Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/32a61236-1c4a-334d-aa8b-328331c91cd7.roa
File: 32a61236-1c4a-334d-aa8b-328331c91cd7.roa (raw, json)
Hash identifier: 7IAjTgkENzOcLLsi1QpiClNTFaAbmX1lVLjsCX6/+0E=
Subject key identifier: BB:97:34:17:AA:0C:99:C7:7A:AE:78:38:16:04:B8:8E:B7:EC:A9:25
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3F62FC8819DBE6471B2BBDB0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/32a61236-1c4a-334d-aa8b-328331c91cd7.roa
Signing time: Wed 14 Sep 2022 12:00:00 +0000
ROA not before: Wed 14 Sep 2022 12:00:00 +0000
ROA not after: Thu 20 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.162.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:3f:62:fc:88:19:db:e6:47:1b:2b:bd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 14 12:00:00 2022 GMT
Not After : Oct 20 04:00:00 2022 GMT
Subject: CN=72b13df3-2618-4ca3-9f44-6bc56d3a2159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:d9:fe:f1:df:86:ad:b2:32:42:85:a4:74:
e0:ea:90:02:17:37:a1:78:87:85:a6:85:9a:ec:71:
83:68:71:f6:7e:2a:31:9e:96:8f:4c:cf:4a:81:22:
82:66:3f:d2:a8:6d:54:80:22:33:ff:e4:5d:22:41:
69:a3:dd:e7:4c:50:3f:14:b8:df:f1:01:a7:fc:19:
22:3a:f8:7e:2e:ea:12:15:f3:4e:1f:7c:83:32:38:
54:80:82:c3:b7:66:4d:cd:c4:dc:10:40:6f:01:d6:
64:f1:df:69:95:df:b0:42:d4:04:04:84:56:b6:d9:
18:35:c5:b4:0b:ff:07:11:ca:6c:d1:fe:00:4b:74:
3d:63:da:a4:4c:b4:7d:ca:a9:6b:9d:a0:08:b8:d6:
3a:1b:71:1c:4c:86:0f:83:41:83:99:14:f3:c7:22:
23:b1:a6:17:78:67:88:ab:35:d4:e3:d6:01:96:d1:
3f:a4:f7:bc:fd:cb:e2:84:6f:10:2e:78:95:36:83:
3c:7b:66:93:62:1d:31:0d:c7:08:cf:f0:77:a1:24:
22:c0:21:04:0e:ec:5c:73:20:41:ab:9b:b6:fc:23:
53:c5:f5:a4:7e:38:71:c8:19:15:f7:36:1d:61:fa:
a1:e2:f5:3e:b3:66:8b:fb:54:85:e3:d0:34:52:14:
3a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:97:34:17:AA:0C:99:C7:7A:AE:78:38:16:04:B8:8E:B7:EC:A9:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/32a61236-1c4a-334d-aa8b-328331c91cd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.162.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:93:50:46:05:17:23:3a:23:13:0a:80:ce:31:00:48:4c:26:
11:eb:d4:55:53:bd:13:03:7b:96:d2:2b:ba:c4:76:95:4b:38:
cd:ac:e0:74:ab:ca:f3:66:77:5a:1d:08:52:6c:f9:e6:1c:5d:
71:ff:86:d7:5c:e0:3e:4a:0b:0c:41:0c:c6:83:10:87:11:00:
05:20:59:08:17:00:50:81:6d:fd:6c:30:7e:47:74:ec:61:2b:
f4:35:bc:b8:40:67:74:c9:be:92:61:bd:69:57:83:22:5d:ad:
2d:82:d2:7d:34:5c:11:c7:2d:27:f4:6f:d3:cf:79:ee:c5:42:
b2:c0:32:97:7f:f8:c0:4e:b6:7b:55:e0:63:f4:a2:19:55:5a:
bc:cb:be:70:95:1e:5f:4c:b4:a8:0d:20:ac:fa:55:bf:81:70:
40:84:a8:e9:4f:91:87:a6:84:e3:a7:f3:3b:68:6d:af:fc:c1:
76:86:51:64:ed:d7:27:c6:05:fb:04:3b:c9:e8:fb:a3:59:f6:
9e:fd:34:15:54:f0:45:11:25:db:d1:62:ec:de:50:b0:2b:95:
6e:b5:5c:0f:ea:f5:55:3a:5c:de:91:f0:ff:4a:db:3e:11:c6:
c7:fb:c6:7f:59:58:b6:e5:41:85:1c:cb:b4:62:90:6d:ef:5d:
07:b8:cc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:55:08 2025 by rpki-client