Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8abdfbc-463f-35f2-8b0d-cf041aad40f2.roa
File: c8abdfbc-463f-35f2-8b0d-cf041aad40f2.roa (raw, json)
Hash identifier: PRDQVe9EsqqCeeDF4sZHx4SW9Bb/Eq7FQLOVjmdlZQo=
Subject key identifier: BD:6D:27:4D:D3:AC:71:CA:23:BF:4F:F2:DC:90:F8:A5:E3:76:54:C3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6BA9939459880978C83A2FF0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8abdfbc-463f-35f2-8b0d-cf041aad40f2.roa
Signing time: Thu 30 Dec 2021 05:00:00 +0000
ROA not before: Thu 30 Dec 2021 05:00:00 +0000
ROA not after: Thu 03 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6b:a9:93:94:59:88:09:78:c8:3a:2f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 05:00:00 2021 GMT
Not After : Feb 3 05:00:00 2022 GMT
Subject: CN=ac4a5866-0f6c-4e5a-b4c3-a30f3d1e82af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:a2:d5:e7:e4:19:9d:e1:10:c0:a9:0f:0e:
4e:8b:f3:29:41:4d:cd:f8:6e:98:67:96:06:29:11:
5a:88:20:58:d0:65:bb:51:3a:00:89:a2:14:13:4a:
4d:14:d5:ab:0a:e6:68:c8:57:50:f9:d1:54:75:48:
3c:d8:a7:86:55:c1:7c:3d:cf:15:37:a8:29:a1:56:
7f:0a:a0:a6:2a:b0:0d:44:7f:9c:55:f7:bc:01:99:
0b:b8:28:36:5a:b2:45:e9:9d:07:b3:78:3b:d0:67:
82:69:5f:8d:15:50:a4:45:3c:25:2c:05:e7:d2:ff:
29:68:c1:d3:ee:f3:19:0a:47:f3:ce:85:41:5c:f5:
74:98:10:a8:62:c0:b6:c3:b2:f2:77:06:8c:21:d6:
9c:c1:6b:d8:76:a4:33:6e:49:ed:ab:b7:10:3e:6c:
58:27:2f:d2:61:a2:89:3c:cc:c2:32:33:14:9e:4a:
be:1b:12:5f:9f:c9:1e:55:5d:85:e2:dc:2a:10:92:
9d:a8:fd:3c:34:71:76:e1:16:e6:be:e6:c8:46:fa:
63:e3:d5:60:83:38:fe:54:1f:45:8b:58:87:11:a8:
1c:4e:c3:8d:00:e9:d2:57:64:3f:fa:19:75:81:67:
f6:d7:8d:22:24:b4:15:c6:76:83:7f:bc:5f:1d:6c:
a7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6D:27:4D:D3:AC:71:CA:23:BF:4F:F2:DC:90:F8:A5:E3:76:54:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8abdfbc-463f-35f2-8b0d-cf041aad40f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:cd:6b:79:1d:d9:02:f6:9a:5c:61:39:07:65:81:38:59:34:
ef:19:ce:ea:dd:4e:21:9a:dc:a4:b8:d3:e9:8c:b6:c0:59:aa:
cd:d1:ff:5e:7c:08:55:a1:06:4a:86:3e:b6:fa:49:b6:fe:0f:
f6:8d:69:05:ed:67:59:5c:8d:58:4d:50:2a:9e:c9:35:24:59:
77:da:4a:33:51:74:72:8e:87:bc:71:7d:90:d6:f8:bb:38:f5:
e8:e5:c6:37:06:d3:68:46:b3:dd:be:03:8f:5a:f6:7c:69:0f:
c5:ae:62:fd:6d:75:62:e8:25:aa:1b:c4:f7:dd:43:f4:90:eb:
2d:2c:48:f8:af:ab:2d:b9:3b:55:73:0a:2d:e8:ed:5b:d3:5f:
c6:43:e2:22:33:e7:87:c6:02:83:cb:aa:24:fe:de:6a:2f:38:
0b:40:7b:82:3a:a5:62:72:f3:9a:88:44:ab:67:c8:fb:b1:53:
36:27:54:0b:62:84:99:a7:d2:74:56:f2:3b:37:ca:0b:0c:7e:
4e:83:fc:0c:cf:e8:46:0c:c6:14:65:6d:75:3e:e0:18:1a:a1:
b7:31:f5:c3:95:3a:0f:19:12:3a:d1:64:2a:ad:d7:33:11:fb:
4a:c7:cf:a6:47:bf:b8:9b:4d:b1:5f:85:eb:29:a6:50:34:e0:
d4:9f:35:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:25 2025 by rpki-client