Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9ed68396-8ddf-3e53-b84c-b3b4ad22f0cc.roa
File: 9ed68396-8ddf-3e53-b84c-b3b4ad22f0cc.roa (raw, json)
Hash identifier: 5ISwX3Hl0SYV1bZZi8Y+Ycd4ENMjjAW32CZ0extnUxE=
Subject key identifier: C5:64:3C:9F:07:14:6E:50:7F:0E:54:38:EF:73:F8:82:E8:53:56:FE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584016BA689BFF9E393334AA5100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9ed68396-8ddf-3e53-b84c-b3b4ad22f0cc.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.158.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:ba:68:9b:ff:9e:39:33:34:aa:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=f5dbff0f-595c-4b87-873c-13bd6c2dc986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ca:3b:c5:55:01:b6:28:c5:61:cd:59:57:ff:
66:b8:2f:a1:e5:79:81:83:4e:c2:c5:0b:91:f6:fc:
58:44:c1:fc:1b:c2:e3:b2:36:12:ed:d6:3a:1e:26:
5b:c1:2c:17:1a:32:e9:d8:8a:d5:0d:51:ab:11:76:
9c:fb:b8:3b:fe:01:d9:f8:bd:87:e1:b2:66:88:bf:
89:32:a5:bb:ca:96:19:78:cb:0e:be:21:ad:f1:73:
4b:e8:79:0f:ea:48:52:71:e6:09:fa:45:c3:ff:ab:
8a:17:51:e1:92:0f:2a:0b:9e:b5:71:06:eb:6f:55:
f9:29:ed:10:8e:18:cc:4f:5f:2e:20:ff:3f:d7:b3:
2a:ac:54:66:bb:67:c2:2d:dd:ce:4b:05:ab:12:a1:
d9:57:51:9a:31:b1:06:c1:3b:4e:ac:1f:67:0e:5b:
3c:0c:23:89:1a:4d:8c:67:f7:ad:9a:83:cc:6e:4a:
44:fc:39:b1:3c:6e:14:5f:e2:47:ba:18:81:21:74:
0d:e2:8b:85:1b:71:d7:90:f6:a6:f2:76:40:31:d4:
77:9e:fe:c2:ee:f1:3d:a6:c5:3a:50:ff:8f:0b:a5:
29:d2:64:de:d0:06:dd:34:88:c4:59:c8:14:63:38:
32:df:7f:8a:56:aa:f1:32:1f:90:6a:4a:6f:5f:49:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:64:3C:9F:07:14:6E:50:7F:0E:54:38:EF:73:F8:82:E8:53:56:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9ed68396-8ddf-3e53-b84c-b3b4ad22f0cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.158.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:4a:e0:ad:63:43:30:e7:70:fe:49:51:9b:3e:4d:cf:7e:f1:
61:80:01:a1:c5:ab:d4:a2:49:4a:62:50:05:17:76:35:e7:de:
21:60:91:7f:4a:b5:75:e8:b0:d8:8f:b3:20:11:b6:0d:7d:70:
07:2b:5e:81:1b:9a:5c:21:6a:e2:64:b7:70:8e:79:c3:f1:49:
c0:19:38:e2:21:e9:b7:8f:0c:38:8c:34:fa:06:e5:25:6c:cf:
b5:fa:80:76:d6:58:1d:86:8e:43:0e:99:14:15:08:0c:3d:f2:
4d:ff:ca:d8:c3:fc:ba:75:8a:07:72:38:8b:56:43:e2:65:2e:
71:6d:ea:37:cf:3e:c7:3e:05:9c:f4:4f:11:ec:17:57:7f:ef:
64:01:d1:c3:3d:d7:df:1c:7b:43:f0:12:c4:01:23:60:bb:06:
70:fe:64:3b:e8:d9:cc:44:22:da:10:9c:23:c8:7b:97:6c:73:
50:d7:40:fe:24:3a:98:ba:92:45:39:7e:fc:16:9e:2b:d9:98:
9e:39:86:06:51:91:b4:03:b3:39:b8:9f:5b:74:3e:8d:f3:76:
40:c1:a6:a5:bd:ee:45:19:5d:6a:f0:f1:6d:df:32:44:b6:2f:
f0:97:15:a7:9d:9d:05:81:75:5c:d1:4e:2e:75:fc:d3:6e:8a:
90:ae:13:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:00:14 2025 by rpki-client