Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/61194a34-ada6-3c09-8c7e-09cee5d7c66c.roa
File: 61194a34-ada6-3c09-8c7e-09cee5d7c66c.roa (raw, json)
Hash identifier: bpLRqCvlUcd5i/yjg6zFUbr1nPsexD+CAwFp6w4BFVo=
Subject key identifier: A1:24:1E:DD:D1:09:18:20:4E:9F:9D:D3:AC:4A:08:A8:81:DB:4C:18
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F64075063F887FBC4ADD17040
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/61194a34-ada6-3c09-8c7e-09cee5d7c66c.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Wed 02 Nov 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.199.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:64:07:50:63:f8:87:fb:c4:ad:d1:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Nov 2 04:00:00 2022 GMT
Subject: CN=77cfbd46-f60c-42d4-9db5-430d1294a47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:80:b4:fd:b0:80:36:c6:17:22:db:9d:cf:
da:9e:2a:ad:29:ef:44:18:9c:dd:e4:77:52:ed:4d:
7a:f1:5f:07:a5:59:6e:b5:38:c0:63:d2:40:03:57:
d5:2f:5f:30:be:19:6d:d3:66:8f:33:8d:95:12:65:
33:16:a3:9a:1e:78:f5:aa:3f:28:91:27:b0:88:f7:
6c:d3:a7:0f:ec:6c:83:4c:80:55:20:2f:79:e5:17:
7b:47:86:25:6e:0c:3d:41:6e:8a:6b:bf:dc:4c:db:
f9:b0:71:7c:80:79:c3:0c:4f:b2:d9:72:5e:85:bb:
16:0d:40:b9:fd:37:80:2c:8c:a0:d2:44:b2:f6:5b:
8a:25:cd:00:93:8b:66:89:ae:e4:a3:2d:67:1e:05:
a0:8e:f3:c9:75:6d:fb:eb:ac:13:97:8d:b4:02:b9:
45:60:07:41:88:27:96:b6:32:95:cb:18:6c:95:f4:
d8:09:0b:28:6c:a1:a6:92:6a:91:25:6f:a9:26:66:
b6:a8:c2:57:3d:1b:09:41:f1:b7:a1:2c:f7:6e:80:
7f:87:90:5e:06:f7:8a:c0:85:14:e4:e6:82:11:bf:
fd:68:6a:37:6f:eb:d7:ca:5c:22:3f:bd:71:e6:82:
1a:47:5d:10:b6:6b:6f:0c:4f:e9:b5:92:3f:c7:83:
cd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:24:1E:DD:D1:09:18:20:4E:9F:9D:D3:AC:4A:08:A8:81:DB:4C:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/61194a34-ada6-3c09-8c7e-09cee5d7c66c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.199.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:25:d6:2d:74:e9:b3:ee:e8:0e:9b:29:6d:1f:d6:ca:65:73:
be:60:8b:f4:cb:ca:5a:68:06:cb:21:93:32:16:3b:24:6c:23:
03:9b:64:33:ce:87:11:c2:75:5b:50:43:b9:18:cb:09:88:aa:
c7:ec:87:a6:00:5f:83:e1:bb:c0:98:22:25:84:17:08:98:d9:
27:d4:8f:21:f9:a3:c6:ec:b9:78:5d:44:6a:18:c0:4f:02:f1:
ac:3c:df:bf:ac:fc:47:51:ae:44:69:8e:95:b1:8c:47:a5:50:
70:7a:11:7c:69:3c:a5:9e:99:ae:61:24:8c:9f:ae:44:63:12:
bd:d6:e6:ed:02:8d:20:ab:65:00:7e:b1:45:75:b7:73:a6:bd:
28:cd:43:3e:5b:4b:2b:f9:bc:ce:38:c9:46:be:22:e2:bc:2c:
5e:a1:6a:5b:53:46:de:78:71:86:ed:3d:63:a4:30:8f:00:0f:
fb:cd:9b:22:89:4c:50:d5:5a:b5:8a:c6:76:5e:f2:d0:21:57:
16:7e:14:b4:8e:48:21:5c:ed:9f:9b:d7:df:4d:cd:69:4a:9b:
2c:fb:7c:ba:c7:52:2d:fc:fa:16:80:61:03:54:c4:e1:60:78:
8c:dc:dc:a3:be:7c:07:56:cf:c8:be:cf:f2:fb:94:ad:55:bc:
2d:d5:81:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:01:01 2025 by rpki-client