Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3a7d3466-d431-373f-b01e-3c911eb2d541.roa
File: 3a7d3466-d431-373f-b01e-3c911eb2d541.roa (raw, json)
Hash identifier: qaxWvE7oogrI2iPk3ybVD30IYnX2vjpsZcOnYV4aQbU=
Subject key identifier: E9:F7:88:7A:60:A2:4C:3A:D1:57:C4:BE:1C:30:E9:3E:A0:08:F8:CC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584051E0B99109FD60CBDEF90680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3a7d3466-d431-373f-b01e-3c911eb2d541.roa
Signing time: Wed 21 Dec 2022 12:00:00 +0000
ROA not before: Wed 21 Dec 2022 12:00:00 +0000
ROA not after: Thu 26 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:51:e0:b9:91:09:fd:60:cb:de:f9:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 21 12:00:00 2022 GMT
Not After : Jan 26 05:00:00 2023 GMT
Subject: CN=0582e1b7-9fd3-4388-bf3e-eac5f80662c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:17:5f:69:f8:b1:d7:11:9f:26:27:25:47:25:
e7:7b:54:be:06:77:20:80:6c:0f:95:11:ca:c2:81:
f9:c5:64:ac:89:ce:9b:d8:c9:5a:dd:0e:16:18:d0:
ed:a3:b1:34:a7:5c:36:17:de:df:a8:2e:2d:ef:f9:
d0:7e:a0:9c:f0:32:63:a7:8f:4f:44:e4:68:82:df:
41:de:c8:38:05:18:a0:e5:8f:68:26:9a:b9:bf:49:
c6:84:7c:2d:13:2d:34:02:7c:78:fc:52:30:d6:fb:
d1:29:32:24:65:10:77:f5:53:67:e7:8b:63:19:bb:
62:82:37:7c:e1:8b:f8:87:18:76:9f:ef:96:89:45:
3f:33:97:36:bb:39:69:84:79:95:0e:26:7b:c3:1f:
ef:48:a3:23:88:4a:9e:03:c7:64:8e:9a:86:6e:9f:
48:fc:94:41:78:93:59:55:ca:c5:a2:53:5d:3a:1f:
e6:b1:fb:32:8c:95:2a:82:c7:7c:aa:7a:9b:24:08:
67:39:95:fb:7a:bf:00:db:14:42:c5:99:6c:2b:87:
7e:b4:7c:a5:ca:ea:dc:0e:cd:5f:b8:28:48:2d:1d:
f0:24:cf:c6:fa:2f:2e:c4:00:f3:3e:bc:2d:01:9b:
cf:43:67:85:35:54:cc:aa:51:bb:fd:4e:3e:f9:f1:
7f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F7:88:7A:60:A2:4C:3A:D1:57:C4:BE:1C:30:E9:3E:A0:08:F8:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3a7d3466-d431-373f-b01e-3c911eb2d541.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:15:d4:a9:62:c8:08:2e:6e:ed:d2:b4:0f:f9:27:14:a1:a1:
d2:41:d1:30:e6:c6:ca:77:ce:ee:c4:16:19:54:50:40:bb:01:
8d:27:d3:af:be:89:71:f0:98:37:b3:cb:05:13:95:1f:00:02:
ba:6f:43:4d:be:68:23:63:19:04:b9:5e:30:97:28:e0:ce:e3:
4d:43:45:72:24:7d:ed:f3:75:7c:65:42:13:ea:67:5e:5d:1f:
86:7d:13:f7:7c:20:bc:7a:e6:49:42:19:da:81:4a:58:92:84:
f8:fb:e9:fc:5d:dc:91:4d:9d:1a:90:58:db:a0:8b:4d:56:af:
58:e1:61:a0:bc:ac:c2:89:1e:92:10:51:d3:8c:fb:cd:11:7e:
d7:88:60:7f:e4:92:d5:21:32:e7:6a:3c:55:0f:cd:50:8a:b3:
11:ec:64:e4:ea:74:b9:cb:83:eb:6c:b5:4f:8a:03:00:ca:3a:
f9:a6:42:30:f9:52:fe:a4:b3:56:8d:f9:be:85:5d:78:1a:71:
71:d0:e1:25:f0:32:c9:36:b8:0a:f9:3e:f3:80:c1:72:cb:6b:
26:68:41:c3:05:d6:e6:32:2f:95:09:c8:80:6b:14:60:89:51:
dd:2d:f7:bb:46:e9:fa:e2:74:8d:cf:92:f2:cb:ea:f4:9a:61:
04:f7:e7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:51:33 2025 by rpki-client