Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5af0f227-0c89-383a-8001-718bcc7d1025.roa
File: 5af0f227-0c89-383a-8001-718bcc7d1025.roa (raw, json)
Hash identifier: 2reEkozh7xVOjnzCd4j2IjqA4+E2wMFcsJk0NgmrDwU=
Subject key identifier: F1:42:6D:76:96:E4:BE:42:4D:3D:47:47:62:DA:F5:B8:81:82:72:4F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F8D77C46C252917CBF769B220
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5af0f227-0c89-383a-8001-718bcc7d1025.roa
Signing time: Wed 12 Oct 2022 12:00:00 +0000
ROA not before: Wed 12 Oct 2022 12:00:00 +0000
ROA not after: Thu 17 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 15.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8d:77:c4:6c:25:29:17:cb:f7:69:b2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 12 12:00:00 2022 GMT
Not After : Nov 17 05:00:00 2022 GMT
Subject: CN=cee8d769-c198-4449-8044-87f81333f276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:94:e4:26:a7:f0:6e:6e:76:ad:86:24:25:
3c:5e:3a:b4:ca:a4:30:41:fc:9f:fd:84:cf:16:34:
f2:1b:b8:b1:06:06:ba:d1:3d:ed:88:d9:f5:0e:47:
cb:74:22:09:5e:13:34:4d:97:c3:60:f7:96:2b:5a:
4e:23:4b:f8:4e:50:79:43:f1:8a:b9:7f:4c:fd:07:
55:53:9a:16:cb:30:6c:0b:eb:b3:41:90:15:4c:84:
71:c2:be:7e:4c:04:79:d1:d7:91:02:24:c1:06:75:
ee:b9:80:22:5a:ec:82:98:9c:69:aa:b0:fc:b9:4d:
03:69:70:8a:c1:a1:2c:b4:cd:cd:83:fe:3b:68:4d:
ed:b6:5e:43:48:5e:72:db:03:c9:32:9d:e6:2d:d0:
ee:62:45:c8:4e:e6:ec:5c:83:bd:7e:2d:1d:39:27:
d9:6d:70:ea:10:0e:ed:11:6d:c2:f7:b4:01:17:38:
5b:f2:7d:9d:97:af:ee:7d:20:25:d7:e8:d5:99:2f:
59:5a:ce:93:66:65:46:22:e3:95:33:3c:04:a9:3c:
ec:42:2c:42:03:0b:50:dd:b1:32:ce:59:ab:b5:01:
3c:85:14:b3:d0:93:65:72:71:a4:49:8c:c9:15:d9:
3c:fa:7d:ff:5c:05:43:15:02:d8:b4:92:8a:49:de:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:42:6D:76:96:E4:BE:42:4D:3D:47:47:62:DA:F5:B8:81:82:72:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5af0f227-0c89-383a-8001-718bcc7d1025.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:ba:13:6a:74:c8:ae:d8:83:a8:dd:ca:b0:8a:ea:5f:66:36:
1a:d6:2d:3c:a5:84:79:af:06:72:a8:74:19:26:be:68:a9:b3:
5f:4f:5e:aa:68:b5:81:0d:9f:4d:63:b9:1e:db:38:5e:d6:74:
4b:2c:e6:6c:58:7d:d1:ed:5e:05:7a:5c:36:53:b8:6b:fe:d7:
43:23:1a:d4:27:1e:1d:1d:cd:a3:c6:21:b0:ff:7f:bd:c7:bb:
39:4e:a7:03:ff:0e:61:1e:b3:f8:64:00:6c:2f:91:96:f1:e6:
37:f1:54:e2:f3:b8:9e:f3:a7:69:46:69:51:fb:bc:46:2d:da:
ef:39:be:1d:c2:fe:75:8e:55:11:c0:97:16:0a:32:76:ac:ec:
09:ef:94:72:10:92:06:b3:aa:85:ef:46:e2:85:06:f7:8f:95:
24:b4:99:0a:d5:8f:40:18:09:4b:53:ea:80:99:ab:aa:96:46:
30:f0:22:ac:16:0c:64:3d:fb:82:4a:e4:bb:27:50:49:16:81:
05:e0:37:fb:88:9b:13:4f:25:69:45:4d:a6:ae:ed:42:1f:30:
ac:c9:ff:e1:07:fe:4a:e1:9e:01:f6:a6:fa:b8:82:8f:28:c0:
58:48:c4:73:6b:cb:ad:f6:36:00:85:b1:29:6c:6e:f1:28:96:
4a:eb:2a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:51:11 2025 by rpki-client