Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/998ed13d-0c02-317d-872f-4b882b5df4fa.roa
File: 998ed13d-0c02-317d-872f-4b882b5df4fa.roa (raw, json)
Hash identifier: tYiWoNAz/l5lPtrpCVl8plg80A7sK+EiNJb2ezVv4ls=
Subject key identifier: 27:CA:AA:C5:23:4E:43:26:50:94:D3:BF:73:88:F3:B3:0B:05:B8:B6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D2F3AA6A72119A978F3B46000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/998ed13d-0c02-317d-872f-4b882b5df4fa.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.164.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:3a:a6:a7:21:19:a9:78:f3:b4:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=a2c5a0d0-5c93-4900-a87f-2e824ff75ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:c2:c2:ae:4c:3c:29:52:c1:16:b3:16:36:
73:79:13:ba:03:ce:92:b3:b9:fe:79:c6:bf:6a:da:
ac:11:eb:d0:59:fe:e2:75:06:c1:0c:cc:2a:1d:fd:
06:49:32:d3:5c:99:dc:2a:0a:dd:87:f5:71:7a:3e:
fc:b5:ba:31:e4:da:18:bd:bb:07:24:66:eb:cf:fe:
97:00:a0:69:3a:81:5e:06:8e:07:83:4d:19:18:05:
46:25:1d:34:f4:57:38:9f:73:2a:8d:fb:fa:8f:76:
6a:4f:b0:38:ad:a1:cf:6b:c5:bf:1a:35:1e:d5:fc:
4a:f5:24:91:d3:9c:06:d5:b1:0f:2d:c8:d4:59:6f:
84:f0:d0:2f:54:a6:37:91:a0:79:a7:fe:d4:dc:fe:
b2:30:b9:eb:8e:8a:c8:1c:61:1f:bb:ad:6d:e6:cd:
80:91:03:08:cd:e3:1f:69:33:c4:10:4f:3d:22:f2:
a7:98:1a:94:ac:fd:40:7b:58:f0:c6:42:26:73:4b:
2b:2a:82:17:5b:ba:e1:e8:c1:ea:45:7a:02:51:06:
d1:8f:d9:18:89:a3:4c:26:93:65:4d:af:0c:e6:4d:
e1:93:97:b1:67:48:c3:9a:a9:bb:55:d8:23:7a:5f:
9d:ca:26:a6:cd:8d:9c:0a:5d:65:2b:7b:99:8f:be:
83:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CA:AA:C5:23:4E:43:26:50:94:D3:BF:73:88:F3:B3:0B:05:B8:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/998ed13d-0c02-317d-872f-4b882b5df4fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.164.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:cf:92:85:b3:93:dc:4c:36:98:6e:84:9e:46:cd:ba:5f:2e:
33:89:32:c3:32:75:a7:1e:3c:89:99:f6:93:0c:15:ce:86:3b:
a4:f2:e7:5e:fc:19:02:30:d1:d9:c9:a9:ad:e8:d3:87:07:e5:
e3:9b:90:96:67:0c:97:12:96:36:16:28:d5:ef:b2:71:bb:57:
a1:fe:85:5d:41:32:95:b5:bf:bd:a9:0d:16:92:cc:d2:91:77:
f7:ca:7a:b5:57:bc:cc:26:36:03:a8:75:4b:01:64:ec:7b:9f:
7a:31:48:a8:f3:a5:ab:d8:00:ae:94:6f:af:b1:d8:ef:7b:fb:
b1:a7:8f:9f:9e:7b:b6:6d:de:d1:59:3c:08:00:d1:f3:ca:c5:
ef:ad:53:5e:1c:75:10:f4:f9:cc:ea:39:5b:02:c8:b8:01:8a:
10:5c:af:a4:d6:8d:9a:d1:8e:e2:38:49:a6:b5:fa:ad:72:b4:
57:77:3d:ac:09:9e:ca:d4:d5:7b:50:32:cd:39:00:7c:2b:56:
64:19:06:a4:c5:9a:10:8a:10:e4:9c:49:4c:a1:00:d5:90:2f:
98:31:fd:49:59:6c:69:7e:3b:47:08:22:e6:22:80:25:51:91:
01:36:23:44:a1:2c:61:9d:08:0f:3d:5f:27:b9:37:e6:75:57:
57:57:61:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:19:23 2025 by rpki-client