Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3df7e2d2-29f7-3881-a7e5-b507c1ebf4c9.roa
File: 3df7e2d2-29f7-3881-a7e5-b507c1ebf4c9.roa (raw, json)
Hash identifier: nq3pZtBVA4C6gFJde47hRWZJDCh8a01NJYWwQHbMUt4=
Subject key identifier: 0D:25:E8:14:88:56:6E:E2:DF:33:D8:31:32:31:FB:EB:80:BA:4B:B1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5373BB8669D2B42F81DEBE80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3df7e2d2-29f7-3881-a7e5-b507c1ebf4c9.roa
Signing time: Wed 21 Sep 2022 12:00:00 +0000
ROA not before: Wed 21 Sep 2022 12:00:00 +0000
ROA not after: Thu 27 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:53:73:bb:86:69:d2:b4:2f:81:de:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 21 12:00:00 2022 GMT
Not After : Oct 27 04:00:00 2022 GMT
Subject: CN=c4022956-9b43-4928-b651-7b5ad527ac1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cc:80:f3:76:e9:62:ca:46:73:d5:69:f8:bf:
65:7d:b8:05:dc:4e:02:0b:61:a6:5e:2b:a4:6f:eb:
d9:e4:4b:a6:c8:f5:9a:bd:b1:95:7d:c3:6c:af:6c:
b2:34:67:d4:e6:e5:46:41:0a:2f:11:f2:2f:b9:d2:
84:09:4c:5d:6d:8a:53:46:89:31:a0:60:4d:d9:34:
13:0b:7a:e1:a0:be:20:fb:99:a9:2b:ea:db:af:4c:
c9:77:b3:fc:03:95:b6:01:f8:5f:6a:d1:96:3e:a6:
6e:68:a5:74:78:20:3f:9f:5c:9e:fa:95:3c:b2:67:
5c:f6:3c:ab:93:e5:76:e0:ed:b4:89:83:c2:87:9a:
0c:f6:fc:37:6e:e1:11:ec:89:06:db:f6:85:9e:83:
36:d0:83:b9:c5:f0:70:8b:e6:07:91:d8:f8:66:9f:
c9:d8:64:d9:28:47:28:02:83:2e:15:b6:27:b7:19:
96:8e:5c:a2:0b:01:8b:82:28:48:56:0d:15:83:f4:
fb:f8:13:7a:d7:6b:10:b5:19:80:38:f5:02:d7:19:
83:35:17:25:6f:2d:a5:0f:43:81:cc:68:e6:a1:e8:
df:c5:ce:76:87:34:63:7d:4a:95:70:ac:72:12:32:
36:fe:b6:f7:9f:39:9b:d8:3f:53:a0:20:86:d4:04:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:25:E8:14:88:56:6E:E2:DF:33:D8:31:32:31:FB:EB:80:BA:4B:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3df7e2d2-29f7-3881-a7e5-b507c1ebf4c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:5d:91:ea:0f:bb:b0:e9:ce:61:f3:c3:d5:82:a8:dc:9f:70:
01:26:96:6e:1a:38:50:06:99:79:e3:4e:16:58:61:7e:45:c2:
35:9f:d1:4e:e1:99:46:3e:00:13:b4:1b:45:4f:a1:4d:7c:00:
42:be:e6:52:92:29:b4:50:84:9b:59:26:9c:d4:e8:32:aa:30:
6a:09:49:57:af:e4:16:68:5c:88:89:43:d8:54:39:da:28:a3:
7d:3d:6a:d9:49:4d:a8:61:91:b0:93:ae:97:a7:ca:26:53:6b:
78:a2:22:41:f1:e2:5d:55:18:e0:af:a4:d9:d4:24:8b:f0:fa:
c8:18:b0:81:a3:2b:cd:c0:52:e2:f8:5f:87:4d:98:5a:a1:fc:
0a:2a:0e:52:41:62:0b:d7:d1:b4:1e:72:38:05:a4:ec:b2:b3:
a0:ce:97:22:65:68:28:8b:84:8a:0d:2b:d0:bf:38:39:9b:e8:
a0:ce:c6:99:5a:eb:64:b8:de:39:2b:0b:da:94:c0:7f:36:ee:
85:44:51:d0:bc:72:39:3c:0c:fd:70:3e:24:89:2f:59:76:3e:
90:be:13:8d:87:3b:50:5d:35:21:8d:d9:2e:98:8b:0d:bc:ab:
ba:ea:16:36:1f:72:2d:7a:1f:29:15:ff:7a:fe:8d:d2:b3:73:
c7:3b:24:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:10 2025 by rpki-client