Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64af9e05-3204-3db7-b80c-c703a8bfe66f.roa
File: 64af9e05-3204-3db7-b80c-c703a8bfe66f.roa (raw, json)
Hash identifier: LT0W+kuLe+XUwBU46ggTvhEyB7sB71Dk/tCba6ZHjE0=
Subject key identifier: 63:B9:74:AC:E0:38:80:A1:DF:6C:C5:AF:3F:2B:43:79:D6:D0:A9:A2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858408FD1F832AA23CC56AB5DFF00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64af9e05-3204-3db7-b80c-c703a8bfe66f.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 3209
IP address blocks: 15.145.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8f:d1:f8:32:aa:23:cc:56:ab:5d:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=206b6804-5713-41a4-82a0-b32b20ca485b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:48:ed:8b:70:8b:34:c6:81:5e:8f:a3:b7:
66:c1:d3:b4:59:ec:15:dd:c9:19:c6:a4:eb:1b:e3:
26:ae:62:29:ea:0b:87:c7:72:93:95:0d:b4:b0:21:
ed:4f:7c:7f:d5:1c:b1:73:6a:0a:23:7d:5e:a7:9e:
53:2d:f3:84:1c:a6:63:d7:30:17:47:c6:d8:7f:16:
98:7d:8d:0f:47:52:12:8c:34:e0:15:64:5c:53:0e:
2d:e4:1e:1f:3c:97:24:17:8b:ef:eb:62:92:04:ec:
79:3a:08:93:a4:02:5f:51:67:f8:e5:f8:64:5a:cc:
b4:50:49:20:fb:ec:6b:41:f2:15:bb:b3:93:6c:d8:
9d:91:cb:02:44:3a:95:24:30:45:06:37:5a:36:53:
67:d5:2d:22:0f:ba:05:59:3c:09:4d:a2:12:02:15:
b7:a6:2d:17:c8:8b:81:37:20:dd:54:df:ca:27:0d:
35:db:25:6b:ad:c5:ca:4a:be:68:0b:33:55:6b:5a:
da:ce:0f:5a:63:1d:76:b1:22:83:7a:91:24:aa:a7:
d3:9d:08:d1:91:62:ce:45:37:0d:49:c6:2d:f0:8c:
6e:b6:47:57:a0:2f:f7:6f:7f:ac:34:34:ec:b2:a1:
02:39:11:67:f1:3c:01:d8:a3:38:82:3f:f6:2a:9b:
2b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B9:74:AC:E0:38:80:A1:DF:6C:C5:AF:3F:2B:43:79:D6:D0:A9:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64af9e05-3204-3db7-b80c-c703a8bfe66f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.145.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:19:a9:84:cb:c2:d1:9e:8c:1f:39:6c:94:39:e4:bf:30:bb:
e2:bb:13:86:7f:fd:8d:04:75:0e:9f:59:a4:af:e0:4e:36:aa:
ef:61:b4:98:71:02:38:25:26:1e:8c:35:02:51:95:c4:e3:ff:
c1:d9:b4:fc:f3:19:12:16:d3:20:6c:06:ec:19:b2:8e:49:88:
75:6b:a0:fc:97:f4:8f:a0:c4:f7:e6:92:3d:9d:d5:ea:bc:6b:
b7:16:e4:ce:e9:cc:cb:1d:51:20:2e:99:5b:1f:1a:f7:dc:70:
e2:2d:d3:66:11:37:85:b5:e0:cc:d0:3d:66:ea:5f:25:02:46:
c1:23:ab:e4:17:7a:ae:93:8e:27:34:87:cb:bb:55:ae:d0:0f:
24:d4:26:46:22:44:42:60:b6:6f:12:1e:66:b6:d6:75:67:c4:
b2:c5:37:e1:40:eb:51:11:43:df:90:40:af:d7:d7:3c:0c:6b:
39:bc:94:44:1a:6d:b5:9b:bf:3e:5f:05:16:95:66:60:81:46:
2a:13:56:48:30:3a:0c:8e:b5:d5:b8:32:6b:e3:e3:cb:2a:df:
15:28:67:32:cb:04:06:d3:17:6b:f2:2e:7f:a4:8e:af:f9:bd:
4b:9d:5c:6e:5a:e9:04:46:56:7a:19:f1:aa:b0:d4:c7:1c:fc:
0b:3c:d4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:31:50 2025 by rpki-client