Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/136d6c63-2ce1-300c-bdea-8423426af356.roa
File: 136d6c63-2ce1-300c-bdea-8423426af356.roa (raw, json)
Hash identifier: POF0W29DXY1XzEXhACKEnZk94g6ztAHXnKfsEwwaCGo=
Subject key identifier: 3A:C5:60:AD:9A:E9:53:37:12:3C:2B:83:40:6F:9E:94:CB:44:FB:38
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401414E40A4C68AD5458A83D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/136d6c63-2ce1-300c-bdea-8423426af356.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:14:14:e4:0a:4c:68:ad:54:58:a8:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=3c1f719e-41bb-4037-8091-7b38a0cbac17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:6d:2a:ad:48:28:c1:40:d0:90:a1:39:67:
68:9d:0a:36:80:23:fe:8c:be:35:d6:00:c0:99:81:
65:a8:c3:d5:15:44:30:a3:e9:17:c8:3f:45:43:86:
66:db:14:35:fb:31:5e:2d:67:1c:86:6d:8c:9b:dd:
46:40:ce:00:cf:8c:79:cb:9e:76:e8:d1:5e:d9:bf:
32:16:9a:df:97:2b:7e:4c:a3:16:cc:ff:77:66:94:
21:bd:86:85:29:dc:a0:23:1e:8b:42:ab:b8:0a:b8:
62:fb:77:d5:58:6f:a4:0d:3e:94:0d:fe:20:27:10:
c6:ad:f8:a6:f3:d7:1d:57:12:b0:9f:09:41:f9:dd:
56:aa:0f:45:8a:0a:7f:b4:1c:35:c7:5e:93:2d:ea:
4b:15:03:93:08:51:77:df:0a:79:12:07:40:1a:82:
9b:63:a9:20:ca:5d:7a:82:c6:19:45:9d:d4:54:62:
07:9f:69:7e:d4:36:83:69:d6:5b:3d:77:99:03:90:
9e:6d:95:18:31:3d:92:ee:66:b7:08:50:9b:89:2b:
23:05:fe:03:b0:c3:a8:a0:41:a0:9e:d9:2e:e2:fe:
a1:96:82:18:bb:85:0b:ef:de:49:98:f7:bf:a7:50:
df:e7:f6:dc:e4:09:22:6e:66:b1:f8:55:28:51:cf:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:60:AD:9A:E9:53:37:12:3C:2B:83:40:6F:9E:94:CB:44:FB:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/136d6c63-2ce1-300c-bdea-8423426af356.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:11:96:0e:fe:59:0d:85:da:0b:1a:50:f0:a5:0b:c1:f1:07:
fc:42:eb:23:66:e2:06:eb:59:55:15:e7:a6:e2:c0:b1:c6:70:
46:66:ef:7f:f0:d3:5b:f2:c1:6b:40:f9:7a:4f:bb:32:09:32:
ef:7d:01:48:ac:9d:fb:18:43:79:59:06:79:e4:ea:d2:44:b3:
48:48:09:ad:49:36:54:d9:ae:c8:86:27:9a:ec:83:f7:19:50:
16:af:83:1a:7c:12:ef:64:65:0c:a0:f6:38:5b:d0:51:a1:87:
87:f2:ff:25:b7:8a:71:47:82:58:7a:de:6b:3c:e6:43:2f:5d:
8c:2d:1d:45:48:07:22:97:80:bb:3d:9c:5c:9e:79:f4:62:75:
5c:9e:b1:7e:a6:1e:0e:5f:7d:08:70:c0:42:13:4c:c4:90:61:
5e:0c:a1:ba:a7:9f:e6:c0:20:9d:88:6d:a3:8e:79:ac:91:1b:
c9:fa:88:48:b4:fb:68:44:e6:05:83:2d:8a:45:d5:7f:b6:b3:
3c:55:49:ca:24:a2:d2:e4:aa:20:b4:c3:03:fc:b2:3d:82:f0:
03:2b:b4:4e:2d:fa:24:48:4f:6f:73:05:77:b6:f3:ef:1e:7a:
49:77:70:51:ab:07:10:84:c8:8d:43:f6:7a:ea:4c:82:8a:d7:
8b:c3:1a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:07:12 2025 by rpki-client