Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c64f0f2-88a7-3431-bed4-059dd3ed7777.roa
File: 1c64f0f2-88a7-3431-bed4-059dd3ed7777.roa (raw, json)
Hash identifier: QnKFnG3YDkdL5Nh/i4l1v9yucV8Q4zzqt3Xe5SJ12ks=
Subject key identifier: EC:86:1A:85:1A:5E:4A:AE:63:AF:C3:E8:98:45:82:FE:66:29:89:11
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840036B6D96CB88B8F83EC1DC70
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c64f0f2-88a7-3431-bed4-059dd3ed7777.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.150.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:03:6b:6d:96:cb:88:b8:f8:3e:c1:dc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=efec58d4-59f8-4528-8ea3-2cc71d57d78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:b5:85:bd:06:61:60:e1:fb:7d:35:6a:12:
e6:3a:f7:92:4f:07:43:73:49:58:7e:1e:19:01:1f:
5c:c3:49:a1:62:79:3b:5c:40:ca:d7:f6:71:2c:22:
df:f5:e7:78:42:be:b2:14:b1:cf:4f:5c:32:88:a1:
43:7c:d8:c5:f9:e6:b5:d5:66:4b:a2:ba:68:97:37:
01:59:b0:e3:37:4c:52:17:86:00:b2:e5:e8:a9:f2:
68:64:82:36:ea:cf:d5:dc:f4:a1:97:22:b4:af:07:
bf:b7:f8:08:da:9e:01:e2:07:64:ab:c0:e2:1e:30:
79:02:86:1e:89:c6:b4:e0:f6:35:69:09:ee:e2:57:
f2:47:d7:de:2b:be:9f:90:7b:9c:0e:c0:8e:7d:b0:
c8:bd:70:96:36:5d:38:20:45:e3:9d:ba:9d:a7:78:
51:aa:6b:c9:62:f8:dd:5d:60:0c:98:0c:9c:5f:9b:
f3:38:f4:4b:e1:ea:b6:23:71:9f:af:c9:94:53:9d:
79:f5:4d:d4:2e:00:28:d0:8e:39:71:59:65:ba:ba:
4d:9a:fa:49:d0:1b:0b:84:59:02:59:00:77:d7:31:
b6:64:f3:c4:44:97:7f:25:1c:12:a0:4a:14:53:d7:
95:1d:53:0f:3d:01:13:9e:8e:98:41:b4:f9:4d:83:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:86:1A:85:1A:5E:4A:AE:63:AF:C3:E8:98:45:82:FE:66:29:89:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c64f0f2-88a7-3431-bed4-059dd3ed7777.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.150.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:3b:4d:5b:e0:97:91:f2:46:ce:3b:b4:e0:57:17:ff:51:8b:
61:fb:49:4f:9c:e3:b3:58:49:8a:35:15:bd:0a:05:02:ba:d8:
fd:ba:79:58:35:51:48:5a:c7:20:27:55:91:eb:6a:a1:f0:34:
bb:5e:a0:f4:d1:6b:c2:ec:cf:9d:79:25:4c:6b:1a:3d:84:54:
0f:84:4d:b9:35:66:b1:99:a7:c2:33:44:0d:5f:83:2f:eb:5f:
aa:4b:bb:08:b1:07:49:3c:e9:bc:e3:5e:3f:d7:34:04:3e:45:
97:47:f9:19:c1:1b:f8:14:f1:6b:32:f3:24:a5:f6:43:f7:80:
45:e2:61:b4:cf:70:04:1a:67:13:4f:32:35:c9:b4:a1:23:c5:
b3:55:a8:d3:37:1d:67:18:df:d9:fa:d7:ee:09:e2:da:03:34:
e0:b7:81:29:6e:83:0c:4e:55:e3:37:84:e1:b8:1f:53:2f:8b:
87:72:47:0e:f6:77:d5:a1:c1:c6:cb:86:e4:7a:f9:be:8b:c0:
2f:88:34:88:04:5b:f0:8d:08:cb:0a:a8:d9:0f:ac:80:75:49:
ac:5c:ec:b5:a6:8c:62:af:ed:a8:75:57:93:9b:43:1d:ae:97:
3a:5a:28:02:8f:cd:48:4a:1e:b5:47:2e:7f:86:e2:cc:d2:23:
f4:ab:06:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:20 2025 by rpki-client