Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/191509f8-0bf9-3ca0-b86b-c4c15904a8c4.roa
File: 191509f8-0bf9-3ca0-b86b-c4c15904a8c4.roa (raw, json)
Hash identifier: 0LE/psSxNO29vquixugOTwd9KKOelPTi9AQpKaQbosI=
Subject key identifier: FE:46:8C:41:8A:45:A6:EE:7C:D6:CD:EF:4A:74:99:0F:FD:32:33:0F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840655527DF88A5D5FB3F6B3D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/191509f8-0bf9-3ca0-b86b-c4c15904a8c4.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.246.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:65:55:27:df:88:a5:d5:fb:3f:6b:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=4db4fe47-c7bd-48c6-8deb-94faf3085a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:96:79:fd:de:8f:35:7d:f9:1d:c5:63:20:4b:
f4:be:eb:01:be:dd:e1:62:76:88:85:b2:7e:4f:a0:
84:9d:86:d6:93:06:09:05:2b:d9:9d:df:b4:f2:70:
f6:e8:13:90:c8:47:3e:d1:e9:3f:7e:5a:1b:33:65:
70:5a:0b:46:64:4e:3a:e9:d5:a9:cb:eb:92:5c:28:
19:6c:54:b9:d1:48:5a:6a:b0:43:24:26:cd:c1:37:
63:74:5a:c5:b7:fb:86:30:fa:43:d1:f2:07:c7:29:
0a:b3:c8:d0:73:12:89:c0:ac:fa:2f:bc:33:b7:19:
00:ac:61:93:09:93:78:6e:e1:53:65:93:6c:38:67:
6e:e8:24:1a:e5:8d:bc:7a:69:d2:92:85:3e:c5:fb:
64:38:fe:b3:68:8e:54:99:86:65:32:ea:df:7a:3e:
52:11:40:04:d3:8d:83:11:9b:c0:9b:1e:52:6c:8c:
df:85:af:c4:eb:bd:00:04:57:ff:a1:bf:c7:31:d5:
47:6c:d9:42:9c:1e:bb:0b:6b:ec:e5:b9:36:71:2e:
a7:69:85:78:1d:9b:93:88:a7:e2:f7:ad:3b:cd:dc:
66:ee:cf:24:7e:d5:a3:00:13:a4:46:06:9d:d3:2f:
21:4c:3c:00:f0:23:52:15:36:c4:77:be:6e:06:b9:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:46:8C:41:8A:45:A6:EE:7C:D6:CD:EF:4A:74:99:0F:FD:32:33:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/191509f8-0bf9-3ca0-b86b-c4c15904a8c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.246.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:eb:94:49:4c:97:b7:28:12:a4:5a:dc:22:4d:91:ce:62:6d:
b3:e6:db:30:34:d5:43:33:ee:ab:98:c4:b6:cf:63:34:28:29:
04:c3:eb:57:d3:ce:b6:9c:5f:eb:27:ea:4c:19:9a:79:68:f2:
8c:13:a2:f4:d9:f5:c7:48:46:25:97:6a:7b:9c:6e:13:07:34:
80:e6:a3:96:9e:3f:59:e8:61:cc:6b:ba:5a:10:11:e0:ae:5e:
63:90:01:da:47:94:3c:f1:fe:8d:fe:9e:f1:89:00:3c:62:93:
b8:d6:31:d3:fe:09:58:a4:d2:79:a3:b1:79:8f:32:2e:9f:79:
a7:a9:03:d4:42:bc:c2:76:be:30:04:c1:c6:96:1b:22:b4:c9:
98:44:1f:ab:a9:f4:1e:ab:fa:f3:09:56:59:ae:77:a4:95:bb:
18:76:e7:44:6a:b9:d3:79:da:96:21:ef:cc:03:35:81:cd:d2:
60:92:db:c9:e2:b5:f3:37:1d:8b:77:68:6e:d2:7b:70:47:6d:
bf:e9:8a:64:2c:1e:59:61:fb:41:72:38:86:9a:74:75:06:de:
f6:89:1e:e3:a6:eb:4b:37:75:78:58:42:00:d4:fd:45:e3:bd:
fd:99:92:e8:c9:67:09:24:c4:a1:8c:ce:f3:79:55:60:85:dd:
d4:f6:a0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:40:37 2025 by rpki-client