Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/840f860d-b6a0-3717-b4c5-5a535bf8c359.roa
File: 840f860d-b6a0-3717-b4c5-5a535bf8c359.roa (raw, json)
Hash identifier: xov17TJ/az3ftRPtj9NYNzeChpQZyqXfT/CiP45h18w=
Subject key identifier: F7:51:4C:2E:74:AC:29:FC:A2:E6:07:FC:D5:98:56:6D:62:37:46:05
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F8EA18557CFC729CA746500E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/840f860d-b6a0-3717-b4c5-5a535bf8c359.roa
Signing time: Wed 12 Oct 2022 12:00:00 +0000
ROA not before: Wed 12 Oct 2022 12:00:00 +0000
ROA not after: Thu 17 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.141.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8e:a1:85:57:cf:c7:29:ca:74:65:00:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 12 12:00:00 2022 GMT
Not After : Nov 17 05:00:00 2022 GMT
Subject: CN=3b59bad2-e133-4cba-b198-8ce1dbf32757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e4:e1:a3:8d:32:8b:10:48:80:14:17:7f:b1:
77:83:23:b9:b2:d3:b4:fb:a4:e8:10:c1:a2:cc:bc:
d0:6e:4d:65:09:eb:58:04:24:b3:a1:57:7a:fc:e1:
bd:14:81:29:92:ae:fe:19:68:af:b8:c0:4a:7a:30:
00:79:ad:4c:56:6e:95:e6:6f:f9:82:d7:a8:5d:83:
d8:7b:6c:60:bf:6c:66:ff:f2:95:f3:b2:2e:27:0f:
64:3e:b7:74:1c:83:c4:cc:94:9e:d6:5c:96:d6:34:
cd:42:44:ee:2b:4e:57:d4:89:c7:6a:ba:49:05:21:
f5:1f:5a:a2:aa:d6:52:43:d1:73:aa:31:6e:a9:b1:
42:3f:da:35:32:05:2a:20:dd:73:ff:8c:51:33:2e:
2b:59:51:2c:8c:6d:72:df:f5:f3:94:05:b0:83:0a:
b5:c5:ea:67:af:d8:ab:ba:ee:28:d2:44:1b:31:b6:
d8:15:70:87:ca:7a:41:24:ef:cd:c1:35:a4:07:b5:
ef:31:04:9a:e5:03:44:98:1e:56:8f:60:56:fa:68:
b6:03:f1:7e:65:74:40:4b:ca:d8:d1:b0:3b:64:f6:
97:bd:72:7f:38:fe:19:6d:84:2f:87:fd:a4:4e:a1:
34:84:00:18:01:e7:87:37:39:fb:f5:6f:13:e0:42:
29:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:51:4C:2E:74:AC:29:FC:A2:E6:07:FC:D5:98:56:6D:62:37:46:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/840f860d-b6a0-3717-b4c5-5a535bf8c359.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.141.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:39:81:aa:7d:f5:e7:04:6d:b0:dc:e2:af:d5:e4:f2:21:3a:
1b:0b:c7:92:ff:f6:00:87:db:70:94:3c:21:6e:8e:ec:fd:ff:
d6:c8:10:b3:fd:11:57:a3:3a:af:19:a4:51:59:32:25:6a:3b:
d5:53:31:34:bc:7e:0a:0e:a9:64:41:3a:fb:e7:b8:1d:56:e4:
ae:81:95:53:72:28:df:c7:c1:05:41:2f:42:e2:e3:64:26:e3:
d3:7a:83:04:b8:3a:02:88:49:8f:27:01:27:ff:48:0b:7c:61:
a2:b3:2e:60:2c:c2:8a:fe:41:07:d1:fc:7d:ec:6d:bc:38:f4:
14:46:58:14:80:9c:ac:0b:fd:94:b7:3b:9d:ad:be:4b:15:36:
27:42:39:b9:c4:61:d1:bb:ba:62:35:a1:7e:0d:76:d0:7a:71:
ad:a6:33:38:55:e4:2c:4e:1a:f0:39:15:1b:fb:18:e1:21:2e:
f2:4b:fd:ad:4a:fc:98:4a:34:6e:09:cb:a9:6d:f3:dc:6d:b2:
f0:00:48:58:42:7b:b0:d8:5c:c1:73:bc:92:49:c9:7d:26:92:
43:a0:23:e3:55:6e:cd:ef:e3:ac:a2:b9:b5:6a:ea:b5:5f:57:
fe:29:38:da:87:47:b6:10:94:9c:57:14:4b:f9:12:62:3d:ac:
3f:12:c8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:19:28 2025 by rpki-client