Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1a23443a-28d4-3bbb-9712-e5a843d4172a.roa
File: 1a23443a-28d4-3bbb-9712-e5a843d4172a.roa (raw, json)
Hash identifier: As2lv7bf1+kGgu43ja+6olXEhbOHRdX0qPHmHrLJn2o=
Subject key identifier: C3:A0:57:30:50:CC:07:8F:12:4D:33:34:B2:2E:92:73:60:87:B5:2C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0541134255147F1C063F9D3E
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1a23443a-28d4-3bbb-9712-e5a843d4172a.roa
Signing time: Wed 24 Aug 2022 12:00:00 +0000
ROA not before: Wed 24 Aug 2022 12:00:00 +0000
ROA not after: Thu 29 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.161.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:05:41:13:42:55:14:7f:1c:06:3f:9d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 24 12:00:00 2022 GMT
Not After : Sep 29 04:00:00 2022 GMT
Subject: CN=3b468d6f-8a2e-40b9-bfe9-77be461f653a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:86:23:99:70:77:d0:42:17:d8:a6:85:f7:
77:e1:51:66:cc:16:3f:b1:5c:38:81:e0:d3:0d:80:
17:07:71:1a:ce:d3:e1:a8:f2:30:7b:61:67:49:a1:
81:e1:47:ed:13:a5:60:94:7e:4a:fc:02:f4:2b:1b:
b0:89:55:67:b7:54:c7:72:eb:81:ed:4c:93:bb:b4:
60:e9:01:bf:97:a4:f5:31:7d:bc:3f:ef:18:1f:91:
c1:64:2c:31:c9:f5:81:64:2c:b4:9e:25:e2:94:b8:
18:98:ba:12:9a:38:e4:08:1b:fd:34:7f:07:32:c9:
b9:18:77:b0:a1:d0:3e:31:69:2f:c6:10:49:ed:8d:
ac:15:e6:c7:73:78:6b:7d:36:b7:b4:1a:47:72:13:
20:36:5c:24:2e:34:e3:58:bb:ae:84:36:58:d4:c9:
33:09:25:94:96:4d:c3:fe:f0:6e:8b:33:6f:15:d9:
56:b9:dd:3d:e2:25:d8:7d:5c:36:4d:05:a1:1f:86:
34:8d:ea:73:f3:b3:9a:50:3f:d6:e2:e4:2f:13:2b:
7f:bc:4d:08:63:61:5f:e8:9c:67:13:f2:e0:f4:5b:
c3:8d:6c:ef:82:d6:d3:54:cd:69:fd:7d:3b:9d:c5:
d6:e0:ee:2b:18:e2:80:89:b4:be:36:fa:10:68:3b:
12:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A0:57:30:50:CC:07:8F:12:4D:33:34:B2:2E:92:73:60:87:B5:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1a23443a-28d4-3bbb-9712-e5a843d4172a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.161.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:62:d8:3d:ae:07:cd:c6:86:79:cd:92:97:65:40:5f:a5:a6:
a0:53:7e:ed:66:69:37:8e:df:1b:7d:b8:84:60:73:3b:81:4c:
fe:48:a1:3c:06:5b:dc:c1:1b:fc:35:8e:dc:d4:50:98:3e:39:
34:4c:3b:d0:d3:59:90:49:f0:6d:66:e7:4e:d0:54:32:c1:13:
50:e3:96:b2:68:59:db:2b:5c:fc:cf:f4:9a:dd:1a:91:9a:bb:
dc:10:92:27:60:e3:cf:33:1d:28:e2:56:b1:7a:65:f5:46:1f:
13:52:05:ac:12:80:b2:d7:20:54:d5:6d:34:b8:1c:12:61:47:
81:ce:c9:22:25:e7:28:9f:93:0d:9a:76:27:09:9d:41:59:fa:
fe:22:95:66:86:b7:88:85:21:b2:5e:25:f2:65:17:c9:ea:40:
a3:ab:c2:75:4f:fc:91:01:09:5d:2f:80:71:98:a6:db:2f:f8:
bc:8f:a6:81:00:65:91:82:9c:a8:41:d0:62:36:e1:59:bd:b7:
9b:ea:8e:58:9a:1a:ec:6e:7f:30:a8:92:4d:bb:23:35:3e:7d:
df:43:5d:3f:0a:c7:a5:f6:bd:6c:99:87:51:00:e6:7c:cd:41:
86:30:75:16:e5:57:a2:9b:93:e7:2e:eb:14:57:f5:ea:7c:c6:
a0:bf:4a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:41:10 2025 by rpki-client