Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/669e3f60-22b5-3080-976c-9b923243290d.roa
File: 669e3f60-22b5-3080-976c-9b923243290d.roa (raw, json)
Hash identifier: jP5RrAUdWIqGeWYaWtOup8Zb0zFrUROKsxNBViU0UZk=
Subject key identifier: 4E:E9:0A:37:77:54:9D:CC:A2:E1:EB:99:89:82:AF:05:66:64:B3:97
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584064C04E91289D5E841A54A5B0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/669e3f60-22b5-3080-976c-9b923243290d.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.172.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:64:c0:4e:91:28:9d:5e:84:1a:54:a5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=cc45abd0-06f1-4889-8d88-71983db5b2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a3:2f:81:f4:99:d4:cc:75:cf:98:34:d0:6d:
b9:f2:7c:fb:ad:39:75:e7:6d:3d:84:a9:01:8a:b2:
33:17:7e:68:0c:e7:62:fc:93:6e:fe:47:8c:74:51:
29:38:00:6c:20:d3:dc:71:62:14:50:b2:e3:7b:d7:
0b:6e:1f:95:a7:06:19:66:50:2b:a4:d3:09:af:b5:
45:81:55:40:e8:aa:a8:50:53:be:34:a0:49:cc:9c:
69:f2:db:34:8c:36:88:33:75:28:48:78:cb:b8:59:
17:94:6e:86:51:36:6a:78:02:3e:7c:96:98:49:b8:
18:db:37:e4:e6:57:c0:12:74:74:98:6c:ec:55:98:
d0:b2:25:a3:d9:51:a4:82:e6:fa:12:0d:87:b5:7c:
93:ac:be:2a:31:d4:18:ae:aa:9b:a5:09:51:cf:b2:
9e:1b:7a:dc:55:a9:34:80:15:a7:a8:03:2f:3d:a9:
40:90:0d:17:30:41:51:e7:35:cf:7a:15:58:7e:93:
0c:38:74:37:48:a0:96:69:96:ec:10:27:1c:df:33:
80:fc:3e:fa:42:74:d7:5b:ff:79:f6:d6:1e:be:9d:
5d:46:b8:83:7c:02:f7:dd:dd:99:2e:89:7f:fb:4d:
f6:51:b7:b2:51:81:e2:97:d7:16:8e:bd:98:77:7d:
20:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E9:0A:37:77:54:9D:CC:A2:E1:EB:99:89:82:AF:05:66:64:B3:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/669e3f60-22b5-3080-976c-9b923243290d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.172.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:bc:d9:31:84:59:3a:13:95:e2:fe:d4:99:10:b3:7e:5c:7f:
bf:a5:cd:2d:19:c1:28:de:19:85:d3:76:7a:a2:b2:0d:63:68:
a6:0c:a7:8d:72:10:98:09:07:a7:76:fa:04:58:1e:51:a3:4a:
20:78:23:3d:4d:9d:46:14:03:6e:1b:14:05:20:d4:ae:66:f6:
f4:fc:72:42:6b:76:37:16:4a:ef:35:22:99:96:7b:c0:25:a6:
30:16:02:a1:f1:7f:d0:fe:21:05:4b:30:32:bb:d0:e1:68:67:
ae:57:6d:90:f8:51:c9:ae:54:8a:1f:eb:9d:0f:73:b1:e4:4e:
fc:b8:ca:12:aa:54:2c:9e:b5:78:19:25:73:3b:c8:ed:45:29:
c3:3c:01:6a:26:16:b4:3f:43:62:2f:6e:d6:c3:e9:c1:7d:b9:
3e:2c:df:21:59:fa:1a:24:fc:c1:0e:77:c7:0f:34:c8:99:99:
62:77:12:ff:b5:3a:e0:94:2d:7d:b8:eb:23:47:b5:2d:96:6b:
b2:f5:cc:e2:aa:98:06:bc:48:67:2f:dd:0d:cb:55:17:14:2a:
12:fd:62:ff:1d:bb:b6:d1:64:a4:de:6c:86:07:dd:95:63:34:
fc:fd:79:0f:49:fb:98:0f:cb:71:84:25:63:a9:30:e1:15:38:
d9:bc:f5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:27 2025 by rpki-client