Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b074ea1-9fac-378f-9b2e-3d5ab4f9ec65.roa
File: 8b074ea1-9fac-378f-9b2e-3d5ab4f9ec65.roa (raw, json)
Hash identifier: 7Y5h44JKUOsXY9pMGAcxBH9vmdFiuj0k5OpzUDFmPQk=
Subject key identifier: 65:0D:A1:09:76:F0:92:AD:22:1E:5C:44:8F:9F:1B:1F:F0:89:36:AC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F54266063EDB6069577C29800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b074ea1-9fac-378f-9b2e-3d5ab4f9ec65.roa
Signing time: Wed 21 Sep 2022 12:00:00 +0000
ROA not before: Wed 21 Sep 2022 12:00:00 +0000
ROA not after: Thu 27 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.221.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:54:26:60:63:ed:b6:06:95:77:c2:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 21 12:00:00 2022 GMT
Not After : Oct 27 04:00:00 2022 GMT
Subject: CN=2a012921-17a0-4c93-96eb-fca5470d1f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:26:d5:ef:b5:dd:95:01:0a:cc:7e:0e:8b:1b:
08:ba:97:21:37:a3:b4:41:7f:2b:38:fa:a2:0d:0c:
b2:40:c5:28:f3:72:56:c3:13:30:0d:a5:d4:a5:24:
95:5f:f9:8d:95:4a:e6:00:22:32:87:a8:8c:b6:ed:
76:27:2b:06:89:b8:5d:44:0b:36:ee:a0:db:a3:12:
4d:13:90:9f:5d:ea:c0:77:2e:7d:e2:98:09:e9:bd:
23:aa:30:72:09:1d:d7:41:c2:60:32:2b:f7:f9:34:
74:97:66:4f:fc:45:ae:62:ea:32:00:47:1d:5e:fd:
34:79:d8:a5:ee:22:22:c4:4e:d5:63:ce:b2:7b:ba:
6b:87:10:64:0b:ad:04:a1:c0:a1:21:8b:b8:0d:21:
02:9c:67:ed:8a:b5:0c:44:99:e6:70:8d:e1:95:df:
54:14:76:55:de:89:03:c5:42:b4:7d:36:fa:23:18:
8d:b5:71:f0:54:fc:32:e2:c4:9b:6f:18:2c:5a:67:
da:4e:bd:5c:9f:77:c5:7a:b4:ba:c8:2c:fa:8c:59:
06:bf:46:3e:f3:31:3e:5b:62:5c:7a:69:bd:3f:c5:
d9:04:70:be:f6:20:55:81:de:ea:67:47:30:e6:31:
6c:6b:42:b6:eb:86:7a:f9:42:ce:69:8f:06:36:b8:
a5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0D:A1:09:76:F0:92:AD:22:1E:5C:44:8F:9F:1B:1F:F0:89:36:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b074ea1-9fac-378f-9b2e-3d5ab4f9ec65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.221.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:e9:1e:18:54:09:76:18:57:69:af:6d:ec:be:2d:2f:fc:e4:
84:33:43:db:96:d1:84:30:70:d4:cc:a2:d9:ad:ad:69:36:c9:
f4:da:3c:84:ab:f9:91:24:97:aa:a4:9a:5c:36:bc:74:d1:38:
4b:8f:71:0b:b2:b5:57:ab:ac:56:5d:db:80:95:15:1e:d8:e4:
80:0f:58:3c:ad:c6:c2:48:fb:c2:01:7d:52:6e:b0:1c:6b:2f:
b2:b8:ad:d4:06:95:60:80:fd:42:a7:ec:83:c4:b6:c3:cb:93:
94:61:53:cf:56:d6:4e:60:eb:c1:f2:c1:64:a7:47:3e:72:b5:
fa:14:34:90:5c:c1:d8:0d:9c:6b:9b:63:f8:55:c9:c1:58:0e:
aa:2f:1c:46:45:a5:7c:26:1d:3f:b4:c0:0f:60:94:0c:60:56:
bc:58:c1:f8:6d:91:06:31:2c:e2:0e:b1:48:c2:ed:84:5e:4a:
a7:fd:94:58:0a:de:2d:e3:2e:bb:51:5a:8c:37:c0:d9:82:e7:
7f:3e:07:01:34:4d:4f:8f:4b:75:8d:60:5f:e1:d9:86:f9:ef:
f8:c2:9a:79:2b:df:06:21:af:da:b6:af:89:bd:64:57:b7:cd:
aa:44:df:aa:51:6e:73:76:a7:a6:aa:63:fc:d1:11:52:14:28:
6c:a0:00:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:16 2025 by rpki-client