Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a5d5d8c9-b9c5-3cf0-9dc0-a36cbaf3422c.roa
File: a5d5d8c9-b9c5-3cf0-9dc0-a36cbaf3422c.roa (raw, json)
Hash identifier: sSTmO0JLWF8SGytvUNp2Y/8+R5HMOXNQXSJ+Rr0Jtm4=
Subject key identifier: 68:10:99:3C:03:E7:CA:65:3E:C6:02:74:15:04:12:CC:90:2B:01:1C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840A04F24E2637F1071B2286100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a5d5d8c9-b9c5-3cf0-9dc0-a36cbaf3422c.roa
Signing time: Wed 18 Jan 2023 12:00:00 +0000
ROA not before: Wed 18 Jan 2023 12:00:00 +0000
ROA not after: Thu 23 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.141.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:a0:4f:24:e2:63:7f:10:71:b2:28:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 18 12:00:00 2023 GMT
Not After : Feb 23 05:00:00 2023 GMT
Subject: CN=98c8fa34-006c-496c-b2b9-4b83330d4eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a6:3b:97:0e:fb:86:a3:88:e0:82:e9:aa:b3:
0c:0d:e0:23:68:aa:c8:a5:99:40:02:4e:58:8c:cb:
3c:a4:98:f7:dd:41:03:17:33:19:d0:52:0a:52:2f:
fb:90:69:c6:6c:cd:f4:22:ec:12:0a:30:b9:f5:ce:
4a:69:7c:0c:ef:8a:9d:f5:06:e0:07:e5:2a:b2:00:
50:81:e2:05:1c:6f:18:d9:0c:06:c7:17:b8:d9:42:
db:2f:ce:cd:cf:ea:85:94:90:96:f4:64:25:aa:60:
35:fb:0d:6a:bb:d3:2c:16:f8:84:8f:cb:b9:64:90:
7d:87:6b:c9:b6:bc:9b:bf:9f:47:af:41:f5:b2:6d:
a0:5d:7d:6d:19:18:e1:e1:f4:23:97:9d:17:17:7a:
cf:ea:89:ad:2e:9b:7e:d7:08:26:78:74:55:f0:16:
3c:e1:27:0c:fc:27:34:b1:20:26:bb:a0:08:db:ae:
35:36:bf:45:14:63:e9:ed:62:e9:fa:7a:49:e5:6c:
e6:94:28:b2:ef:37:0a:cf:12:a1:1b:20:3c:5e:21:
b6:0b:7e:5b:15:9a:07:72:51:2c:b3:c9:48:23:f1:
18:7c:07:72:4b:2e:e1:eb:10:78:f3:42:1f:ca:e6:
6d:6f:2d:da:45:a2:dd:85:c0:4a:49:df:87:a4:f1:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:10:99:3C:03:E7:CA:65:3E:C6:02:74:15:04:12:CC:90:2B:01:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a5d5d8c9-b9c5-3cf0-9dc0-a36cbaf3422c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.141.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:32:4f:1a:31:4c:ec:7c:b4:1a:1b:b1:a9:7a:03:87:cb:ba:
c9:49:2f:89:6f:c4:6a:9c:3d:b5:82:8c:28:3b:de:e7:a1:a5:
7b:e9:71:5e:01:b4:97:bd:28:48:fc:db:68:3e:03:26:5f:15:
06:36:ef:9e:03:77:33:78:da:3f:2d:f7:d2:db:d7:c4:28:5a:
91:c8:1d:a0:b5:47:1b:90:88:dd:e6:9d:cd:54:2a:32:8c:fe:
78:a1:0c:e4:5e:4a:28:b1:99:6e:fc:9f:77:5e:01:8d:f3:d4:
9f:06:51:1c:ab:c0:7d:dc:dc:b1:e4:24:9c:95:bb:87:13:56:
86:44:25:a2:74:aa:53:69:1e:7f:89:80:5b:38:ea:d3:dd:4c:
90:31:4b:82:00:70:55:fd:f5:00:cc:c1:86:57:16:1a:dd:cc:
f3:63:f0:f3:42:95:3b:3a:85:d9:a5:48:84:84:fd:70:bb:02:
5a:ec:b7:20:8b:38:bc:c9:8c:fe:23:fe:e6:ee:66:8c:29:b1:
0c:b9:0b:65:f6:ef:ca:77:93:d7:93:51:4d:cb:01:fc:b9:59:
07:21:f9:e3:c6:88:5b:89:82:40:3d:e3:08:41:c0:51:bc:50:
60:d2:72:9a:66:d9:dc:43:6b:3b:99:99:6b:42:99:0b:9c:05:
d7:b6:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:20:54 2025 by rpki-client