Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15535c97-068c-3e1b-ae93-86c96b100f83.roa
File: 15535c97-068c-3e1b-ae93-86c96b100f83.roa (raw, json)
Hash identifier: Qz408pHTGmrslskJF8vttH9RBlVLpxOCaINSF7DSLEQ=
Subject key identifier: BE:AE:B9:DB:3A:67:FB:2D:4C:5D:DE:67:0A:38:EE:76:19:13:AC:7D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D5AB3DB06960E4EB83F57E600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15535c97-068c-3e1b-ae93-86c96b100f83.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 141.139.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:b3:db:06:96:0e:4e:b8:3f:57:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=e06f5cfd-eee5-4c15-abf6-cf75b83bafff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:2d:cd:2b:eb:f6:56:7a:02:26:1a:16:6c:
75:4c:b2:2a:06:f1:90:15:a9:00:77:ec:47:a1:5a:
7c:ca:8b:96:70:4b:98:28:06:58:1d:31:a2:ef:75:
c2:9c:d6:40:f7:58:5e:15:ab:2f:29:88:fb:8d:6a:
a8:d2:42:7d:e6:63:60:c0:75:33:50:87:75:aa:d2:
76:3f:83:19:92:88:05:d1:a1:3e:9e:ea:16:51:4d:
4e:e8:e4:b7:03:61:29:6a:1e:6b:39:cd:20:43:34:
76:a2:1a:ba:4f:3b:35:01:dd:55:15:9f:a8:f2:4d:
49:95:0f:09:67:0a:02:24:d1:6e:4a:26:e7:8e:73:
23:7f:e2:53:4a:16:9c:ea:4f:8a:64:fa:19:bb:7a:
39:c8:3f:14:5d:04:2b:b9:60:5d:4d:ad:76:6a:e8:
82:e1:18:36:ad:e9:76:4a:4c:03:8f:6a:73:b9:1b:
a6:46:0a:72:f7:a9:ed:15:7e:96:90:06:a7:ac:4f:
61:64:3e:9f:c6:05:75:45:2a:73:c2:bb:15:3b:d3:
92:7c:c1:28:3f:eb:4b:fe:9f:28:2f:49:52:7c:49:
65:b9:4d:e8:3f:2e:38:c8:32:b4:a2:dc:89:9c:e4:
9c:82:b6:61:a5:bb:1c:a6:60:7c:d3:1e:ce:76:24:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AE:B9:DB:3A:67:FB:2D:4C:5D:DE:67:0A:38:EE:76:19:13:AC:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15535c97-068c-3e1b-ae93-86c96b100f83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.139.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:fe:eb:24:8a:46:ba:72:fa:75:98:fb:ff:26:18:1c:14:93:
40:67:9e:f3:31:0c:8b:c6:59:71:5a:17:b9:70:81:17:09:d8:
8a:cd:6f:e7:88:64:4c:9e:d0:f3:11:96:dd:ce:4b:70:90:6b:
33:37:4d:1a:00:18:64:77:ee:dd:a1:49:6d:74:f6:c2:ca:05:
49:fc:17:23:6f:d8:0e:c8:cf:d8:f1:e5:ee:b9:b6:e1:f6:d1:
5d:a5:a5:89:15:4c:3b:52:21:bd:f9:bb:d3:55:77:8f:c8:de:
37:3c:d5:07:58:a6:bb:1d:20:74:9b:bc:18:e3:4f:aa:6d:49:
fb:db:8b:95:4a:d8:f7:1c:e0:83:6f:5c:4e:a0:b3:a3:ee:75:
4d:4a:00:95:55:ec:7b:dd:b8:4a:db:52:9b:50:9b:e0:a0:f8:
ed:b5:39:26:27:1c:74:62:e7:a4:e1:44:00:2a:0a:a5:27:16:
38:a8:8f:69:18:7d:71:8f:83:dc:d4:17:d6:4b:57:f9:81:f1:
1d:94:2f:ff:6e:cc:65:0b:11:23:07:d2:c6:9d:2c:d0:d3:55:
f8:46:71:8d:0b:17:0b:73:1f:e7:48:c0:24:8b:da:de:92:9e:
8d:c6:1a:cc:d1:7d:40:41:05:19:3f:fc:18:9d:39:5f:c8:2a:
1a:e7:c6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:16:21 2025 by rpki-client