Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4499ba14-acf8-3648-afc3-423dfa31c23f.roa
File: 4499ba14-acf8-3648-afc3-423dfa31c23f.roa (raw, json)
Hash identifier: vjnRzJ6BPVTvE0iNRy5Uw8cKrKIu2Iu1HYr05VOiLjc=
Subject key identifier: D5:0B:89:6D:D5:EF:F6:BA:2E:06:36:8F:7E:7D:51:9D:0C:EB:90:03
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EDD87E113A077E1795783CFC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4499ba14-acf8-3648-afc3-423dfa31c23f.roa
Signing time: Wed 10 Aug 2022 12:00:00 +0000
ROA not before: Wed 10 Aug 2022 12:00:00 +0000
ROA not after: Thu 15 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.236.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:dd:87:e1:13:a0:77:e1:79:57:83:cf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 10 12:00:00 2022 GMT
Not After : Sep 15 04:00:00 2022 GMT
Subject: CN=a728f331-32c2-48e7-ae25-5519ae83cd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:62:7a:0f:06:48:de:71:46:bc:4f:42:fc:e4:
ce:d4:26:7e:1f:11:68:d8:c2:7d:d1:d1:87:fb:6d:
3d:81:9a:c4:0a:c0:86:b4:8f:63:36:07:de:b4:52:
1b:67:c9:74:28:36:83:3f:b4:c6:55:21:c1:a3:db:
a4:ba:33:ac:11:49:ec:1c:73:91:ec:7a:6b:18:66:
54:1d:8e:ee:29:48:da:43:be:b3:79:02:d5:90:f0:
65:04:99:22:09:76:f5:05:0d:96:66:a3:52:63:5f:
26:14:7e:e0:89:4c:36:f3:12:e7:a9:51:88:19:88:
d0:d7:89:0e:bf:d4:b0:a9:30:20:a5:aa:f5:77:f8:
cc:23:ed:d1:36:ee:a1:b4:22:15:de:98:b6:83:9e:
4e:e7:3a:b1:90:5e:bf:5c:63:68:8d:54:c6:54:e8:
7c:1e:64:b5:8b:26:c7:75:5f:a6:19:17:3b:6b:19:
b8:a3:70:29:c6:4f:4d:e6:3d:f1:03:70:47:90:82:
ff:94:36:cf:cd:87:c9:4a:c7:4b:56:e7:3c:a1:27:
b7:ac:28:59:c2:c6:28:7a:f3:59:f5:19:3a:22:85:
72:99:04:4c:a0:05:17:f7:5e:01:20:2a:8c:19:aa:
72:a9:09:24:bf:2b:12:14:52:d1:ad:44:87:39:45:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0B:89:6D:D5:EF:F6:BA:2E:06:36:8F:7E:7D:51:9D:0C:EB:90:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4499ba14-acf8-3648-afc3-423dfa31c23f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.236.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:68:37:7e:3d:b5:2c:5b:c2:39:16:05:b5:7d:a3:f8:b4:95:
82:04:cc:89:bb:e8:02:df:42:bf:81:0d:51:e9:98:3c:0a:7c:
80:b2:13:b4:3e:5c:8d:5d:c8:f5:9e:a1:0b:3c:d3:7e:0a:26:
f6:30:ea:00:c8:10:72:e2:5c:e5:8b:47:63:f6:47:b4:a2:08:
c4:a6:15:6f:23:da:cc:3c:e0:ef:75:9f:e4:b2:6d:6a:f4:07:
f2:67:ae:be:70:2c:f3:01:27:d9:79:42:32:df:aa:e8:c9:fe:
2e:e8:59:b0:ec:5d:8c:53:78:3d:14:2c:29:08:b5:95:b0:12:
c0:93:bb:a2:56:de:6e:1e:a0:21:30:78:76:d2:25:15:f1:57:
3b:44:a9:b7:66:b9:43:01:62:f5:a4:10:7d:39:60:78:5e:60:
9f:23:30:a6:c4:36:f5:7e:79:7a:a9:2a:08:b4:a6:6a:82:ea:
39:72:2b:84:a8:b2:0e:05:d4:7b:72:30:14:af:0f:17:4d:28:
60:9c:cb:9d:81:a2:9d:27:04:0e:b7:e0:b1:4a:bb:11:58:9d:
a1:cd:5e:ea:e3:ef:3f:a9:70:fa:94:58:cf:66:67:7a:a9:bc:
13:00:99:9e:4b:ea:4f:f6:4f:8a:1f:c3:3d:78:f1:7a:37:a1:
27:f4:a3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:18 2025 by rpki-client