Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b588ffb-d573-3c6b-8844-622f0d998391.roa
File: 2b588ffb-d573-3c6b-8844-622f0d998391.roa (raw, json)
Hash identifier: HBqoooXhznWjaaC0QgphE48w/VdFDXob8HyVvA4pikM=
Subject key identifier: 19:EE:01:CF:B3:76:13:01:36:A4:AE:03:EC:6B:8E:9F:48:B1:E8:27
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7ABD9A96EA0CD372A266E580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b588ffb-d573-3c6b-8844-622f0d998391.roa
Signing time: Wed 05 Oct 2022 12:00:00 +0000
ROA not before: Wed 05 Oct 2022 12:00:00 +0000
ROA not after: Thu 10 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.206.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7a:bd:9a:96:ea:0c:d3:72:a2:66:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 5 12:00:00 2022 GMT
Not After : Nov 10 05:00:00 2022 GMT
Subject: CN=bf9aa405-9385-4228-afd3-35f0ab5fbcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:34:4f:6a:d3:a4:81:d7:67:8a:88:ba:71:33:
7c:d9:b7:18:6b:ba:0d:a9:23:a7:75:d9:d6:3e:6e:
6b:f7:31:dd:ba:b6:6e:17:6b:f6:ac:05:80:89:96:
46:09:c7:aa:44:8e:4e:e8:cf:72:e8:a7:dc:5f:b2:
9e:a6:21:67:9d:c8:e0:8f:0a:06:1d:14:9d:23:c2:
e0:52:a7:d4:69:26:5c:fc:75:05:57:69:cc:ba:bf:
76:b4:a5:e6:1c:ff:bd:8b:25:66:1d:85:9f:12:3b:
78:4b:35:94:a5:4c:55:02:6f:41:31:5a:49:2f:8d:
42:f3:c6:d4:92:53:1e:92:fb:03:25:55:47:f3:94:
19:50:8d:ec:8e:c6:25:02:5b:87:61:49:2a:f1:83:
d4:fa:b1:05:d1:cc:e5:e1:c0:e5:66:b0:5e:be:47:
dd:50:cf:5b:a5:b4:7e:a1:16:e9:05:1c:36:10:9d:
a8:a0:10:7b:9a:47:96:23:b1:8f:d1:e8:5a:27:b2:
a5:8a:48:4a:f1:5e:14:4d:d3:34:c8:42:1c:b7:b3:
0b:2f:df:7d:f0:aa:f7:95:83:ea:10:00:01:d8:84:
0f:25:21:4b:c2:ef:1f:1f:02:19:3c:67:f8:9f:d9:
3b:e4:21:39:cc:2d:0b:8a:f3:dd:e3:36:48:f2:d6:
6b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EE:01:CF:B3:76:13:01:36:A4:AE:03:EC:6B:8E:9F:48:B1:E8:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b588ffb-d573-3c6b-8844-622f0d998391.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.206.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:9b:75:b4:64:f5:ce:c1:47:1e:2c:4c:4a:df:33:4e:0e:e7:
90:a7:2e:27:d4:8d:fe:76:d6:c3:ad:1a:47:2b:aa:da:88:83:
6e:dd:c3:97:9b:44:50:fa:a3:0b:03:73:11:1f:fa:a8:66:26:
51:59:a9:2d:33:3c:6c:27:ac:5f:09:b5:9a:59:ad:88:d9:d3:
93:e6:6a:51:ef:eb:f8:ea:c3:5d:b0:54:e3:82:93:b9:3a:fe:
bb:2f:4b:60:d1:08:d0:55:60:05:5e:3e:c0:7d:c5:71:5e:75:
60:13:83:76:3f:17:dd:b9:26:68:d6:bb:2c:36:bb:b5:d7:25:
3a:8a:07:f5:53:c4:39:dc:3a:3b:d5:69:25:8e:83:94:1a:b9:
7f:06:ab:aa:71:29:69:a9:ea:26:68:24:28:fa:a4:f3:2b:ff:
58:dd:d2:16:11:ff:6d:ed:99:62:d0:d8:fd:75:31:1c:1f:94:
e0:53:88:20:08:db:d7:a8:75:90:52:c3:25:dc:6f:ff:b3:62:
01:e1:79:f0:95:4b:4e:51:d6:55:28:ff:a7:3d:2e:0e:34:73:
99:fc:ac:e0:da:38:12:62:bd:64:87:37:ee:10:5a:a8:cf:2e:
ab:7e:12:70:fe:42:d0:ac:00:a0:60:73:d1:be:d5:87:e1:64:
ba:e8:5e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:26:07 2025 by rpki-client