Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9950dfc0-576a-359d-949b-5f4997613707.roa
File: 9950dfc0-576a-359d-949b-5f4997613707.roa (raw, json)
Hash identifier: 9jtWqEcJZj6I/s1n1aRwV0MB/v1orf11lBWLE5wAU34=
Subject key identifier: 08:E3:9A:E6:E6:35:68:55:18:FC:CB:04:92:64:94:7D:BE:76:D0:CF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1A8415F8B43C79AF0EE60900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9950dfc0-576a-359d-949b-5f4997613707.roa
Signing time: Wed 01 Jun 2022 12:00:00 +0000
ROA not before: Wed 01 Jun 2022 12:00:00 +0000
ROA not after: Thu 07 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.222.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1a:84:15:f8:b4:3c:79:af:0e:e6:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 1 12:00:00 2022 GMT
Not After : Jul 7 04:00:00 2022 GMT
Subject: CN=8e7d5295-6693-4ec7-9eed-a30e222c61b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:de:f9:29:68:8c:e5:4d:a9:85:b0:fc:de:b1:
65:0f:da:98:2a:d8:41:84:87:72:4e:09:4f:2f:62:
d5:e3:b6:2d:64:f0:5f:62:b2:a7:35:7a:e6:3f:b0:
9c:9c:26:0d:17:ca:f6:97:0a:ae:51:52:1f:a0:ba:
95:72:7f:8f:39:06:d4:4c:be:a1:dd:6f:14:ee:9d:
0d:e5:25:fd:4e:a1:1d:ae:ab:56:77:f3:be:9a:98:
f1:2d:f9:ce:62:7e:bc:df:b6:f9:94:21:51:57:df:
54:60:84:fa:c8:b2:39:27:91:b4:28:82:3e:91:40:
2f:a1:4a:d9:42:9b:94:ac:5f:05:a5:fa:bb:fb:8a:
7e:d3:5e:2f:c7:dc:88:c9:a5:c4:76:27:b1:10:c9:
c0:64:a0:f6:50:42:8b:6f:77:9e:5b:25:f6:c7:e8:
db:4f:f9:40:43:57:3f:4a:83:ec:1a:a5:30:90:e7:
99:d8:09:17:1a:f4:f2:1c:d7:83:3d:54:23:2f:49:
9d:86:45:6e:87:d8:65:aa:42:3f:63:b3:67:09:20:
2e:20:e6:31:da:18:4f:39:80:53:d2:1f:f7:51:da:
ff:f5:ff:87:d0:35:69:ca:dd:97:13:e4:c7:e4:a7:
cc:f1:7b:dc:3d:32:36:e9:64:f1:78:e1:20:dd:1b:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E3:9A:E6:E6:35:68:55:18:FC:CB:04:92:64:94:7D:BE:76:D0:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9950dfc0-576a-359d-949b-5f4997613707.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.222.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:08:4d:1e:b5:14:f3:ac:09:e7:68:0a:11:46:0c:34:0d:81:
01:1b:08:d4:14:62:08:8a:9a:53:17:0e:47:cc:a2:89:89:24:
f5:5f:d6:ed:de:da:83:36:b7:90:7a:f2:0d:3f:b4:0a:c5:51:
30:1d:37:05:61:e5:83:60:bf:21:77:76:62:61:3e:99:f0:c8:
3b:fd:34:92:28:43:03:41:92:ba:62:22:8d:65:f2:57:57:c7:
be:3b:95:5e:40:bd:f8:26:43:e9:cd:f9:c1:fc:87:6e:ef:21:
19:db:e2:47:91:b7:21:d8:cc:28:8e:9b:1b:b9:60:63:31:5b:
56:55:1a:f7:70:f7:30:c0:27:ec:ac:b5:e5:9f:b5:09:49:10:
71:e1:4b:d4:47:29:b3:d2:2c:83:44:42:42:76:a1:da:77:a7:
a0:6b:bd:5f:11:ab:2f:0e:2d:1e:50:32:b3:43:d9:df:3f:e2:
22:35:c6:04:08:b2:a1:68:32:16:c5:4d:20:d5:4f:5d:09:22:
39:6b:a4:24:71:48:67:72:1e:ab:50:f5:2a:c7:ac:8e:d4:46:
68:3a:23:b2:09:3e:18:15:b3:3f:34:8e:33:7e:20:9c:ae:b1:
1d:75:c5:b7:e7:a9:b4:05:7d:3d:7b:11:0d:26:2d:b2:14:c6:
38:98:63:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:09:10 2025 by rpki-client