Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d56561e7-51d7-34db-bc82-88e32f775ac4.roa
File: d56561e7-51d7-34db-bc82-88e32f775ac4.roa (raw, json)
Hash identifier: gbswHobxoCK8ZSm9Dx6GWcRk7nZPuP/rnqIxjuGF6rM=
Subject key identifier: 27:17:F2:5E:90:BA:23:47:41:B2:FD:31:A0:79:95:D1:06:CB:CD:1B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584065AE816E2C4C2D0C03916540
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d56561e7-51d7-34db-bc82-88e32f775ac4.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.238.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:65:ae:81:6e:2c:4c:2d:0c:03:91:65:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=396b3e05-ae61-4b92-a4b3-5696f000c57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:ae:43:73:a9:64:6e:bb:f6:bc:b5:ac:88:
5c:9c:22:d3:c6:c1:16:17:39:0d:d2:56:a3:5e:d9:
77:39:b1:fe:36:06:d1:a9:6c:c6:0e:6a:5f:15:5d:
c6:e2:78:0b:19:ee:d0:a9:4d:1b:f0:d4:ec:db:0a:
f8:2c:2c:55:d4:3c:ff:bb:35:0a:ec:ee:5b:b5:22:
74:25:4b:88:8e:97:7d:4f:64:c6:6d:5b:b1:39:48:
01:31:3f:2d:4a:5e:ef:93:d4:83:2a:41:b5:47:ee:
db:f8:50:d9:f8:5e:2e:af:95:dd:ff:96:50:10:a7:
b8:0e:5d:0c:7b:c5:09:a5:79:bc:11:f3:9f:99:5b:
18:db:d8:93:40:84:8d:00:16:5b:3a:41:6d:93:7d:
f3:92:d6:f2:04:cb:82:4f:56:4e:10:57:2a:eb:b5:
9f:95:08:96:9f:08:f0:31:8d:4a:68:25:70:6b:b4:
e8:e9:dd:d9:12:df:c7:1f:63:07:78:5d:91:df:30:
1d:2e:c2:b7:97:c5:eb:c4:08:55:03:50:c0:92:e4:
79:63:0f:58:0e:3e:9d:3e:df:28:a9:3c:9f:2d:d5:
0a:b7:08:a7:2d:7a:75:cf:d9:63:53:e9:8d:7d:8b:
79:cd:94:45:d8:5e:90:68:51:d2:0a:2b:ed:de:32:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:17:F2:5E:90:BA:23:47:41:B2:FD:31:A0:79:95:D1:06:CB:CD:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d56561e7-51d7-34db-bc82-88e32f775ac4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.238.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:ec:58:a4:84:48:43:3a:87:3b:19:2b:ab:83:11:1b:dd:52:
cd:26:be:fb:1f:da:99:97:1f:db:0a:0e:af:c9:8d:7b:7c:94:
32:a0:34:48:7d:70:db:61:ab:eb:aa:20:9c:93:27:bb:05:25:
fc:f0:fe:28:95:57:9e:48:a6:8b:54:7b:2d:5b:7e:ae:5d:b8:
89:a3:f0:4c:05:50:05:57:4e:0d:7f:c9:82:21:5d:df:4e:bd:
a3:11:0e:5f:8c:05:38:d2:89:4b:d7:8f:4c:d0:2b:7e:4a:f7:
7c:c0:b3:0f:77:bc:d7:b0:25:9b:04:be:2f:39:c3:43:f2:6b:
43:af:cb:29:97:e2:89:61:5e:e4:7c:93:a7:78:c2:1f:1e:82:
43:53:51:c4:e0:61:3a:03:ea:87:e4:5c:41:0f:02:53:ba:fd:
6d:c0:b8:b4:45:81:a3:87:61:54:9d:5d:cb:f7:6a:13:98:64:
8a:ca:32:7a:c5:96:6b:21:bb:f9:47:11:e7:62:ab:21:a9:93:
d0:13:5e:74:92:86:dc:55:e9:1e:ca:a6:b4:de:6f:37:4a:3b:
08:c4:93:47:b8:85:6f:09:20:b8:97:4d:84:be:c1:e8:5e:ca:
c8:3e:0d:c1:3c:e3:c4:be:31:68:d8:6c:aa:43:ad:77:c4:6f:
10:6f:80:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:05:34 2025 by rpki-client