Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae6a6808-bee6-3ec7-9477-9bd59fc93da8.roa
File: ae6a6808-bee6-3ec7-9477-9bd59fc93da8.roa (raw, json)
Hash identifier: 3lgTfMXa8vTsSkXwIWpvYDIEUMId6SLO4IjUrPsl7HE=
Subject key identifier: 97:40:1D:D6:08:80:7B:EE:DC:F1:30:8F:EB:4D:F8:82:19:ED:0A:97
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F53A80371AC3F5131EF88EB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae6a6808-bee6-3ec7-9477-9bd59fc93da8.roa
Signing time: Wed 21 Sep 2022 12:00:00 +0000
ROA not before: Wed 21 Sep 2022 12:00:00 +0000
ROA not after: Thu 27 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.206.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:53:a8:03:71:ac:3f:51:31:ef:88:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 21 12:00:00 2022 GMT
Not After : Oct 27 04:00:00 2022 GMT
Subject: CN=2b12c16a-662f-4aab-9c40-11c96fb27174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1c:8c:81:f9:09:aa:6b:72:0c:3b:4f:41:40:
f8:87:8b:cd:fd:2b:c0:ea:23:01:c8:af:e1:c1:32:
33:e2:64:ac:98:5b:b1:e9:22:a6:50:3c:78:3f:13:
8e:8f:ec:e1:d2:cf:65:23:00:52:ec:8a:42:b1:73:
e5:a8:bb:43:de:67:ce:b8:9f:54:7b:e1:fb:b0:fe:
2d:2c:ad:51:3f:30:12:97:f6:5e:8d:a3:c0:8f:f8:
4e:a7:b3:d1:c9:ab:1f:52:c2:91:74:b0:d3:f3:f6:
58:2d:2f:27:11:cb:7f:c0:7a:5e:a7:4a:c0:b6:99:
49:20:b7:6a:d1:5a:ec:2e:36:60:c0:f8:11:af:08:
ee:d9:21:1e:0c:4c:a1:25:27:66:11:a1:a0:7d:c0:
fc:77:cb:ec:26:0e:45:49:7e:fc:20:f9:e9:07:ad:
5b:b0:18:86:c9:85:46:46:0e:3b:54:56:9e:8b:a6:
94:c3:55:8d:1f:3c:9d:5c:d0:cf:db:c5:f4:d9:fc:
a4:74:75:0c:93:ef:81:e3:19:b1:5b:e3:d3:dc:8d:
78:4d:5a:00:20:0d:64:85:58:23:47:b5:8a:f8:b5:
b8:76:97:fa:09:9c:59:2d:e1:4e:ad:cc:00:51:ab:
e7:2e:22:75:f6:d3:bf:df:fb:26:4e:ac:a7:32:fd:
81:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:40:1D:D6:08:80:7B:EE:DC:F1:30:8F:EB:4D:F8:82:19:ED:0A:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae6a6808-bee6-3ec7-9477-9bd59fc93da8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.206.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:45:ea:3a:b5:7c:24:74:1c:01:6f:2b:3c:dc:d2:20:20:42:
9c:00:f5:d0:8c:b6:34:e2:6b:2e:bd:5d:89:fe:c9:87:9b:58:
36:b0:c2:32:b5:9b:c7:bf:d0:26:da:6c:39:75:84:cb:a9:df:
27:e0:96:9e:0c:32:17:72:3a:b8:b7:69:37:20:82:0d:68:75:
e1:d4:b3:72:2d:3e:25:08:15:a4:30:6f:7f:c7:ef:d7:de:d2:
71:fd:6a:4c:27:1c:ff:a0:86:bd:85:ae:5d:0e:e2:22:51:c9:
c9:1c:8c:da:d3:52:9e:7d:a0:c6:06:d8:a4:f0:cd:0c:b5:68:
17:4a:11:1a:b0:78:39:7d:55:05:cd:8a:c5:8c:13:f9:ca:a1:
c3:eb:e6:35:68:36:5a:42:30:ee:3f:63:33:f4:de:5e:88:59:
1b:3b:3f:68:1b:be:f3:09:6e:45:6d:6d:e3:bf:d2:12:59:d8:
17:c0:09:7c:1a:da:e6:2a:27:15:28:24:c5:07:90:e7:a2:21:
f0:a4:b9:2b:8c:24:31:09:c6:04:52:3c:6c:da:14:8c:1a:3e:
06:07:65:1b:85:d7:a5:7f:ae:f7:44:d1:8a:ae:21:5a:7e:cf:
29:f3:f7:dc:77:a9:d6:68:7d:1c:b7:08:0f:27:01:c7:39:27:
fe:e9:d4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:15:30 2025 by rpki-client