Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2149aff8-dadc-3669-9569-157021e11ac9.roa
File: 2149aff8-dadc-3669-9569-157021e11ac9.roa (raw, json)
Hash identifier: S8Y6jVoG4ed29TyvPytpTSmsuD89D/phqK+0WfVlRvg=
Subject key identifier: A1:77:D9:03:F1:D1:4E:7C:5D:87:3C:89:AD:D6:C3:EE:84:BA:99:5B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF2D25A8AF8B66EC038CF8E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2149aff8-dadc-3669-9569-157021e11ac9.roa
Signing time: Wed 18 May 2022 12:00:00 +0000
ROA not before: Wed 18 May 2022 12:00:00 +0000
ROA not after: Thu 23 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.192.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f2:d2:5a:8a:f8:b6:6e:c0:38:cf:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 18 12:00:00 2022 GMT
Not After : Jun 23 04:00:00 2022 GMT
Subject: CN=6e91574c-d097-4f79-9b94-1ccdfd8cd656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:17:28:14:27:fd:21:93:ba:c0:10:bd:54:
d2:ba:98:21:ef:53:1a:33:5e:fa:0c:e5:ff:94:8f:
e4:4f:f5:37:03:2b:fa:80:a2:b9:07:cd:41:16:93:
76:0e:59:82:ae:0c:0d:76:d8:fb:8d:76:e2:ed:a9:
c9:e2:b7:69:fb:ce:c8:d8:74:a2:17:20:ae:71:d9:
03:dc:b2:2d:ed:01:a0:cf:95:d8:7a:c5:a2:f7:61:
0a:c2:a2:d3:7e:ba:e2:66:b8:36:2f:a5:8d:db:2c:
79:2b:1c:0e:fc:9e:c6:c4:fa:4e:6a:e9:93:65:c0:
a5:e0:62:49:2b:b3:6b:85:16:9d:12:9d:61:cb:d2:
90:4d:5b:3a:e8:18:8e:52:cb:69:3a:c5:5a:b9:56:
77:ea:9e:cf:8a:f5:a2:c1:81:95:f6:76:e0:63:29:
81:d3:03:d6:76:75:9a:8c:a1:a7:29:05:31:36:06:
c9:b3:44:53:06:bf:40:52:18:f8:f9:d9:a6:74:41:
88:74:e6:3e:d0:b8:40:2a:fd:59:03:a1:5c:7d:7c:
ed:01:59:a6:4e:19:31:40:d4:26:22:9e:4f:90:5d:
62:88:57:13:56:57:f5:08:80:60:e8:ae:09:82:44:
b8:ee:8d:07:87:00:65:97:dc:cc:74:80:66:a6:7e:
05:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:77:D9:03:F1:D1:4E:7C:5D:87:3C:89:AD:D6:C3:EE:84:BA:99:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2149aff8-dadc-3669-9569-157021e11ac9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.192.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:98:7f:77:ed:f3:08:de:b7:de:ec:b7:97:60:e2:8d:7e:26:
0e:52:36:64:40:07:94:13:bb:ef:88:d0:86:a2:e9:98:f4:f5:
b9:e9:55:10:4a:45:d4:2b:5b:ea:d4:03:6f:29:f9:aa:8f:88:
4b:ef:4e:e3:b0:43:db:3e:cb:12:df:f5:b6:98:c2:c0:10:44:
6d:52:54:ae:03:66:62:fd:ae:d2:fa:66:e9:c3:8b:ac:cd:1e:
07:56:77:c7:47:ce:3f:da:c8:3b:09:8a:2a:58:ca:c6:ef:3a:
d6:95:45:36:b3:c3:01:42:8a:3e:8a:cf:75:2f:3d:40:1d:06:
61:5b:a4:11:2f:76:e5:48:c7:61:30:f0:d2:a1:af:98:fa:06:
47:1f:fe:67:a7:5f:fb:e0:4a:97:41:f6:98:ae:28:0b:2c:91:
f2:12:e8:3b:6b:49:d8:53:c6:14:2f:17:85:b3:dc:51:86:10:
97:eb:3a:b5:8d:5b:6e:d7:56:25:3c:93:2e:d0:33:d6:d3:0b:
01:d8:86:dc:af:21:ee:8c:a4:ec:9e:30:fd:22:fc:b4:68:3c:
b8:b1:e0:91:0e:cc:10:30:be:b3:9a:d9:6b:f8:e3:43:2b:cc:
83:f8:02:b0:61:7e:17:0e:ea:35:93:c7:9b:da:fd:6d:55:23:
14:b3:85:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:33:35 2025 by rpki-client