Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9146a55d-d5ce-36d3-bd42-cc7ea63d0df4.roa
File: 9146a55d-d5ce-36d3-bd42-cc7ea63d0df4.roa (raw, json)
Hash identifier: qk+iM01hqSp9SAexoKjGfCeygMpmLU38zNThClb3tWU=
Subject key identifier: 4B:8E:FA:EC:24:EB:59:0E:D0:88:94:A8:35:3C:FC:13:1B:C6:A6:AA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840514C0D17831F75C7F2F1F000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9146a55d-d5ce-36d3-bd42-cc7ea63d0df4.roa
Signing time: Wed 21 Dec 2022 12:00:00 +0000
ROA not before: Wed 21 Dec 2022 12:00:00 +0000
ROA not after: Thu 26 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:51:4c:0d:17:83:1f:75:c7:f2:f1:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 21 12:00:00 2022 GMT
Not After : Jan 26 05:00:00 2023 GMT
Subject: CN=87419b46-0a53-47bc-9459-1d84894ac7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:37:f9:96:66:f1:f5:fb:d2:f6:dc:a7:ef:
17:da:90:66:41:e4:1c:c7:b7:63:6d:ef:87:6b:b6:
ad:1a:37:68:98:2c:d2:cd:9a:c4:be:6a:c9:3b:0f:
d8:a0:a6:ce:62:7d:ca:60:a5:be:dc:a5:2a:3e:12:
8d:cf:47:58:e7:d1:a9:65:86:e4:ef:b9:f6:ab:e3:
66:8d:66:6e:1b:f4:fa:0c:47:b1:8d:83:59:f0:76:
f7:a9:c2:bb:9b:b3:e9:6a:d0:f3:be:b2:16:37:1f:
29:59:a7:1d:69:b2:b1:f8:7e:86:55:3a:41:97:b2:
ae:0e:3d:6c:f0:01:ae:51:89:5b:33:b0:3e:24:37:
df:ce:e8:de:bf:dd:a7:6c:ec:e3:bc:42:66:1e:a3:
27:25:b9:1a:9d:a0:0e:5e:3f:6e:75:85:c9:97:57:
61:fb:5e:ce:ad:ba:49:f1:6b:ae:25:7d:7a:94:99:
b3:d8:bd:3e:a6:cc:a3:7f:f9:63:3a:d7:96:e3:7b:
93:ca:16:ed:2f:37:d4:ad:62:5c:87:6a:c5:ce:2e:
8d:37:ea:50:38:1b:47:cc:5f:dc:f0:45:36:53:70:
ca:ab:79:17:44:4d:72:8d:fd:b1:f8:1f:91:cb:c8:
8c:cf:78:4a:3f:0a:b6:bc:33:ce:19:c4:cd:af:7f:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8E:FA:EC:24:EB:59:0E:D0:88:94:A8:35:3C:FC:13:1B:C6:A6:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9146a55d-d5ce-36d3-bd42-cc7ea63d0df4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:2f:8c:af:d0:dd:7d:d9:ff:5d:79:16:34:a9:8d:08:12:72:
b6:08:ca:20:e1:66:ef:6a:3a:22:22:3d:d3:27:6c:ca:bb:13:
a4:05:ac:03:34:9c:b9:16:0b:23:4a:06:d1:80:91:62:4a:5f:
73:64:c6:72:8b:f4:9e:58:f6:0b:3a:b3:31:b4:8e:64:81:3c:
df:c6:64:da:ee:18:21:1a:b9:2f:0e:ab:68:84:4c:f0:d0:6f:
83:86:20:d4:ef:44:80:96:57:ce:c6:24:d9:20:ed:a2:ef:29:
d4:01:bc:4b:ea:f6:35:2a:6b:90:8f:76:7a:ea:ee:04:18:7c:
64:8b:51:a4:29:09:c5:d4:16:bd:ef:38:b9:b3:4f:aa:92:14:
64:56:06:30:47:48:2c:f4:ab:6f:bb:33:b7:bc:58:d7:2b:20:
e2:48:44:2d:94:94:67:c6:c6:66:fa:3a:73:95:4f:48:44:bc:
93:f9:b0:e8:27:08:d7:2f:ac:cd:9c:d9:15:fd:c3:3e:c8:25:
64:3b:c9:fc:1b:41:0c:c4:5c:33:8e:f4:c2:47:c3:b6:f7:ce:
6c:cf:46:9e:9f:c9:06:bf:f5:55:dd:85:3b:7a:e6:4f:b5:c1:
a8:d5:34:27:64:79:30:c2:6f:05:cb:7a:7e:79:19:d8:c4:c2:
07:c8:ea:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:03:34 2025 by rpki-client