Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a8fd485-1eac-33db-972f-eed8884c1a8c.roa
File: 2a8fd485-1eac-33db-972f-eed8884c1a8c.roa (raw, json)
Hash identifier: odU+ac1elmrmA3qCYmTdTHRziNcJ+EjgQbZYqaK3SEI=
Subject key identifier: F7:09:5B:A5:1E:5B:94:56:01:EF:AA:6D:38:35:39:07:5C:B2:1D:53
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FDBDEA8D67B3CEF87EDEE6D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a8fd485-1eac-33db-972f-eed8884c1a8c.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.133.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:db:de:a8:d6:7b:3c:ef:87:ed:ee:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=fefa004c-8517-417b-ba09-2cf820dc6a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:44:82:b0:fa:eb:49:20:10:42:ec:b5:1f:
45:3e:fd:86:df:55:c0:fb:ed:bf:ff:a8:4d:3a:17:
4e:68:d1:bd:8c:e5:41:1b:38:57:8b:1f:6d:e6:6f:
62:38:e7:4c:62:5a:c4:56:6c:ed:86:92:7e:b0:3e:
fb:af:8d:78:69:74:54:15:98:b1:f6:73:ac:b1:fc:
5a:b1:30:4b:5d:8a:c9:9e:61:28:65:a5:a0:69:a9:
ae:73:e8:7e:b7:bd:da:2a:b2:ed:53:f9:33:69:8d:
a2:3e:f5:c3:e8:af:62:02:9f:cb:23:80:8a:0a:34:
a9:43:db:f0:db:2f:90:06:ab:35:e4:58:d4:52:5b:
aa:11:8d:19:0a:89:e3:9d:c8:58:e4:12:16:f4:09:
15:58:f5:a1:e0:4f:09:b2:8f:62:d5:c2:40:e6:ef:
2f:bd:1b:b9:58:f0:29:f2:18:39:ed:1f:8e:43:cc:
60:47:12:47:05:8a:b1:92:eb:96:47:99:ef:09:73:
89:51:16:c8:54:47:7c:8a:e5:15:1a:26:47:90:9b:
1e:e9:7b:76:4d:a4:aa:56:26:fe:8f:43:03:11:42:
e6:9a:89:b8:cc:ce:da:64:59:a8:a1:d5:17:4f:c9:
59:54:e3:2a:52:bc:1c:77:6b:37:c7:0a:50:87:16:
f6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:09:5B:A5:1E:5B:94:56:01:EF:AA:6D:38:35:39:07:5C:B2:1D:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a8fd485-1eac-33db-972f-eed8884c1a8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.133.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:9a:a3:89:d2:62:41:c1:d9:65:28:83:04:7f:b5:28:43:c2:
e9:5b:79:d2:91:16:18:45:92:8e:1c:9b:71:b5:d5:86:c6:c1:
2c:9a:87:f5:f4:e9:fb:1f:f7:e6:c3:88:a9:2e:34:2a:4f:a6:
4f:aa:f8:1d:49:6d:7d:39:b7:4a:04:77:ef:84:14:00:05:88:
74:de:96:86:8c:0e:02:ba:24:54:de:22:61:a1:0c:a4:1f:5b:
98:a4:e0:6d:a8:7d:74:58:1f:aa:75:c3:0c:b2:ca:3b:8d:35:
0c:28:29:cd:ad:8d:86:0a:19:0a:3d:da:9c:9c:45:62:84:e2:
6a:f4:08:47:58:fb:eb:a0:59:3d:b2:39:7e:17:2d:9f:75:16:
f3:4f:e7:88:d1:26:09:d8:fd:05:39:45:c0:b0:9a:60:d8:a6:
43:9d:ef:d3:0d:71:d8:f2:0b:80:36:9b:48:30:34:ee:56:1d:
2d:2b:19:bc:bc:fc:a3:2f:16:af:94:c6:ed:3f:03:a8:1f:73:
81:1d:37:6c:7f:2e:04:a0:e5:5c:78:64:61:05:78:74:5c:25:
f4:d3:21:ca:71:71:4a:0b:80:10:b4:36:c3:69:76:05:49:65:
09:c4:22:86:f1:3f:aa:a4:53:06:f4:93:24:d9:f5:ba:3f:b7:
4f:61:cf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:40:16 2025 by rpki-client