Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/31aecb93-e434-37d0-96bc-87a97c2b98ee.roa
File: 31aecb93-e434-37d0-96bc-87a97c2b98ee.roa (raw, json)
Hash identifier: mwNrd7MvPCmhCLql0hrHIHQls0qqc9FMRQCzAYNg53Q=
Subject key identifier: 3B:A1:00:30:26:5F:49:4B:73:EC:B3:9D:B5:BF:55:EC:EA:CF:B3:9A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584051803195622C580D30FA3B40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/31aecb93-e434-37d0-96bc-87a97c2b98ee.roa
Signing time: Wed 21 Dec 2022 12:00:00 +0000
ROA not before: Wed 21 Dec 2022 12:00:00 +0000
ROA not after: Thu 26 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:51:80:31:95:62:2c:58:0d:30:fa:3b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 21 12:00:00 2022 GMT
Not After : Jan 26 05:00:00 2023 GMT
Subject: CN=7b1c9671-6e1c-49dc-87e3-d12b62416947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b7:93:aa:d0:9b:6a:b3:f2:01:6a:ea:61:f6:
a6:ea:0b:cc:18:63:0b:23:ff:ad:e3:99:a7:33:ff:
46:e1:68:bf:f6:25:cb:76:db:21:ca:48:d9:d6:17:
57:9d:fc:79:49:1e:5f:49:29:3c:b8:3e:1f:ea:c7:
aa:3c:aa:51:91:27:92:3d:88:45:c5:23:fa:9f:ea:
51:4c:61:4d:17:fc:ff:dd:c6:48:8f:e9:69:fa:01:
3c:01:1d:a9:ee:49:79:5c:5c:e0:69:af:e6:41:96:
09:aa:8b:cd:86:11:f2:51:b0:d1:5a:50:d8:18:96:
52:e3:a4:7e:72:6b:55:0a:ca:29:fa:8e:f7:b4:77:
45:b6:29:67:09:b7:7e:7d:c5:63:76:3e:18:d1:f3:
8f:95:52:d5:3c:62:7c:97:00:d5:77:67:7c:c5:47:
74:40:5f:79:bb:63:23:1f:ae:e6:67:d0:aa:27:bd:
3f:1d:3d:66:7e:80:c2:13:f8:c3:cb:11:9e:94:a3:
96:e5:c5:b7:d2:c4:74:e8:0f:7f:72:07:b7:b0:1b:
b2:43:c9:be:f0:72:ea:79:39:b3:d9:52:d7:9d:8a:
16:1f:03:2d:73:f6:e3:af:42:02:bc:72:67:7c:47:
86:18:ac:bf:ad:c5:f1:88:91:e1:52:a5:aa:3a:c6:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A1:00:30:26:5F:49:4B:73:EC:B3:9D:B5:BF:55:EC:EA:CF:B3:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/31aecb93-e434-37d0-96bc-87a97c2b98ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:ed:48:5d:2f:99:3d:35:94:d1:72:6e:8b:7a:58:1a:72:ff:
14:42:df:2b:6e:5d:9a:63:21:77:69:10:2b:98:74:8a:03:2a:
c3:70:07:64:ce:00:48:70:7b:d7:74:47:3d:41:7b:2d:f9:7c:
71:61:55:ba:e8:70:f1:60:e3:43:6f:69:d5:61:71:9f:cf:a2:
26:a3:c9:ae:26:d8:b5:bf:40:b8:a3:16:f0:22:63:16:48:62:
76:b6:4c:c1:a3:67:36:61:a1:c9:ea:ac:89:17:dc:d0:40:7e:
23:b2:42:ad:68:4e:af:44:c6:c1:69:9e:94:71:29:26:73:2e:
75:5c:b1:54:02:24:6c:83:f4:b5:d7:61:ad:34:2b:c2:f6:da:
53:41:0d:3c:65:19:e8:e2:26:07:78:07:fc:99:08:98:ba:85:
4a:02:0a:40:57:91:69:46:2c:cb:d6:33:49:ee:e1:8c:ce:70:
ef:85:ef:14:81:44:31:7b:7f:75:e5:f0:3a:e0:f8:25:a6:41:
4b:72:f1:a1:7f:74:7e:0d:fe:07:87:d9:cd:f6:8e:3a:64:9c:
f8:47:a8:e4:d1:57:f4:91:1d:41:bd:26:98:a5:0f:4d:a1:67:
3d:de:06:14:79:41:27:bc:16:4c:a4:42:02:fb:b2:cf:00:25:
c3:b3:dc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:58:25 2025 by rpki-client