Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8cdb4a93-7c6a-36a6-a6e5-8f7be149250a.roa
File: 8cdb4a93-7c6a-36a6-a6e5-8f7be149250a.roa (raw, json)
Hash identifier: 1fDdfFnufbVOcsMFx8sDDa/ZEqEhycqOEKClP9Hezvg=
Subject key identifier: AB:1B:B8:E6:75:59:6A:C1:C5:F0:BE:EC:31:91:D5:6A:EB:9F:72:9A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA18FF1EFC022C485699FB2C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8cdb4a93-7c6a-36a6-a6e5-8f7be149250a.roa
Signing time: Wed 19 Oct 2022 12:00:00 +0000
ROA not before: Wed 19 Oct 2022 12:00:00 +0000
ROA not after: Thu 24 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.164.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a1:8f:f1:ef:c0:22:c4:85:69:9f:b2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 19 12:00:00 2022 GMT
Not After : Nov 24 05:00:00 2022 GMT
Subject: CN=142c493f-33f4-4e2d-87b9-327d80395bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:f8:3e:ce:5b:6f:6b:6c:6d:41:65:65:d6:
a6:a4:03:c0:a0:ca:e1:3e:21:0c:99:22:a9:c6:d4:
72:59:40:4e:24:8e:a9:a2:94:09:37:19:da:de:14:
05:7f:45:95:94:7d:05:55:db:eb:aa:33:4d:a4:7d:
ec:3a:dc:89:aa:2b:8b:fc:de:d3:b6:04:f8:0f:8b:
d8:32:34:8c:df:47:c1:87:2b:48:22:48:6c:85:27:
28:75:e4:b5:c3:36:c5:68:d8:23:b4:09:db:8b:ac:
82:80:eb:da:2a:0b:c6:c6:14:25:34:ce:88:4f:93:
19:97:75:78:d2:cb:0e:44:53:91:13:25:f7:88:cb:
c7:26:ba:31:07:f5:60:c9:f0:52:bd:82:93:a2:db:
ef:bd:3b:b2:c4:72:7c:60:a7:af:f1:63:fa:f4:4d:
28:c7:27:86:15:fc:49:06:a8:03:fc:46:17:be:44:
8d:e9:6a:fc:31:b2:89:f5:15:ff:86:75:c8:65:68:
d6:e5:5b:ed:1a:ee:b3:30:46:d8:b5:33:d0:16:b2:
05:fe:23:f7:1a:65:48:84:8b:f1:de:6a:f0:1c:58:
9d:40:1c:3d:d4:b3:44:d2:ae:fc:f1:1e:06:35:44:
7f:9a:b4:e6:6d:48:af:76:5b:85:c0:74:50:53:62:
52:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1B:B8:E6:75:59:6A:C1:C5:F0:BE:EC:31:91:D5:6A:EB:9F:72:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8cdb4a93-7c6a-36a6-a6e5-8f7be149250a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.164.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:5a:ed:fc:29:9d:ec:bf:ca:d5:2c:0d:c8:14:77:af:4a:6c:
d4:aa:14:99:b1:e3:fb:f1:81:9a:0d:be:b1:65:72:37:72:7c:
23:de:68:05:dc:e6:b3:23:6e:57:45:43:04:f1:2f:33:39:d1:
ca:67:89:e7:87:7e:ba:dc:d8:d0:31:e9:e3:20:8f:11:f0:c0:
72:ff:7e:b7:2e:80:e1:1e:95:2e:2a:e2:08:de:67:47:de:ac:
b8:49:86:30:9d:9c:26:5b:5b:13:1a:17:a2:fc:fe:92:e1:4d:
51:6e:8e:9d:4b:c8:1e:09:72:40:bf:b2:52:08:de:a8:d1:81:
3f:88:c0:ae:2a:ab:26:02:ef:18:5f:8e:27:76:49:91:74:5c:
23:58:4c:f3:24:37:8c:2a:46:54:24:42:f5:e9:5d:3b:31:55:
bd:a1:5c:90:96:83:35:90:ae:70:24:9b:79:d8:4b:59:84:12:
9d:33:c0:bd:db:e8:9d:83:77:b4:20:d0:d0:95:f2:06:1b:ba:
02:af:29:56:e9:50:69:67:99:95:e7:47:50:2c:2d:03:58:5b:
50:a8:b6:f3:2b:68:4d:c4:f4:b8:bf:bd:e0:8f:34:d3:32:f3:
af:b4:db:43:a1:27:b1:db:25:5f:9c:61:ab:15:f1:76:73:ef:
85:39:65:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:51:09 2025 by rpki-client