:
5a:37:cd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:23:16 2025 by rpki-client