Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5b76f6aa-9cea-3cd5-9b50-ee175dfb853e.roa
File: 5b76f6aa-9cea-3cd5-9b50-ee175dfb853e.roa (raw, json)
Hash identifier: fk/1ko4eBOrqixKhouLK5BIVvfVAHetGto8u4iVKtm0=
Subject key identifier: FD:7D:16:38:8D:AA:6C:53:30:28:22:D0:97:95:98:56:9C:A0:A8:02
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE10EC20BD7919E82C105B3B0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5b76f6aa-9cea-3cd5-9b50-ee175dfb853e.roa
Signing time: Thu 10 Feb 2022 05:00:00 +0000
ROA not before: Thu 10 Feb 2022 05:00:00 +0000
ROA not after: Thu 17 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.236.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e1:0e:c2:0b:d7:91:9e:82:c1:05:b3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 10 05:00:00 2022 GMT
Not After : Mar 17 04:00:00 2022 GMT
Subject: CN=39b6d270-c938-428c-ae47-b86527b39cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:b1:6f:46:2a:31:78:8e:f9:1a:2d:46:3f:
1f:d6:8d:81:07:68:98:f3:d6:58:d4:3d:6a:ff:93:
92:3b:2e:11:e9:2c:59:5b:25:20:c9:64:17:ff:84:
a6:f1:5a:c7:bb:b5:ea:1d:52:65:c7:3d:9a:c1:b1:
eb:e6:67:9c:8c:d0:13:0e:cb:63:fe:67:24:23:e5:
93:04:1a:bb:bf:81:1e:99:a0:6e:ad:bd:66:84:6e:
8b:e0:22:46:1a:3b:c8:e4:83:bf:08:0f:6c:b0:65:
29:1e:06:27:2c:5d:3c:6b:c4:72:0c:89:4b:74:51:
05:25:fc:a9:45:34:26:37:6d:99:c7:dd:bb:b8:89:
cd:c1:b7:6f:3b:46:33:21:58:66:ab:63:ec:a4:aa:
a7:e5:a1:68:42:a2:e9:79:0b:3f:37:d3:8f:86:b2:
bc:c0:29:73:54:99:83:f3:ca:e0:f9:54:49:a9:e4:
3b:3d:c6:11:d0:ae:cb:88:6b:45:b4:25:4f:24:b1:
7f:0c:30:37:5f:86:0a:37:e6:91:c5:e9:9a:61:55:
e6:9d:8b:b7:6c:4a:e3:3f:39:87:aa:26:25:44:0a:
c7:c2:0d:bc:38:4a:4a:dc:2d:6b:86:62:27:2b:06:
01:8b:cb:73:7d:10:1f:44:83:58:33:1d:19:79:d1:
1b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7D:16:38:8D:AA:6C:53:30:28:22:D0:97:95:98:56:9C:A0:A8:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5b76f6aa-9cea-3cd5-9b50-ee175dfb853e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.236.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:52:c6:83:9b:79:2c:2e:bc:24:12:d3:75:ca:94:64:90:03:
36:78:ce:30:be:3c:f9:07:9b:2c:28:b4:5f:dd:84:7b:42:31:
23:4b:67:7b:fb:6b:90:e0:ba:2f:7c:19:c6:b1:90:e7:b2:be:
64:33:24:f9:7b:57:d9:7b:51:df:28:54:91:1e:dd:3b:dd:31:
d3:c6:83:c1:19:72:54:d0:f0:ef:0b:ec:d9:b4:70:82:52:d1:
dd:fb:f9:15:ae:f3:fd:29:f7:09:68:53:a1:93:ed:16:5d:77:
2f:ec:ed:a2:0a:2b:46:b4:95:96:f7:11:9b:50:07:cd:43:ad:
e2:c7:03:76:59:92:01:d6:1c:d2:f8:a5:09:7c:af:af:83:eb:
8a:e0:63:fe:05:ee:c0:4d:a4:c6:a2:90:f5:e5:a2:61:8b:69:
54:5a:f8:c0:64:f6:d7:4c:f0:ad:ad:91:ee:a2:62:b7:98:f5:
93:67:d9:02:59:4f:7a:ed:c1:53:70:10:d4:b7:0f:bd:67:55:
7c:62:6e:bf:91:61:9c:a0:7b:f6:78:87:1e:dc:f8:cf:71:16:
a6:40:b1:1e:18:84:3b:49:8b:6d:9d:a0:db:e9:ec:83:e1:6b:
8c:a6:24:a6:4e:d4:d0:c3:fc:a1:38:fb:36:fa:f2:b1:b4:7f:
77:24:a6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:52 2025 by rpki-client