Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1a11482-e1a4-3bad-b2b7-da4c118dfb01.roa
File: b1a11482-e1a4-3bad-b2b7-da4c118dfb01.roa (raw, json)
Hash identifier: XwX0ZLY4kL65lcSLC3sn9lgKdm5MzZc6CQQHey47i+Y=
Subject key identifier: 88:B4:7B:F5:1F:38:65:14:C7:E7:85:09:3C:9A:D0:ED:3F:4D:3B:C8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584075BBEDDF92C73CE565016400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1a11482-e1a4-3bad-b2b7-da4c118dfb01.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.170.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:75:bb:ed:df:92:c7:3c:e5:65:01:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Feb 8 05:00:00 2023 GMT
Subject: CN=3ca914a3-10b7-47e0-a320-adca17179544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:dc:46:c5:a2:b6:b3:a3:bc:cd:2c:59:ce:
72:1a:e4:73:92:3a:ed:f0:41:cf:94:cc:c6:88:36:
2c:40:ca:b7:97:53:c5:d7:bd:12:18:81:59:66:4b:
d2:70:8a:ff:48:e8:aa:66:9c:bf:af:38:a0:0b:a3:
47:fa:6e:d3:e4:f4:9f:37:5e:67:ef:a6:dd:f7:d4:
86:1d:0a:19:37:49:d0:a2:83:48:45:a5:f5:4c:eb:
b9:b1:b1:1b:3a:8d:5f:6a:70:4c:05:96:3d:ec:44:
62:d6:5b:06:d3:e6:0f:82:58:42:58:49:f7:3e:e1:
76:74:05:f3:63:40:20:10:c7:8e:00:f6:c8:85:ff:
d7:71:c2:56:9b:82:c5:ea:96:9d:ea:15:49:bb:e8:
25:40:e5:a6:bc:9d:12:22:80:ff:d1:fd:53:4f:2f:
ea:3c:0a:51:a9:bb:44:63:ab:15:77:de:89:0c:a5:
71:8b:be:c2:26:41:ad:97:c9:04:fd:9e:d3:15:8a:
88:62:10:23:ec:da:e9:fb:b0:a7:d8:45:42:18:89:
86:bd:26:ea:00:19:8a:67:b3:2f:ba:2d:95:ea:b3:
85:78:2d:80:ec:8a:40:72:35:a7:17:97:18:d2:48:
87:65:6d:0a:20:84:5a:af:46:92:14:b5:31:67:75:
fe:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B4:7B:F5:1F:38:65:14:C7:E7:85:09:3C:9A:D0:ED:3F:4D:3B:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1a11482-e1a4-3bad-b2b7-da4c118dfb01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.170.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:1d:99:fc:a8:ed:ad:4d:7f:c2:05:d7:31:93:39:fc:3c:b1:
7e:c6:0d:ed:0c:b3:f2:0b:34:80:2a:4c:89:df:28:25:79:5b:
88:98:1c:92:d3:21:93:01:42:e8:b1:08:78:a7:0b:62:05:6e:
5d:75:25:74:e4:79:aa:2b:4a:9c:c3:da:8a:fd:f8:eb:a1:27:
eb:a1:eb:83:ce:77:7a:99:2d:93:e1:68:29:b6:68:49:4a:9f:
91:23:66:e7:22:e4:ba:06:61:b7:1d:4c:23:f6:73:66:f1:e4:
d6:23:46:e3:41:85:76:7b:d6:9a:3f:38:50:24:d8:22:dc:15:
c8:2a:b0:4c:21:83:51:81:b8:d1:f9:69:3b:f1:b2:c3:bc:fb:
3c:50:1b:da:cf:d7:b2:77:08:c7:3f:30:63:4e:7e:f4:1c:57:
0a:fa:54:f4:c8:31:35:14:9e:59:ec:a6:a7:af:c8:f4:82:0b:
86:b7:2f:7b:6a:e7:1b:ab:4a:a3:db:88:0b:34:b9:ae:7f:b0:
0a:db:b8:62:b8:16:52:32:9a:1b:96:e6:02:94:18:56:12:0d:
c6:5b:74:90:35:66:5c:a9:42:e9:a4:85:6b:5a:d4:72:10:04:
76:ae:92:1b:98:93:f8:af:58:c5:1c:93:5d:6a:e6:01:8f:02:
f0:52:74:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:07 2025 by rpki-client