Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/085e7e5e-2587-3607-a5e4-afaf4eff51c9.roa
File: 085e7e5e-2587-3607-a5e4-afaf4eff51c9.roa (raw, json)
Hash identifier: gvBx349bxpT54kJcduA6uJ+Z1YrifP3DEaj22DNU/OA=
Subject key identifier: 0E:B7:50:53:05:1F:83:AD:E2:25:D6:0A:80:EF:5D:3C:43:67:0E:6B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF35FA64FDB39062871586180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/085e7e5e-2587-3607-a5e4-afaf4eff51c9.roa
Signing time: Wed 18 May 2022 12:00:00 +0000
ROA not before: Wed 18 May 2022 12:00:00 +0000
ROA not after: Thu 23 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.198.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f3:5f:a6:4f:db:39:06:28:71:58:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 18 12:00:00 2022 GMT
Not After : Jun 23 04:00:00 2022 GMT
Subject: CN=5f860e2e-6b53-4d24-a3dc-2c7bd3e010c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:f5:98:4a:0d:dc:55:ed:08:03:6d:05:ae:
41:e5:50:a3:2b:78:70:f4:d8:5c:e2:cd:42:9e:29:
a3:7d:a8:9e:d9:83:9e:3a:66:fd:68:69:f4:28:98:
62:08:f4:d7:e2:1c:49:f8:bd:e2:da:fc:37:78:16:
8f:87:e4:98:d7:8b:46:1f:ec:2d:ef:5c:4c:f7:39:
54:81:77:7c:15:34:78:88:1e:65:83:0c:e3:bc:5f:
87:64:29:4c:7e:1c:0e:89:64:98:15:34:f1:9d:d2:
52:60:47:ce:dd:0e:9c:2b:51:46:78:13:2f:a1:72:
61:23:75:a4:98:38:c9:84:ae:65:88:4d:2e:99:7e:
64:23:7c:82:60:1b:17:ac:d3:ae:7e:ac:96:08:a5:
f7:87:72:b6:da:4a:ca:0a:b6:3d:c9:12:58:46:93:
91:17:43:6b:ff:55:59:36:18:9c:bc:ac:8f:cf:1f:
c0:3e:74:9e:97:bc:e3:19:10:0d:40:1b:28:8e:60:
b5:56:bf:27:79:b8:ff:5e:01:00:2c:6e:d8:6d:e5:
d2:06:15:2c:6d:16:f7:8f:78:3d:c0:d4:c1:38:7e:
77:75:96:dd:67:90:ac:60:96:05:9e:fa:c7:d8:b8:
53:87:f8:ef:20:a9:e1:92:b9:ec:26:64:39:23:5f:
2c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B7:50:53:05:1F:83:AD:E2:25:D6:0A:80:EF:5D:3C:43:67:0E:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/085e7e5e-2587-3607-a5e4-afaf4eff51c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.198.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:3f:3f:86:bc:a7:81:19:06:b0:27:2d:52:a7:14:27:1c:c7:
63:ba:d8:ab:b9:90:d3:88:bf:d1:95:97:21:83:b6:a4:04:f3:
c7:fd:05:bd:af:83:b1:2a:a4:01:0a:0b:73:ee:c4:70:fa:68:
45:e3:ec:27:1f:df:c6:6d:cd:39:b3:68:2e:31:41:f2:7a:a4:
eb:7b:3e:b8:c1:ca:09:ab:d8:c6:09:af:fa:94:42:11:de:4e:
e4:54:9f:ee:3d:32:99:71:de:49:ab:e5:59:67:ee:9f:79:d5:
dd:14:59:d1:97:f7:0b:b2:2f:3f:82:e9:d2:fe:68:52:af:46:
c5:14:3e:b2:a3:e6:1a:7c:4a:a0:97:aa:95:2b:a4:1f:20:b3:
cc:b5:c9:5c:ff:99:f3:d3:e2:e5:b5:cb:bc:99:7e:db:76:f5:
e6:b2:03:34:70:18:4c:85:73:4e:2a:bc:81:0b:8d:94:1d:e7:
e3:f2:1d:05:16:80:71:07:a1:81:bf:7a:22:c9:12:a9:a7:cd:
b9:f9:57:2a:eb:32:0a:b4:5e:af:1a:c3:f4:3b:84:40:56:3e:
58:a0:9b:26:3d:5c:59:29:cd:b0:46:06:c2:02:42:c9:9a:65:
9b:79:60:83:b0:4b:47:d9:fc:fc:e1:b4:63:3f:dc:de:7b:ca:
4b:fa:11:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:51:41 2025 by rpki-client