Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/82fc059c-953b-3787-96bf-a4ca8a798d6f.roa
File: 82fc059c-953b-3787-96bf-a4ca8a798d6f.roa (raw, json)
Hash identifier: SeP1MtPewCRp937BATb/l7jmTwWboSyWQNa4JParuHo=
Subject key identifier: C5:B7:3F:6B:75:A1:AC:5D:BC:73:BB:42:F2:B4:12:90:3D:87:A3:03
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403D7E15CE88ACDF6A0774A920
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/82fc059c-953b-3787-96bf-a4ca8a798d6f.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.177.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3d:7e:15:ce:88:ac:df:6a:07:74:a9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=a23400d1-e10b-403e-acce-b28cc142ce9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:59:5c:6f:c5:32:ba:00:42:86:53:e0:69:11:
f4:4f:c5:81:46:f5:82:37:7b:64:8d:7f:2e:fb:55:
f2:47:f9:de:7b:15:55:55:91:30:90:3a:dd:5c:97:
57:ed:92:13:b3:40:5d:b2:ec:6a:52:59:81:ac:96:
dd:c5:96:f1:e1:e8:e8:a4:55:66:b8:e7:f4:a0:c0:
e5:ab:f1:9d:6a:55:15:1c:60:d3:81:be:6c:84:f9:
5f:fa:55:bd:86:2d:6f:06:90:49:1f:88:8c:d1:f4:
2f:7f:c8:74:2f:76:f4:69:e0:b9:f4:e2:3b:0f:cb:
0d:b9:a0:9e:7a:c6:6e:c0:3d:e5:f2:13:7e:64:fb:
7d:47:4d:fe:8a:68:90:61:a3:70:1a:48:3c:ed:90:
d7:2e:47:08:79:3c:c3:89:8f:d6:25:78:f0:cd:13:
c9:86:9f:43:52:a8:9a:50:60:9a:4e:4e:9b:50:22:
c4:b3:fa:44:70:9a:de:85:83:d9:7a:9d:f9:cb:07:
ce:a4:0e:d6:df:2d:64:c0:06:36:77:a3:33:5f:e8:
59:5b:3e:c0:82:64:19:98:8f:70:19:84:82:a9:96:
2a:7e:9a:cf:81:e7:60:17:7d:60:50:19:8f:32:b5:
35:ae:30:27:58:4f:fb:a0:50:0b:f7:56:a2:8e:8b:
9b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B7:3F:6B:75:A1:AC:5D:BC:73:BB:42:F2:B4:12:90:3D:87:A3:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/82fc059c-953b-3787-96bf-a4ca8a798d6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.177.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:c5:e6:cf:62:b4:f1:4d:a8:57:68:0e:66:69:67:61:f3:71:
30:6e:c6:c6:aa:ed:ad:88:62:e6:00:76:1d:f1:cd:38:88:4d:
65:13:3b:b4:7d:c2:7a:ca:4d:ac:34:38:6b:97:18:db:23:ff:
7f:ee:7a:13:ec:45:61:be:df:4d:91:18:df:8f:57:b7:cc:2a:
df:d3:3b:e6:07:ea:64:27:c9:f8:f4:30:d2:4c:e7:7f:36:0c:
86:af:0d:1e:1e:1b:df:f3:82:cd:59:83:d4:08:11:d4:5a:19:
0b:55:7f:81:ae:ca:ab:a7:4e:9d:79:94:18:8a:cd:7c:d9:f5:
ca:4b:53:a9:ba:d8:d5:5a:d9:6e:00:9a:3b:d9:b8:24:38:69:
09:60:aa:0d:59:96:69:38:1d:4e:20:01:6e:c0:e2:63:5d:e2:
9e:b4:a6:ca:3d:89:ca:01:f3:69:ca:da:30:eb:a5:eb:81:ea:
ad:25:97:94:6c:bc:1f:d2:0a:c8:2d:cf:8a:38:e5:90:39:fe:
e3:55:43:23:2c:94:52:9a:49:86:6a:e0:fb:27:b1:3b:a6:7a:
3c:54:f9:b0:85:7f:ce:f5:cc:ca:bd:d7:00:b6:8c:4e:dc:ce:
db:ef:68:93:78:18:95:58:11:0c:2b:0b:cb:07:1d:3a:1b:7c:
f6:59:11:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:29:12 2025 by rpki-client