Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/912abacc-63bc-395e-96bb-85770ba14513.roa
File: 912abacc-63bc-395e-96bb-85770ba14513.roa (raw, json)
Hash identifier: 0gnMXptRIiJnwACFgJnhfQy8nPCSqEjCYoxVB1cbl3Y=
Subject key identifier: 9B:C4:22:2F:C0:BB:12:63:50:2A:17:6E:1D:43:03:29:E9:95:97:96
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EB6D338B425D283B1274B9500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/912abacc-63bc-395e-96bb-85770ba14513.roa
Signing time: Wed 27 Jul 2022 12:00:00 +0000
ROA not before: Wed 27 Jul 2022 12:00:00 +0000
ROA not after: Thu 01 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.238.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b6:d3:38:b4:25:d2:83:b1:27:4b:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 27 12:00:00 2022 GMT
Not After : Sep 1 04:00:00 2022 GMT
Subject: CN=4ef09420-453c-4196-8de7-1351427f5028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a6:6c:db:01:45:91:4e:4c:c8:ef:2f:79:78:
b7:cf:54:3d:aa:47:98:62:10:1a:c4:ef:01:af:1c:
b6:90:95:ad:9c:f8:a7:91:b4:ab:04:b1:6f:1c:f5:
33:2d:71:4e:6f:8f:d1:bd:74:49:eb:df:5d:73:c4:
f9:87:0e:d9:04:93:09:b6:9d:c8:87:cf:db:63:f8:
0b:3d:a7:ca:72:75:5c:9a:18:df:72:5e:4f:ee:cd:
29:23:01:07:0b:27:dc:22:f7:5f:43:c8:5b:cf:5c:
57:a3:45:2f:21:3a:57:c6:72:f5:64:dd:fa:97:ad:
0b:82:0f:fa:7a:b4:f6:c1:77:06:85:3e:f6:04:75:
9c:90:5b:74:a1:ef:d1:c0:fd:22:6b:97:e8:00:e7:
c7:ce:fa:9f:b5:23:a6:e6:01:44:4b:52:11:f2:32:
32:d1:1a:75:d7:66:64:74:f6:94:11:f8:55:87:70:
b5:86:df:f2:fe:8b:43:c8:0e:69:fc:90:0d:8a:b9:
2d:05:ae:e0:3b:15:c4:99:f4:1b:91:90:ea:7a:82:
cc:f7:e6:0a:23:bf:b6:f2:f6:5f:b1:0b:f7:b3:b6:
22:fe:5c:d8:ee:77:f0:4a:22:43:d8:b6:99:f1:a6:
0f:97:e4:d4:5c:89:60:e2:eb:74:c1:7c:ce:05:01:
d4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C4:22:2F:C0:BB:12:63:50:2A:17:6E:1D:43:03:29:E9:95:97:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/912abacc-63bc-395e-96bb-85770ba14513.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.238.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:22:65:f6:b3:58:4f:4a:9e:97:7a:0c:cd:ac:77:bb:0e:35:
21:24:d6:7f:b4:be:88:db:e0:e9:7b:52:be:da:36:2e:5b:61:
fb:a7:b3:d3:08:ff:18:7e:5e:a3:cc:65:94:b6:e5:ec:77:cd:
ca:dc:85:b8:b5:0c:6a:17:30:06:c7:4b:10:8b:3d:c2:39:8f:
48:bf:68:d3:8e:13:f8:a9:a6:f2:87:77:bb:7b:7f:8a:d3:0d:
65:8c:64:c7:44:72:d7:61:f8:72:2c:54:94:63:3d:80:d0:72:
6d:89:81:db:a7:14:06:a5:aa:07:2a:74:9a:87:09:43:3b:0b:
fa:10:fc:cc:c2:19:1b:1e:15:c9:c0:9b:f7:46:85:47:32:b0:
29:ad:cd:cf:78:06:67:46:fa:9c:35:36:2c:7e:67:57:0a:9b:
e5:d7:d5:a7:82:cc:98:3c:f0:fa:70:23:43:d5:56:9d:bd:c9:
82:be:eb:e3:79:5a:73:d2:46:e9:1b:05:ba:bd:54:36:14:f2:
99:bf:6c:9f:41:91:21:d4:a5:29:a8:d6:f1:5e:8f:86:0a:75:
f4:f6:25:52:4f:b6:c3:a8:d4:75:43:f5:4e:df:3e:a8:30:3b:
ff:b0:62:0f:f0:7f:d6:ea:e6:eb:7d:a9:db:e0:97:73:0f:35:
86:26:5d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:57:45 2025 by rpki-client