Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/78894673-4df5-35c0-a128-81581bee6f3b.roa
File: 78894673-4df5-35c0-a128-81581bee6f3b.roa (raw, json)
Hash identifier: nwIhH1k8pD8fqkX0G4cwtwnsXZnq8X4m1JE6naFVJeg=
Subject key identifier: E0:49:14:5B:85:00:66:15:D8:A5:C0:89:97:E8:1E:EF:24:EA:82:07
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D565E195BD21E93F17B0F7A60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/78894673-4df5-35c0-a128-81581bee6f3b.roa
Signing time: Thu 24 Mar 2022 04:00:00 +0000
ROA not before: Thu 24 Mar 2022 04:00:00 +0000
ROA not after: Thu 28 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:56:5e:19:5b:d2:1e:93:f1:7b:0f:7a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 24 04:00:00 2022 GMT
Not After : Apr 28 04:00:00 2022 GMT
Subject: CN=3c87dcf9-9777-44d1-b43d-eff3ffaccaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f2:86:96:c1:d1:9b:06:91:39:f9:a3:5d:63:
00:6c:4f:03:dc:37:5b:a0:4d:1e:ca:ad:30:95:ef:
68:fa:8d:41:6f:35:8b:67:41:04:fb:6c:0c:4f:d3:
62:1c:dd:f0:e9:cd:92:b8:0a:49:a1:dd:bf:3b:10:
6d:2f:fc:bb:8b:72:0f:42:06:0a:34:ee:3f:1d:b6:
4e:7a:9a:50:1e:05:5b:05:a6:d2:0f:6c:83:bb:1f:
00:fe:21:ae:03:3d:7e:4f:2f:27:11:76:9a:32:05:
e1:b5:35:21:87:45:68:c2:ef:24:26:3b:f4:f1:32:
ca:6b:79:73:c5:ae:52:fc:f5:3d:37:85:74:e3:30:
25:82:7c:34:28:4c:fb:97:68:fa:d7:80:9d:8d:b7:
4e:90:f8:1c:de:4c:10:61:16:e5:c7:f4:7a:2b:73:
e2:27:ab:97:a4:96:8e:3b:cb:25:16:82:d9:e4:ac:
94:3e:d8:45:d0:92:19:f3:7e:03:5c:f6:f6:dd:ef:
c7:b8:c8:be:80:ba:5b:09:52:b4:b3:2b:a2:4b:73:
69:08:2b:99:dd:fa:e0:48:f7:89:22:fa:fd:fa:74:
01:02:4d:c4:d9:13:69:26:14:34:0b:a5:f7:e7:64:
dd:da:ef:be:18:1f:47:ec:c3:37:be:43:7a:a3:3c:
4e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:49:14:5B:85:00:66:15:D8:A5:C0:89:97:E8:1E:EF:24:EA:82:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/78894673-4df5-35c0-a128-81581bee6f3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:db:39:ad:2c:1f:49:73:c1:0e:14:3c:29:d5:76:f9:b5:cd:
6a:89:89:41:9b:ed:d7:0b:ab:61:02:b0:de:7a:c9:8d:dc:5b:
31:fa:74:a7:da:67:dd:aa:90:45:32:63:65:5e:ba:51:30:ba:
63:0d:77:90:7a:2b:0b:dc:ed:9b:c1:ae:32:c3:07:54:78:45:
12:d9:e5:49:90:c3:ed:97:22:ed:25:43:51:2b:44:5f:95:cc:
5a:f0:d4:84:e1:0f:6c:a2:1b:87:b7:64:95:a7:c6:61:cb:0f:
d1:cf:bc:1b:6a:9b:eb:9f:41:1d:59:0c:b6:6d:b8:40:8d:f2:
96:84:a2:f3:da:ad:c4:90:78:2c:46:c9:b3:1d:bd:51:0c:fe:
04:d9:24:3b:8b:07:1b:06:2b:35:6d:93:dc:a6:da:bb:2d:ff:
df:74:39:0b:48:79:31:09:71:f4:a4:b2:34:b4:5b:64:9e:21:
7f:fe:b3:7c:15:f3:33:73:3c:bc:58:3a:31:39:70:c9:f8:2b:
98:98:15:fc:87:a2:6a:2b:47:0d:30:26:dd:0b:e4:af:b8:ce:
9f:98:7c:ce:5c:c2:d9:ee:96:8a:a4:f3:63:94:6f:84:37:75:
e2:5c:d4:58:58:68:56:45:18:70:fb:4a:c5:49:c3:ee:b1:42:
d9:67:a6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:33:34 2025 by rpki-client