Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/be89ba37-dade-31c3-8662-897d7c22cbd5.roa
File: be89ba37-dade-31c3-8662-897d7c22cbd5.roa (raw, json)
Hash identifier: kAQTyunW6SPq5QDSbk4SQS4b3pw2kii1iP9BtXjNZQk=
Subject key identifier: 4D:8D:1D:10:43:8F:1F:C9:42:CD:1F:25:13:86:9F:A6:32:FF:8A:08
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EDD8F6D54930BC60FDC957180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/be89ba37-dade-31c3-8662-897d7c22cbd5.roa
Signing time: Wed 10 Aug 2022 12:00:00 +0000
ROA not before: Wed 10 Aug 2022 12:00:00 +0000
ROA not after: Thu 15 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.253.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:dd:8f:6d:54:93:0b:c6:0f:dc:95:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 10 12:00:00 2022 GMT
Not After : Sep 15 04:00:00 2022 GMT
Subject: CN=9ab36ea4-87e1-4d97-8dcc-4c7d1ceac6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:38:7e:7a:b8:ff:da:36:66:18:fa:dd:3a:3e:
e5:5e:0a:c2:a7:77:99:e6:6d:33:cc:5a:b5:d4:4c:
c3:03:0b:27:b0:aa:82:66:8e:a1:8f:99:69:91:d1:
62:ca:df:a5:0d:1d:d2:c5:07:3f:5f:e2:92:90:36:
e9:a2:14:1d:25:dd:35:35:1c:81:44:75:f2:1f:0f:
81:a7:ca:50:eb:4c:ce:d2:28:e4:c8:30:9c:fa:d7:
b5:6a:45:79:b0:c2:d4:c5:08:60:c5:01:00:2b:53:
f7:c1:ff:b6:39:f9:ee:fa:c0:3e:02:70:94:bd:dc:
80:8e:6d:e4:6d:2f:f1:68:e7:c5:c7:10:d0:d3:83:
93:a7:76:b0:1b:82:52:af:7d:79:ae:d7:8a:4d:12:
8b:67:ac:1a:82:2b:56:2c:e9:74:e8:ab:be:c5:ff:
a8:89:05:49:fc:68:3f:d0:0d:0f:17:06:ac:d1:62:
3c:90:51:35:4e:15:e0:36:bb:64:d6:b5:b2:a8:81:
27:60:44:54:00:70:72:b6:7b:4c:c0:b8:c0:11:b3:
04:2a:4c:93:32:b2:93:5d:59:b6:02:29:16:14:47:
6d:bb:b5:f5:1d:ca:9d:58:b2:98:47:23:78:e4:54:
7e:4c:34:83:b5:f5:ab:be:40:d8:82:af:fa:79:15:
29:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8D:1D:10:43:8F:1F:C9:42:CD:1F:25:13:86:9F:A6:32:FF:8A:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/be89ba37-dade-31c3-8662-897d7c22cbd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:bb:99:24:68:07:4d:4b:5f:b2:e7:73:04:d9:95:85:6e:f2:
ff:46:cb:1b:1d:c8:01:7a:97:97:01:f3:77:7a:5e:89:19:84:
91:6e:a8:39:94:40:bb:54:b0:36:f7:37:83:af:d5:bb:bf:e0:
b1:ad:d9:d8:5a:3e:59:2b:15:2c:44:77:ea:c3:12:98:38:51:
9e:af:ff:85:76:0a:84:89:8f:4a:1a:15:a1:c2:16:7a:5d:37:
cd:ac:02:d4:52:ea:cc:66:ef:b6:a6:d7:86:65:a7:4f:17:ac:
8e:15:17:4a:11:40:a8:51:48:b4:b8:a3:2c:ac:0e:2b:fc:df:
0a:f0:8e:ab:ff:53:98:f8:98:4b:1d:92:d4:98:1a:e6:23:a9:
17:88:a3:f0:ea:7a:45:3c:6a:a4:5d:fa:95:05:d0:8a:18:1c:
8a:0f:32:37:44:46:cb:fb:7f:20:4e:85:2c:dd:39:30:80:6c:
12:02:b3:4c:99:ac:b0:36:96:0a:a4:df:85:b9:cb:48:de:fc:
5d:89:d7:e4:eb:58:5a:fe:1b:c8:b0:1f:10:03:d3:c6:eb:59:
ee:14:f2:27:dd:a0:89:97:3f:27:95:1e:fa:ee:94:bf:56:47:
04:af:42:7d:40:91:4f:6d:c4:1d:85:e6:9f:ec:0c:dd:10:71:
e1:48:e4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:24:54 2025 by rpki-client