Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a8089c14-da7d-336d-bc52-fb13f4a29dca.roa
File: a8089c14-da7d-336d-bc52-fb13f4a29dca.roa (raw, json)
Hash identifier: xyIlNXq/Hbc7ZhtL/TPnKmA3/HFSo5EYX5Ed8xSz++4=
Subject key identifier: E6:C7:14:A2:E6:4B:80:F8:00:66:54:5A:05:DE:CC:51:08:17:F5:40
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F71768A9F028015BB18E07EC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a8089c14-da7d-336d-bc52-fb13f4a29dca.roa
Signing time: Sun 02 Oct 2022 12:00:00 +0000
ROA not before: Sun 02 Oct 2022 12:00:00 +0000
ROA not after: Mon 07 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.251.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:71:76:8a:9f:02:80:15:bb:18:e0:7e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 2 12:00:00 2022 GMT
Not After : Nov 7 05:00:00 2022 GMT
Subject: CN=d7b1de4a-2817-4112-b759-53dbdc93a900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:b2:25:57:9c:61:9a:ee:60:b1:a4:84:cd:
ec:80:95:db:b4:2a:bc:ac:b9:00:69:29:0c:2e:ef:
55:78:61:49:8b:d7:58:9d:d6:ea:52:28:59:56:61:
f7:bd:a4:41:28:19:9a:ec:ef:89:a0:c4:4b:46:c7:
fb:02:e6:32:13:fe:c3:0c:67:d2:09:ee:f3:9c:cd:
1c:d2:fc:74:2d:40:52:92:12:74:0f:47:40:cc:3d:
ee:e3:37:09:e9:51:5d:e0:83:b3:17:3f:d7:cf:4d:
9b:9d:b8:da:fd:55:ff:26:3f:6c:95:a0:09:94:c1:
5d:98:2c:0b:7d:c8:c7:21:a5:b5:d9:51:4a:53:ad:
9f:e1:73:48:e8:67:69:8f:b3:ae:7b:93:1f:29:96:
e4:d5:c5:bd:38:e3:01:9a:da:9e:62:7f:da:3c:d9:
ca:f4:a1:8b:d0:67:e2:6a:43:25:38:49:57:ee:3f:
a7:3d:d5:f2:2c:93:19:fd:7f:eb:47:95:c9:12:1b:
a5:66:3f:8e:4e:cb:1f:e7:fb:10:94:42:f4:f5:da:
02:cf:fc:9c:3c:64:9c:bd:2f:d3:00:a8:8b:d6:fe:
8a:0d:eb:c7:bc:45:0f:72:c2:f4:e7:70:e8:f5:29:
45:6c:79:c6:73:f9:51:83:7e:d3:5d:b8:9d:82:d9:
e1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C7:14:A2:E6:4B:80:F8:00:66:54:5A:05:DE:CC:51:08:17:F5:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a8089c14-da7d-336d-bc52-fb13f4a29dca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.251.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:01:f6:ea:92:87:31:0e:50:5c:d5:a3:12:e9:38:02:9f:7c:
b2:a9:4a:ed:53:23:16:b5:29:f5:96:37:4d:9c:30:94:ae:a9:
22:47:c7:45:3e:01:c4:c2:06:5c:c0:15:be:b4:e7:93:1b:a4:
85:31:45:86:51:26:dd:07:d8:86:ea:62:f8:89:5a:9f:97:5b:
39:c0:ab:d1:c8:2b:3b:92:72:2d:f2:29:d3:4f:31:8e:19:fc:
8c:e5:01:96:c7:67:f7:63:00:7e:51:0d:fc:ac:22:06:22:8a:
b3:31:e3:66:63:57:90:01:90:c7:1d:8d:29:05:81:34:1f:ef:
d2:8d:b1:b5:ab:b4:03:62:09:64:0c:e2:2a:18:98:0f:74:da:
37:1f:a8:6e:a3:5d:5c:dc:71:d0:aa:87:00:c6:70:49:ad:b7:
ce:0a:35:2c:05:07:d7:9a:7f:f2:02:ec:43:ef:79:b7:c3:2a:
ae:a2:4e:d9:2b:91:6b:b9:8d:60:27:01:58:ea:27:5b:dc:28:
4d:d9:02:2f:40:7b:06:4d:9b:ab:11:25:bd:5d:a6:4a:d8:0e:
88:e1:a1:fb:a5:69:bb:c2:19:04:3b:6f:75:d1:bc:32:32:68:
99:76:e6:a8:20:dd:cb:83:3f:72:42:76:4d:93:87:4e:9d:db:
9c:aa:37:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:20:07 2025 by rpki-client