Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b65a85a-1371-39d3-9b50-d0199a12f628.roa
File: 9b65a85a-1371-39d3-9b50-d0199a12f628.roa (raw, json)
Hash identifier: ry4iRtHw1N6JLzWKyIGK3GA1Ol6Afa6TitVc4qcqrcg=
Subject key identifier: 5E:AB:85:6C:A7:89:C4:43:1D:0B:DE:E3:DC:5C:F7:DF:72:DD:6D:DC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EF058A89D65373ABF1B769B60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b65a85a-1371-39d3-9b50-d0199a12f628.roa
Signing time: Tue 16 Aug 2022 12:00:00 +0000
ROA not before: Tue 16 Aug 2022 12:00:00 +0000
ROA not after: Wed 21 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.250.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:f0:58:a8:9d:65:37:3a:bf:1b:76:9b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 16 12:00:00 2022 GMT
Not After : Sep 21 04:00:00 2022 GMT
Subject: CN=db1b2f27-fd85-4183-bf4c-ecf6ee5b32ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c0:ab:a6:2e:03:a8:94:81:ad:f3:eb:ab:1b:
70:e5:f1:15:28:e3:de:53:b5:c2:9b:f8:a6:02:97:
27:a0:3b:86:00:60:80:73:6e:4f:06:6b:10:b8:a2:
8b:2f:a3:98:05:da:0b:ad:af:50:bc:18:32:91:e0:
3b:dc:1f:e1:7e:97:cb:6c:ed:40:b7:b9:f5:11:76:
f8:6c:07:99:f3:8c:0f:93:68:27:30:5f:32:c2:51:
00:2b:95:db:e1:63:de:90:45:23:34:af:cf:3d:8f:
a4:7c:7a:7e:69:02:84:25:f6:df:a2:01:38:a3:f1:
a6:04:cd:56:97:6b:3e:de:e0:33:c7:1f:b1:cf:cb:
e5:8a:3c:13:19:0a:7d:da:c5:6e:68:be:f5:03:8e:
fa:0a:d6:02:b9:00:e6:d3:4d:bb:a0:97:1a:c1:4e:
e7:ca:5e:87:32:3d:99:49:22:f3:da:46:af:32:9a:
bd:8d:d5:a7:5f:39:fc:32:84:70:9b:f9:9b:75:31:
2c:8c:ab:e4:bf:e4:19:32:22:1b:f4:eb:e5:1a:55:
6e:22:fa:a1:0e:60:d6:47:7d:9d:e6:b4:c2:3a:51:
59:3b:52:30:66:6a:e0:c5:12:ac:62:dc:be:a6:f7:
69:73:a4:a9:f5:aa:56:65:46:78:56:8c:d3:b8:8d:
f9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AB:85:6C:A7:89:C4:43:1D:0B:DE:E3:DC:5C:F7:DF:72:DD:6D:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b65a85a-1371-39d3-9b50-d0199a12f628.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.250.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:c9:6d:a3:eb:69:0b:db:7c:30:48:46:b8:38:d8:b9:c0:ff:
31:48:f2:cf:3d:2b:28:94:75:ae:d2:19:6d:df:7a:12:1b:12:
c5:ff:9f:01:cd:f3:ed:d3:1c:aa:33:60:bc:cc:6d:5b:e2:68:
46:b0:4f:a5:35:6d:a3:c6:a7:6d:5b:bb:c6:a2:5d:ec:16:73:
5e:3f:48:93:3e:4e:e5:fe:c8:9e:fc:fd:6c:3f:26:f0:b7:7c:
12:7b:ce:6c:ef:e1:ef:fd:52:ce:a3:6a:ba:d4:9d:25:97:ca:
7d:d6:67:0a:97:7a:61:a2:dd:5f:32:54:79:2c:b2:f4:9d:3c:
14:8e:4c:59:0a:f0:2e:66:5b:0d:10:f7:5f:fb:70:7b:d5:c6:
56:0d:35:7e:db:27:db:61:24:fe:08:31:bb:a8:31:91:d8:e7:
56:e7:9b:fe:e5:18:f7:be:70:57:58:25:ae:fb:56:45:0f:bd:
53:98:9b:cf:c1:d7:c3:b9:5d:37:58:36:04:f9:86:a7:b5:8a:
ef:f0:f7:0b:40:57:fb:f8:39:74:11:ac:49:94:96:6b:f3:30:
90:1c:8c:53:4c:94:9d:31:63:da:07:64:9a:6c:c1:6a:7c:af:
5d:b9:39:6f:7b:cc:44:d8:c5:c4:64:70:87:c3:06:b1:40:a9:
82:6b:27:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:42:44 2025 by rpki-client