Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/126b65a5-3cec-3879-9ab7-8610da303f71.roa
File: 126b65a5-3cec-3879-9ab7-8610da303f71.roa (raw, json)
Hash identifier: WjyPg09Ravf+SY2hhfo5czgNhqJsWzBszSYifiQ6Hac=
Subject key identifier: 66:0A:CC:47:1C:D0:E0:14:5D:97:B7:39:DE:DF:40:3E:5F:08:11:44
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584051019C8004763A1443191A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/126b65a5-3cec-3879-9ab7-8610da303f71.roa
Signing time: Wed 21 Dec 2022 12:00:00 +0000
ROA not before: Wed 21 Dec 2022 12:00:00 +0000
ROA not after: Thu 26 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.244.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:51:01:9c:80:04:76:3a:14:43:19:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 21 12:00:00 2022 GMT
Not After : Jan 26 05:00:00 2023 GMT
Subject: CN=dc9a7dc3-77cb-4a77-a5f8-4c2247894718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:61:d5:12:6d:21:e5:3d:64:af:27:28:bd:
b2:52:a1:25:62:c0:89:f2:03:70:ea:b8:93:ea:97:
7f:2e:ae:74:3e:bd:5e:27:d3:2e:11:5d:75:5e:7a:
53:4b:ff:c1:90:e5:be:80:32:89:55:4f:b1:a8:8b:
fc:ef:e4:48:90:b3:ea:ff:2a:a8:23:b9:d6:3d:5a:
f3:b8:d5:f3:8c:91:ed:55:80:9d:27:1b:43:4a:64:
52:75:a6:5e:a3:5d:0f:02:49:c7:2f:8c:67:e3:78:
b9:3d:ef:57:a2:67:47:5f:d8:46:98:51:79:5f:2f:
36:14:52:82:68:62:20:ba:86:fe:7a:17:fd:ba:c8:
6a:f3:d6:4f:61:26:cb:ea:00:9a:b7:a7:81:d2:22:
87:31:15:2c:28:06:e7:f8:af:30:af:c6:3a:23:5e:
6e:fe:0b:80:60:56:80:d3:05:fa:f5:93:df:f0:a7:
9c:4c:64:70:f5:54:4d:70:a2:9a:01:d9:18:51:3b:
f9:7d:f1:33:bc:10:d9:a7:eb:c7:89:4c:4c:70:bb:
64:3e:8e:71:c4:e0:3e:0a:53:94:a3:b6:4f:c5:86:
8c:35:9f:96:fd:d3:e8:ad:70:11:e1:11:c4:2c:96:
4b:01:1b:7f:8c:da:52:a3:49:c4:6f:83:1a:3c:25:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0A:CC:47:1C:D0:E0:14:5D:97:B7:39:DE:DF:40:3E:5F:08:11:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/126b65a5-3cec-3879-9ab7-8610da303f71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.244.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:99:d2:c5:58:09:36:c1:5a:5d:64:62:b9:8b:3d:ce:6d:14:
03:7b:e0:c2:e4:eb:06:48:7a:fe:07:8a:8c:b9:84:ac:27:a9:
eb:fe:44:b0:1e:83:c6:87:53:9a:bd:22:3a:e3:da:3a:4d:be:
5a:21:e9:69:93:3d:dc:27:14:98:0c:64:63:ed:83:6e:6f:47:
dc:b0:32:31:31:71:b6:74:5b:c7:2d:11:61:74:2a:f4:36:27:
e4:ba:2a:b2:44:57:29:c1:e5:04:6c:71:0a:d4:54:bf:38:24:
f5:f5:7b:c1:d9:1c:d3:0c:65:3d:08:9a:da:68:c7:85:05:38:
61:4f:82:89:94:6f:33:17:75:9a:b8:c5:96:bd:56:ff:ca:fb:
b5:bc:1f:0b:50:56:83:33:62:ed:db:cc:32:73:6f:8c:a2:3a:
0d:00:bb:89:a6:6c:c2:24:db:66:80:7d:d7:c8:02:7d:4a:25:
70:1e:07:30:d1:ab:8c:cc:35:ec:15:9c:ff:c2:c6:20:15:ab:
c7:7c:c0:5a:e4:c7:e6:db:67:7a:9a:43:0d:6a:9d:75:09:7a:
d9:cf:70:11:a9:70:c6:e1:23:25:8a:9a:f2:87:55:7b:e3:23:
78:87:b7:fe:be:d7:a1:54:e9:26:f9:7b:a7:9e:bf:63:ae:38:
6e:49:01:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:03:49 2025 by rpki-client