Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/752d411a-e6fb-38a5-94d5-499524535715.roa
File: 752d411a-e6fb-38a5-94d5-499524535715.roa (raw, json)
Hash identifier: rny3iqn78Mgkc1NqOfmszvqV2ErWZgoh8pqDzUSrvrw=
Subject key identifier: 62:54:78:E9:21:8B:56:F7:E2:25:80:82:56:C2:3D:5F:E3:21:50:47
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FC8CB03C3E1468447639260A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/752d411a-e6fb-38a5-94d5-499524535715.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 15.205.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c8:cb:03:c3:e1:46:84:47:63:92:60:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=f438ff53-e341-42a0-9395-0eb66dfa3a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:76:a1:b7:48:ff:e1:4c:94:1a:ee:e2:54:9e:
83:8f:cc:6b:9d:cd:8a:16:8f:93:00:0c:25:dd:e6:
53:e1:39:e2:c2:fd:87:7d:c1:fa:80:fc:ae:59:e3:
32:ee:b4:0d:10:a3:7b:83:17:2b:62:57:cd:ae:5e:
f3:83:34:d3:1d:e0:4a:ba:35:e4:b4:32:88:48:40:
eb:bb:ac:01:ee:00:1f:bd:5a:11:87:3c:29:df:71:
74:aa:73:50:d2:38:58:e6:d4:c8:6d:4b:56:ef:fa:
a9:24:43:55:28:42:90:be:e7:ee:53:cd:1a:cc:d3:
17:e6:4d:bd:73:c7:30:63:0a:de:89:db:7b:73:61:
13:24:9a:fd:ac:fc:6d:0c:12:4a:33:48:91:75:1a:
13:8d:28:41:66:f7:73:db:32:fc:7c:99:93:f8:b0:
f5:48:84:7f:e1:79:3c:40:99:86:c8:ea:11:d1:ec:
ea:03:62:91:e9:11:fc:b6:75:70:46:18:74:7f:6c:
5f:6c:a4:89:4f:09:38:c8:11:7f:b5:3e:57:92:46:
45:ea:1b:9f:fa:cb:f1:72:f7:a3:2b:9f:6e:1d:4d:
08:2b:ef:10:43:5b:41:d3:cb:97:68:f0:58:06:d2:
3f:77:74:4d:a0:9c:91:77:f4:eb:17:b2:41:78:5a:
12:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:54:78:E9:21:8B:56:F7:E2:25:80:82:56:C2:3D:5F:E3:21:50:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/752d411a-e6fb-38a5-94d5-499524535715.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.205.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:28:80:b9:ae:39:11:77:cb:8b:25:30:11:56:e1:2e:fa:da:
b5:f7:cc:7c:1c:83:db:86:58:41:b1:ce:3a:c0:22:2e:78:44:
74:6f:b1:fc:20:a6:1b:35:88:0c:dc:40:8f:72:e7:80:c7:a3:
5d:e0:e4:a1:91:6f:2d:c9:b1:2e:76:c4:1b:02:b6:9e:27:5e:
08:58:a0:0e:9f:31:54:f0:14:8a:fc:95:19:ec:36:55:8c:e0:
f5:f0:ad:aa:a0:8a:75:d7:2b:41:b8:de:f9:11:82:fc:2a:75:
61:08:0e:b2:f8:f5:0b:65:f9:e4:e0:7f:52:90:4d:4d:dc:ad:
d4:e3:c2:03:0b:9a:be:d8:f2:5f:ee:53:01:17:73:ce:0c:28:
2e:2e:60:02:23:2f:d3:7e:a4:67:e7:4d:94:c3:b4:3f:a5:9d:
4f:08:b8:3b:2b:c7:d7:05:74:e6:28:59:40:4a:c8:27:71:e6:
b5:bf:69:40:aa:58:35:c2:a0:06:48:6c:74:09:cb:b3:7f:e1:
4e:20:9e:3b:50:b8:7a:b0:05:b8:69:ff:ce:aa:3f:a6:dc:2c:
4f:a4:a2:9d:a9:dc:73:5f:2c:d6:12:58:b7:53:31:59:e6:81:
12:7e:9f:df:e0:66:c9:6b:f9:95:0c:2d:14:33:ff:b3:9f:02:
4a:f0:a8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:02:52 2025 by rpki-client