Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e7566bee-fc75-3a04-9e20-6900bca0992d.roa
File: e7566bee-fc75-3a04-9e20-6900bca0992d.roa (raw, json)
Hash identifier: sNN7tpA1GVkTKHYtsmuXm3+5+vW1hMadYWZH/MdhVi0=
Subject key identifier: 0E:FE:E3:58:13:56:40:44:E6:3A:5C:44:B0:60:D3:C9:3F:A8:A7:B7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F66534445F29A76D5FD288D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e7566bee-fc75-3a04-9e20-6900bca0992d.roa
Signing time: Wed 28 Sep 2022 12:00:00 +0000
ROA not before: Wed 28 Sep 2022 12:00:00 +0000
ROA not after: Thu 03 Nov 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:66:53:44:45:f2:9a:76:d5:fd:28:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 28 12:00:00 2022 GMT
Not After : Nov 3 04:00:00 2022 GMT
Subject: CN=a4f3ff63-a10e-4322-ad89-2251d1081f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:f0:56:5a:5c:52:75:2b:3c:dc:44:17:cc:
9a:be:0e:1d:d7:fa:cb:b3:7a:c6:6d:88:09:0a:87:
95:9f:16:68:ab:1b:fc:c9:d8:c1:0d:51:0a:01:4f:
04:8e:ab:31:a1:43:ec:43:45:b9:a7:d5:56:2c:79:
d2:e1:ef:55:85:16:3d:f8:51:c9:4e:ba:a3:7c:92:
be:23:40:f8:14:96:6e:c2:3f:75:0d:cf:6e:ec:97:
1b:4b:85:69:67:d3:4d:15:3f:5d:c8:06:40:0f:47:
f7:19:bf:91:5c:72:72:ce:45:28:f9:8b:cb:65:66:
db:3c:a4:40:7a:2e:28:76:76:fd:66:ae:32:bc:cd:
20:94:42:24:34:dd:bb:cd:c0:ba:36:b3:47:fd:d7:
d6:bf:34:b9:59:f8:27:d8:de:da:4c:4a:e4:8d:37:
35:fe:f0:4a:2b:61:66:2f:90:9d:2c:fd:28:86:e5:
df:74:48:5b:5c:21:b4:ff:e1:99:28:0d:26:ef:fa:
53:e1:9f:29:4e:0c:67:44:f9:86:34:cf:6f:a9:c7:
30:57:15:bd:4f:0e:c7:c2:5d:1c:32:03:f0:33:3f:
3b:b6:bc:27:99:a7:81:ee:5b:1e:ec:9e:ee:39:64:
ab:74:5c:7b:8f:46:51:1d:0a:05:79:9a:83:22:31:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FE:E3:58:13:56:40:44:E6:3A:5C:44:B0:60:D3:C9:3F:A8:A7:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e7566bee-fc75-3a04-9e20-6900bca0992d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:b1:a6:43:56:99:18:bd:e4:b3:dc:9f:9e:e1:61:fc:ab:86:
29:17:ad:38:4e:5a:c4:97:29:cb:dd:4c:b4:a0:2f:9b:a5:6c:
27:f0:e6:cb:9e:7d:fd:40:3d:f4:38:32:65:76:4c:ca:bd:2f:
12:3d:00:95:5f:65:dc:a2:b3:b8:4f:02:df:01:56:a0:47:2f:
f3:6c:2c:e8:f3:bf:70:1f:d7:84:d4:5e:4b:bf:9f:23:46:0f:
6d:3e:43:bc:6f:54:25:5e:a4:f4:78:70:9e:17:cf:fb:3d:6a:
37:50:43:53:f3:65:10:2b:15:95:fb:0e:60:d0:1f:3f:3f:c6:
14:23:ef:7d:84:d0:54:de:bb:6b:20:3c:9e:b4:d7:e2:c8:da:
82:c5:2c:55:74:84:d4:a8:08:41:32:fe:d2:59:c3:33:bb:0f:
5e:05:e9:b0:50:0a:79:0c:ab:09:47:3b:32:d5:c4:9d:ef:4c:
3e:9b:93:b0:cf:61:e7:9d:21:9d:3e:de:e1:07:dc:cb:25:80:
6e:bd:54:1e:95:10:42:f8:8b:d5:6e:7c:06:26:06:6f:93:71:
c3:49:b5:43:fe:40:2b:4b:ea:b5:73:b4:f2:bb:c6:fe:71:87:
30:43:08:0b:59:c7:bf:1b:60:e9:64:6d:e1:41:aa:ce:03:d9:
53:39:27:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:56:21 2025 by rpki-client