Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/18f3c8e5-1bbe-3979-81a5-ca0892ec03b5.roa
File: 18f3c8e5-1bbe-3979-81a5-ca0892ec03b5.roa (raw, json)
Hash identifier: gaIe1tzQhfJLl8Yas6VorJ/eqWZlD3umM2N8UdtqF3w=
Subject key identifier: 5D:DE:2B:D1:F2:1A:FE:BA:CF:B1:02:03:02:92:63:1A:88:93:FB:22
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EDD96A3190551C9A590DEC1C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/18f3c8e5-1bbe-3979-81a5-ca0892ec03b5.roa
Signing time: Wed 10 Aug 2022 12:00:00 +0000
ROA not before: Wed 10 Aug 2022 12:00:00 +0000
ROA not after: Thu 15 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.231.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:dd:96:a3:19:05:51:c9:a5:90:de:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 10 12:00:00 2022 GMT
Not After : Sep 15 04:00:00 2022 GMT
Subject: CN=41a52c0b-54ae-49b6-97bf-d360fcba329d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ca:2a:d3:5c:b2:74:d1:34:c0:e4:49:c6:3e:
22:fe:90:48:39:1a:63:bf:04:0f:a0:88:d6:83:ab:
db:fa:e7:4f:ee:ac:39:f6:0f:48:ab:3c:4b:56:f1:
b1:fc:f4:1e:32:6b:f0:30:3f:99:0c:ec:4e:c3:d6:
27:2a:a9:32:ee:27:3f:b5:d9:f9:97:b1:99:80:d5:
c7:ec:e4:88:da:35:ae:48:19:9c:be:54:c4:3c:c8:
ca:2a:01:5d:e9:e0:ec:e2:88:18:1b:04:20:f4:19:
b1:32:bb:b7:0a:4d:f3:b2:5f:d5:d8:6e:68:55:c0:
e3:19:e9:49:e2:bd:35:95:8b:59:a5:35:38:43:c7:
bc:a8:44:a3:02:2e:ec:f1:ba:00:31:16:1f:33:1e:
34:d6:8b:d8:cb:de:b5:e4:9a:a2:29:e9:34:70:f0:
d5:45:4e:06:6d:15:73:b8:ca:12:30:0d:64:b1:51:
a6:f4:be:17:80:f7:1e:4c:40:c0:e9:4d:97:70:95:
57:2a:da:20:46:a1:44:74:47:c6:c3:3c:5d:de:ff:
92:8f:4b:e2:d5:62:92:0f:5f:12:e5:26:25:8d:06:
0c:97:f0:ad:44:41:32:25:40:6f:f9:a0:53:a4:22:
b9:96:33:7d:3e:97:30:c3:ef:79:e4:1d:5f:48:45:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DE:2B:D1:F2:1A:FE:BA:CF:B1:02:03:02:92:63:1A:88:93:FB:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/18f3c8e5-1bbe-3979-81a5-ca0892ec03b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.231.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:09:0d:0e:33:44:4d:86:85:80:77:b9:55:e4:e2:f7:c7:4a:
df:25:d7:0b:0a:74:09:ba:41:d7:a1:6f:85:0c:a8:f5:7d:81:
9c:b6:e8:8a:60:3e:34:e6:cf:3f:dd:cd:db:97:34:f9:85:3c:
df:d4:a3:85:8e:2c:a9:e5:a7:e9:ca:37:fe:5b:fc:bd:3a:05:
37:07:00:ab:b7:af:2e:3c:06:ab:20:e3:45:fa:87:60:0e:90:
eb:2f:dd:bc:d4:5b:dd:90:d6:cb:e5:e3:ec:a8:a2:58:17:bf:
55:2d:ee:c1:82:5c:25:c8:96:98:a0:9a:30:0f:c8:64:f5:b2:
0d:8b:70:c3:14:55:a0:fc:45:49:13:25:df:0f:0a:fd:7a:5b:
e0:33:57:b1:8b:54:f2:3a:89:53:a1:ae:8b:9b:f5:8d:3f:53:
03:14:26:d9:21:c9:c2:ae:63:16:25:65:12:bd:78:e9:f4:09:
48:04:3e:5b:ce:18:21:02:6e:fe:aa:40:e4:4a:30:98:20:27:
34:7b:43:84:05:b8:b8:00:ea:4f:21:8b:b0:cb:8c:38:34:d4:
c1:1a:4d:e9:f6:21:f2:e5:2d:1a:cf:23:e8:89:90:00:02:8a:
d9:9a:04:7f:5c:88:0a:8f:2f:d0:c9:98:06:4a:01:81:24:33:
52:46:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:08 2025 by rpki-client