Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/acedfdf9-378a-32a5-b48a-24a29fd96054.roa
File: acedfdf9-378a-32a5-b48a-24a29fd96054.roa (raw, json)
Hash identifier: u31oGpVxMtjZb47DLlIDZfYxllqbp4BEQjgQcidxPik=
Subject key identifier: 52:40:99:02:87:FE:8D:6C:8E:3C:8F:25:32:40:57:B8:96:2B:FB:9B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1A66836A57EE966EECD55240
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/acedfdf9-378a-32a5-b48a-24a29fd96054.roa
Signing time: Wed 01 Jun 2022 12:00:00 +0000
ROA not before: Wed 01 Jun 2022 12:00:00 +0000
ROA not after: Thu 07 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.239.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1a:66:83:6a:57:ee:96:6e:ec:d5:52:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 1 12:00:00 2022 GMT
Not After : Jul 7 04:00:00 2022 GMT
Subject: CN=81339a8e-fbb0-4cc4-bb35-b1c682739e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:bc:de:d5:fa:d5:9e:f1:92:b8:62:2f:61:
89:c5:bd:cf:88:7a:e6:4b:1e:8b:17:1a:f2:0f:0a:
f0:48:ae:1a:eb:ff:e3:67:2d:3d:6b:97:a3:75:08:
ae:71:c5:24:37:45:85:ce:98:3b:65:6a:7b:17:df:
54:66:71:89:a5:0f:d6:f4:92:b9:71:41:90:f6:05:
1b:f3:0e:e0:62:b6:14:f3:ea:a0:e3:25:e2:73:ed:
36:c1:9b:a4:99:53:45:ed:7d:8f:f6:74:58:09:75:
6a:71:1f:86:ab:36:21:8c:6d:98:ff:6b:ea:33:2e:
2c:f8:ed:52:4c:be:21:1d:b5:06:dd:0b:94:66:45:
69:59:20:e2:7b:60:f7:3b:95:52:9e:f9:00:95:90:
a7:6a:bf:1b:60:ae:51:62:44:c0:fc:67:a0:ea:80:
74:41:28:5f:c5:0f:de:8c:c9:cf:d6:05:dd:0c:f6:
ac:7a:44:4e:58:41:82:1e:3e:28:b4:0e:1c:f8:fa:
ce:9d:f3:31:d9:cc:1f:11:90:11:53:04:27:bf:dc:
1f:a3:61:f3:9f:f0:33:2a:02:04:eb:b7:53:cf:5f:
36:67:1d:5b:9e:2c:c8:e1:96:4c:3a:9f:39:de:23:
6f:57:10:40:40:87:af:fa:aa:94:82:6c:f3:c3:ec:
4e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:40:99:02:87:FE:8D:6C:8E:3C:8F:25:32:40:57:B8:96:2B:FB:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/acedfdf9-378a-32a5-b48a-24a29fd96054.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.239.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:bd:d8:e8:4a:eb:e6:81:83:88:15:e0:57:e8:21:d2:d1:9d:
d5:a0:91:96:00:60:dd:99:b1:4a:f5:bb:a2:0c:0f:d5:67:ef:
bd:bd:60:66:66:97:4f:12:59:75:9f:43:80:a2:7b:48:17:36:
9f:e5:c4:80:0c:54:c7:f4:ca:e0:f3:3c:74:53:22:2c:ae:d0:
f1:e9:02:48:e1:fc:43:3f:d1:5b:fe:d4:cc:f4:93:91:97:08:
20:27:de:0c:06:2d:39:d7:03:ca:c9:4f:75:b0:32:b0:e5:02:
c5:58:b6:4e:97:8e:98:69:a9:92:a0:0b:ac:49:2c:3d:52:ea:
a6:e3:d6:84:2d:1c:29:be:22:f5:9e:0c:2d:df:5c:0c:1d:df:
f4:12:34:75:53:0d:58:4a:9c:51:9d:1a:15:90:58:89:92:ff:
9c:70:a2:19:93:e5:35:5c:8d:4e:32:1e:e7:4c:5a:42:1f:39:
e7:a9:f2:5d:e9:ea:0e:36:ee:32:bc:84:5e:ef:d3:64:4b:fb:
c6:7d:b6:ee:21:77:02:50:e5:34:1c:5c:1e:00:36:f8:03:d9:
e5:54:a8:71:03:3b:42:74:bc:ae:8f:d5:ed:1e:c7:63:34:a0:
4e:d9:2a:a5:18:55:e3:b1:9e:33:04:e6:4f:dc:95:bb:c3:e3:
8b:98:c3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:04:48 2025 by rpki-client