Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f8dcee9-32cc-3048-97f6-1f200d88d01c.roa
File: 4f8dcee9-32cc-3048-97f6-1f200d88d01c.roa (raw, json)
Hash identifier: vE1m7Sik4F8kx+UZuLY1DYirRpKnZQ4AuZ+jJXloW6Q=
Subject key identifier: B0:E1:EC:D2:4C:6A:35:92:E9:22:92:F0:B1:08:48:2C:F5:33:2E:5E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403DE64AB8D4AA3D3D7BBF96C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f8dcee9-32cc-3048-97f6-1f200d88d01c.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3d:e6:4a:b8:d4:aa:3d:3d:7b:bf:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=7230068a-f629-4652-9dd9-66400588e2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:7d:ff:0a:b4:be:f3:62:68:2b:da:4a:ef:
ca:0b:7f:e2:64:fd:58:87:a9:e9:05:53:01:09:65:
be:68:d8:2b:88:2d:fb:a1:87:93:c3:a6:5d:64:99:
e4:71:53:3b:ea:36:26:95:38:a9:11:e5:65:ad:50:
17:96:ea:4e:f1:75:7c:7f:30:29:14:10:2d:84:a9:
67:bb:5a:38:ab:53:94:d5:09:ea:81:b3:8b:ee:bb:
5b:de:d5:88:d8:2a:c1:22:6b:25:24:06:70:7a:8d:
a7:9f:c4:9d:55:b5:2a:c3:7e:bf:e7:f7:02:37:15:
d5:e1:eb:e2:82:7b:5a:48:7d:b2:c8:1f:86:57:cd:
cb:2e:7b:d6:aa:04:1f:e3:4a:d7:e4:a4:70:ac:7e:
f9:9d:0b:81:dc:40:e9:4d:66:9a:1a:9a:e0:f4:98:
55:f8:26:64:c5:1d:c7:d6:b2:a6:45:71:93:d6:08:
5e:5d:79:e5:6a:a8:08:14:f0:52:61:59:5e:0c:99:
39:05:f6:70:ae:f4:57:23:19:24:30:e2:75:f6:d3:
a2:7b:e0:67:94:fb:95:2f:1b:7f:9c:d3:28:be:d0:
21:6a:3a:f8:77:82:c2:61:f2:21:e0:df:e7:b1:38:
1e:8c:03:aa:8f:c6:a7:f4:6b:79:2c:16:b4:4b:31:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E1:EC:D2:4C:6A:35:92:E9:22:92:F0:B1:08:48:2C:F5:33:2E:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f8dcee9-32cc-3048-97f6-1f200d88d01c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:39:3a:86:70:99:e4:25:e6:26:b3:b4:34:f5:b2:05:2b:c3:
eb:92:bd:15:f3:ac:b9:48:07:33:bc:de:d8:da:11:02:43:b0:
ef:67:32:ef:3f:95:6f:b3:b6:25:b8:2e:4b:a7:37:0e:b7:28:
bf:6c:4f:02:0c:b2:cc:e8:b5:93:00:06:05:c0:e5:7c:ec:21:
ef:1f:06:9a:91:1a:b5:9d:87:13:ea:bd:77:0b:96:5e:0b:d5:
e4:2a:c8:66:29:cb:92:40:af:25:5e:71:f8:31:cf:8f:df:47:
28:b3:d8:71:64:1f:28:85:08:eb:0c:ce:9a:5b:81:40:39:50:
15:c0:06:35:d0:6c:ec:57:56:9d:6c:a5:04:9d:b1:ee:6e:73:
9c:a7:16:5f:a6:9a:cd:5f:e6:9c:bb:9e:49:29:08:1d:09:4a:
d2:a5:25:fc:d6:7b:09:67:7b:32:0d:83:06:0d:18:59:8d:bd:
ff:3a:e8:f9:ad:08:4d:ad:50:00:82:39:a2:49:0b:ad:9a:84:
77:b0:1a:60:8d:2f:61:64:e6:bf:85:52:c1:9c:6c:26:42:94:
43:00:99:eb:ff:34:bc:79:65:b3:97:eb:11:39:4d:42:ab:0e:
be:99:ef:39:c9:1f:21:ba:8f:82:2f:37:9e:4f:4c:a5:27:72:
2b:b5:6a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:21:17 2025 by rpki-client