Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/348827f1-2427-3c11-82c5-129366f4510b.roa
File: 348827f1-2427-3c11-82c5-129366f4510b.roa (raw, json)
Hash identifier: KDsrQO3GBAXaQk3ZsdFceYA6TS5Dp8bqOytNawIWKaY=
Subject key identifier: B8:9F:48:41:4F:AA:76:7C:D5:81:45:85:B7:43:50:5E:FB:55:9C:84
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF2D9CE16A2E0EF5B578B1C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/348827f1-2427-3c11-82c5-129366f4510b.roa
Signing time: Wed 18 May 2022 12:00:00 +0000
ROA not before: Wed 18 May 2022 12:00:00 +0000
ROA not after: Thu 23 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.236.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f2:d9:ce:16:a2:e0:ef:5b:57:8b:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 18 12:00:00 2022 GMT
Not After : Jun 23 04:00:00 2022 GMT
Subject: CN=687e11cd-7390-49cd-a1c4-df86e65e8b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:1b:59:d6:5c:b9:ad:29:fa:07:91:8f:67:
fe:f2:2f:f1:40:af:11:10:f3:80:26:44:94:7f:df:
3c:5a:52:a9:22:c6:6f:78:8f:ad:21:3b:92:19:45:
e3:e2:25:59:fb:fb:a1:c1:34:23:38:1c:6e:b2:bd:
f8:b4:fc:a3:5b:c9:9c:bc:14:ad:9d:d2:2c:d9:19:
5a:61:86:42:28:f5:77:37:7a:3d:d1:40:cb:90:02:
6c:67:01:09:9f:5f:15:01:19:75:8c:d5:e6:ac:cf:
5d:f9:a4:d1:d7:6c:a9:b1:21:2f:6e:96:4d:24:b2:
e0:dc:e9:d8:1b:61:15:55:4d:da:88:7d:bc:2d:ba:
f2:6b:3b:2a:3a:cc:12:df:13:69:84:b5:6a:58:b3:
a2:91:65:58:4f:29:bd:a5:fb:fe:bc:e4:40:1b:df:
15:00:18:87:8e:80:f3:71:46:77:20:b9:ea:cc:52:
8d:91:c4:58:66:b2:99:02:63:01:20:b3:20:99:e3:
d8:e9:d3:e2:91:01:2a:5e:1f:19:23:7c:34:0d:9b:
14:de:1d:7a:45:c9:8b:a2:49:79:0b:2f:19:34:96:
64:25:07:55:ab:bf:85:41:52:c9:77:f8:d8:54:63:
2e:28:c0:c1:8f:a1:47:78:a7:07:77:de:f0:e9:bd:
07:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9F:48:41:4F:AA:76:7C:D5:81:45:85:B7:43:50:5E:FB:55:9C:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/348827f1-2427-3c11-82c5-129366f4510b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.236.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:7c:f6:80:20:4c:6c:70:6c:6b:b2:28:00:49:d8:c9:bf:9c:
78:b2:ad:23:6c:bf:59:27:b1:65:ed:f3:87:6a:59:4e:e3:b5:
69:ab:bf:79:9e:af:a9:c6:0c:94:0e:f4:0f:9b:1d:ba:63:05:
0f:bd:aa:c3:f8:92:91:74:79:ae:34:71:52:66:50:b1:69:79:
78:6b:34:38:8d:54:4a:14:2d:32:56:95:4e:7e:61:fd:89:7b:
43:be:8c:74:0f:f6:47:c5:15:77:15:e1:68:83:f2:71:e3:b7:
2d:0f:f3:af:6b:1b:1f:8d:cd:35:71:7c:24:91:88:a4:07:a5:
bf:44:f1:1e:bd:3e:39:b5:c7:cc:d3:1a:7a:2d:3e:58:cc:84:
79:a9:84:10:62:9b:22:8e:f8:0c:c8:1d:c0:47:d4:b2:c1:21:
03:26:0b:1d:cd:ec:fb:48:37:8d:80:0f:bf:e8:b7:c9:29:c4:
69:81:85:23:80:dc:87:07:c1:a9:3a:29:b5:b5:e1:5e:e1:9f:
4f:9b:55:28:b3:65:10:5b:5a:02:4e:fc:36:16:6c:2e:96:9a:
25:d7:a1:d9:16:b8:1a:11:4b:3d:ed:1e:a8:b9:07:c7:8b:04:
b3:5d:7a:82:36:f0:6a:ec:d6:95:e7:93:0b:77:06:1f:d2:5a:
61:0c:20:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:02:38 2025 by rpki-client