Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1fb9e38c-0471-3a6c-9170-fc4aa9549561.roa
File: 1fb9e38c-0471-3a6c-9170-fc4aa9549561.roa (raw, json)
Hash identifier: lMcXHcaE7FW4Y73DomUsVHGHyAHGEAhSaBasyMch1mY=
Subject key identifier: 6D:6D:9B:AB:47:E2:F4:24:83:44:75:A2:BA:80:12:EA:9C:95:85:DC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858402719DBFB4B388DF2C7922B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1fb9e38c-0471-3a6c-9170-fc4aa9549561.roa
Signing time: Tue 06 Dec 2022 12:00:00 +0000
ROA not before: Tue 06 Dec 2022 12:00:00 +0000
ROA not after: Wed 11 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.153.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:27:19:db:fb:4b:38:8d:f2:c7:92:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 6 12:00:00 2022 GMT
Not After : Jan 11 05:00:00 2023 GMT
Subject: CN=cf27e2ae-f9af-495b-965d-4d3adb809190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:44:04:24:87:88:e5:82:d2:59:a4:6e:05:
b7:26:37:6c:2b:6b:d3:5a:3d:da:d2:ac:fb:c6:7d:
11:73:4f:fd:6d:9d:70:1e:59:1e:60:0b:bc:5f:2d:
f5:b9:61:25:39:0f:ae:25:ce:04:7c:4b:24:0a:ad:
f6:d8:d8:b0:e2:6b:2d:c9:8f:ef:b6:ad:1e:c6:87:
b6:7c:51:16:14:43:61:6a:71:88:25:8c:23:ee:ac:
e4:14:32:0b:25:01:0a:6c:ae:03:f2:48:28:59:ec:
9a:16:fb:f4:82:5e:fb:6e:93:40:a1:37:18:67:77:
11:10:5e:11:f2:59:ee:9e:0b:f4:1c:bd:c3:08:93:
10:21:de:bf:4b:fd:5a:94:39:06:68:18:b3:f2:92:
39:1f:25:9a:b4:a2:88:c2:88:4e:98:58:cc:f7:32:
1b:5a:55:50:fa:72:95:23:c5:42:39:15:0e:67:2b:
fc:17:52:25:d3:95:a1:d4:9c:d6:ef:cc:e4:ac:44:
53:87:8a:c1:22:0d:64:bd:c7:14:22:d5:3b:eb:03:
f6:65:16:d9:ca:91:a9:61:c8:e7:99:20:02:2f:3c:
44:23:18:ac:6b:61:00:9b:9e:9d:23:a9:bc:7d:04:
c6:b4:bd:a2:db:08:59:a5:24:d8:74:59:f6:50:35:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6D:9B:AB:47:E2:F4:24:83:44:75:A2:BA:80:12:EA:9C:95:85:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1fb9e38c-0471-3a6c-9170-fc4aa9549561.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.153.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:42:1b:7f:e2:35:01:3f:14:96:28:e8:2f:90:2e:cd:b0:e1:
f8:84:f5:6c:9e:9d:67:24:a7:c6:69:9d:7b:05:9a:cd:99:7e:
c7:55:e9:a7:61:04:bb:c8:d8:8e:db:69:64:58:50:18:91:20:
44:51:7a:3b:48:c9:97:7c:80:55:f5:9e:eb:6f:ff:8b:eb:a1:
d3:37:09:04:aa:e8:50:e9:20:d8:10:ca:91:3d:cf:79:f3:76:
45:dc:5e:a0:4f:f4:13:b6:cc:7e:17:87:4b:73:aa:34:10:62:
ce:4c:68:a5:33:ab:7e:d8:50:04:33:f4:4f:26:54:6e:75:f0:
8b:dc:5c:8a:51:ff:5b:b7:36:53:08:a9:0b:c9:55:51:d1:60:
e7:8c:64:a9:3d:7a:ed:ee:b6:98:0f:2d:e2:16:8e:6f:ee:76:
f1:16:1d:6e:8a:06:19:fe:4b:7f:43:6a:8a:52:4b:78:83:e0:
27:2d:76:9a:41:37:14:ee:07:9a:e4:df:6d:3d:be:23:6f:48:
56:ad:26:17:db:22:b6:69:68:57:44:7f:9b:14:4a:3d:82:2f:
88:83:6b:01:fe:c3:97:d0:60:25:2e:0d:96:a9:82:65:b9:05:
ad:36:c6:6b:fe:78:f8:4e:b6:6f:97:43:ca:61:2a:2a:9b:7a:
e1:94:6c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:36:42 2025 by rpki-client