Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cc211eee-014a-3586-b98f-7f497ce9faa7.roa
File: cc211eee-014a-3586-b98f-7f497ce9faa7.roa (raw, json)
Hash identifier: +K/4f77sZoaAmWugdWaYtMgzmWftv7m1XO5zz2MA5cU=
Subject key identifier: 7E:98:57:FA:84:16:80:1D:42:35:C9:10:48:6C:B2:20:35:BA:F0:3A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403DF52528A4ABB9D159DD1580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cc211eee-014a-3586-b98f-7f497ce9faa7.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.184.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3d:f5:25:28:a4:ab:b9:d1:59:dd:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=bbe3258c-7bec-44a5-a12e-495e7cf96b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:db:59:08:5d:4b:d8:bf:03:f2:ee:d1:da:
1f:83:38:f8:03:93:28:1e:58:4b:0e:2b:c2:89:c2:
87:21:cd:63:c9:60:cf:f8:6c:0a:d3:87:83:70:b7:
e2:34:1e:f8:b0:f5:43:89:b4:5b:ee:e2:53:e2:47:
20:6f:75:63:48:1d:68:68:87:a9:48:39:c5:2c:e6:
db:99:b5:93:04:81:d8:8b:b1:27:56:4e:29:48:c9:
53:3c:63:6b:71:38:2f:0a:d0:e8:60:9e:de:e1:e7:
08:47:00:bc:d5:e5:b5:a2:26:c0:e4:90:37:c3:58:
a3:ad:44:eb:3d:28:6d:61:74:f3:d1:a7:54:0b:68:
1d:5f:e8:26:84:4f:f1:e8:ca:6d:43:bb:da:4e:c2:
b0:86:01:0a:a5:40:bf:88:e7:fd:4d:10:38:fc:56:
fa:f6:d3:88:e1:3b:9e:3c:c7:7a:b4:56:5f:11:2d:
76:c7:f7:2e:6d:ff:61:4a:2d:ba:b0:9f:e8:d8:29:
9c:4b:f7:94:cc:6a:d3:62:03:bf:c4:29:fd:8f:db:
ca:4d:8f:df:52:b8:e4:19:2b:a8:1c:78:53:cf:08:
e6:23:e5:0b:fe:14:a0:70:e6:86:03:2d:1a:9d:00:
65:6b:33:ef:45:57:6a:66:b8:fd:fb:13:b6:f5:88:
0b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:98:57:FA:84:16:80:1D:42:35:C9:10:48:6C:B2:20:35:BA:F0:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cc211eee-014a-3586-b98f-7f497ce9faa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.184.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:19:c9:a2:48:69:f4:a6:7e:4f:54:77:7f:c5:2c:43:8b:f5:
ef:ca:63:a7:06:9f:b0:69:c8:c0:e5:70:2f:7e:6c:ae:60:d9:
95:4a:35:dd:75:5b:96:9d:81:77:a8:86:39:6e:69:b2:4a:57:
2e:5e:c5:8c:c8:34:76:ce:e5:ca:e0:43:3e:49:5f:9a:3c:b1:
34:a4:ed:75:85:e8:d5:d5:ce:4f:73:c8:4b:8d:0a:55:e1:55:
a0:9f:6c:82:28:e9:6a:53:fb:86:07:d4:5a:70:37:9e:a0:81:
0b:9f:a0:e0:97:23:49:1c:67:d7:ba:61:d1:83:06:40:13:48:
bb:68:af:ee:2f:d8:8e:b6:a6:ff:83:a6:2d:4f:15:d5:cd:c7:
74:53:2d:46:93:d4:68:8b:76:28:dd:b1:15:f9:45:9a:99:10:
53:9c:c2:fd:52:5d:67:1a:70:63:dc:17:11:81:84:07:bf:8d:
bd:3f:43:d3:fa:b8:a3:66:8f:fe:0e:84:02:43:71:2c:d1:33:
a6:e1:93:59:82:c0:47:33:3e:82:29:e7:25:12:fb:f8:ce:7f:
9d:b1:53:86:de:9b:53:75:5b:fc:9f:64:dc:de:ae:d1:ab:9b:
78:a5:c3:06:92:f8:5b:3f:b7:26:80:9e:9c:04:f1:2c:e5:df:
c0:8e:f6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:05:05 2025 by rpki-client