Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/da06d2dd-dd9b-363c-9f9e-1004052ac231.roa
File: da06d2dd-dd9b-363c-9f9e-1004052ac231.roa (raw, json)
Hash identifier: bqS8ZBTWI/IfTArDOzgwcFZQ0clY8FxxA2wHUAXEY6Q=
Subject key identifier: 40:22:FC:2C:B3:72:53:63:21:E9:DD:4F:28:AB:60:E4:09:F1:B5:CA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840279111C7C5FB1964B2338F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/da06d2dd-dd9b-363c-9f9e-1004052ac231.roa
Signing time: Tue 06 Dec 2022 12:00:00 +0000
ROA not before: Tue 06 Dec 2022 12:00:00 +0000
ROA not after: Wed 11 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.170.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:27:91:11:c7:c5:fb:19:64:b2:33:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 6 12:00:00 2022 GMT
Not After : Jan 11 05:00:00 2023 GMT
Subject: CN=a8fdd141-9bd7-4b99-9f6a-3766beef8cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:79:8c:24:4a:b1:91:e8:be:2b:b7:28:a6:1b:
e3:08:50:d3:d9:62:1d:15:87:90:f2:72:7a:6a:76:
5d:d5:36:8f:89:d4:17:26:1e:30:0c:6a:9e:59:04:
08:1a:a1:5a:cc:67:ad:5a:0f:37:16:07:60:68:27:
3c:06:5b:71:33:4e:a3:cc:b6:19:74:10:3a:d6:70:
5f:c0:2e:ea:64:b3:3f:aa:02:85:92:2d:a7:ed:06:
82:ce:d4:51:89:1d:ec:2d:a1:2c:d7:08:a4:d7:cf:
62:2b:b7:d3:38:22:08:aa:7c:cd:a0:5b:04:25:1a:
5f:b9:ed:6e:88:b6:7f:a5:77:d1:95:20:ab:28:1d:
5c:c4:54:12:94:32:48:e1:a0:32:b1:fa:db:34:56:
6e:41:6f:cb:37:83:eb:23:62:27:d8:68:15:f9:32:
07:d1:b4:98:64:7b:03:ad:b7:89:b1:c5:de:9f:7d:
ae:d2:25:81:cf:f6:8d:79:34:c3:be:0d:79:d2:35:
bd:d5:e1:8a:1b:c3:0a:07:bb:f0:41:8f:a1:45:44:
66:1d:8a:0c:31:6f:88:1c:32:d6:e4:e1:c6:f3:db:
1d:f7:d5:dd:da:73:c8:da:13:32:ab:d2:dc:8b:89:
6d:4c:a0:e5:42:52:9d:6d:9c:2d:7c:d9:f5:67:f5:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:22:FC:2C:B3:72:53:63:21:E9:DD:4F:28:AB:60:E4:09:F1:B5:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/da06d2dd-dd9b-363c-9f9e-1004052ac231.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.170.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:1e:78:df:34:9c:fc:c6:ff:96:b4:b7:45:e5:4c:6b:77:00:
ec:fa:d4:f7:c2:c5:f7:e4:47:8e:c4:05:b2:4c:ef:b9:b7:bf:
60:19:95:fc:1d:6f:ed:c5:bd:bb:94:72:2a:b1:c5:0d:95:30:
42:f2:89:c7:d5:ce:0e:50:1c:fa:9f:72:0b:22:5b:59:1d:3a:
cd:fd:e6:2a:20:59:87:e4:c4:96:3d:ad:68:2f:14:fe:e5:ac:
e6:fc:68:e5:58:4f:97:86:67:70:41:c9:77:21:43:1a:cb:d3:
5e:37:80:f1:aa:9d:a4:39:64:ed:a7:83:c2:0f:4f:0d:e4:fb:
ec:1b:00:23:84:37:ac:7f:26:aa:e8:22:3b:f2:04:22:59:30:
fb:c7:cc:5b:b6:f0:a7:c5:ac:13:07:88:1b:0e:85:ad:7f:5b:
34:7a:ac:b1:25:33:22:b1:cb:a3:68:d8:f9:f8:0a:64:02:c6:
8e:f7:29:21:41:74:e3:15:08:07:7c:6a:03:53:46:04:a0:31:
0f:2f:4c:a3:9f:9d:5e:31:4b:64:af:0d:7d:17:48:7a:57:4c:
3c:1b:ce:a4:ab:c1:bc:8d:a8:76:0b:96:03:f6:6f:1b:00:fd:
85:ac:10:4e:64:9d:a2:7b:b9:1b:72:e5:6d:ac:76:61:15:f1:
a3:f6:eb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:47:43 2025 by rpki-client