Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e78e09e6-ddb0-34d5-8231-ec0c524743a5.roa
File: e78e09e6-ddb0-34d5-8231-ec0c524743a5.roa (raw, json)
Hash identifier: fZYlpMEF5sblOAMq9hM1a5qvxXhSAfTquMwhTVmD9ac=
Subject key identifier: 17:4D:1C:98:3D:8C:DD:8A:22:C9:87:91:C4:02:95:54:E1:FC:6E:BE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EB6979CF43737000AB520C060
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e78e09e6-ddb0-34d5-8231-ec0c524743a5.roa
Signing time: Wed 27 Jul 2022 12:00:00 +0000
ROA not before: Wed 27 Jul 2022 12:00:00 +0000
ROA not after: Thu 01 Sep 2022 04:00:00 +0000
asID: 7224
IP address blocks: 15.248.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b6:97:9c:f4:37:37:00:0a:b5:20:c0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 27 12:00:00 2022 GMT
Not After : Sep 1 04:00:00 2022 GMT
Subject: CN=6d69e2ea-81f0-492a-ab72-ee2ea032c1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:2d:92:c7:a1:50:6a:4a:1a:e7:fe:ed:cd:
09:fb:4b:88:61:87:13:ad:bb:fc:14:ef:11:8c:b2:
d3:9e:be:08:53:01:c7:ad:16:97:65:a1:27:46:57:
0c:d6:dc:94:44:54:3f:be:51:97:2d:cc:55:d0:fb:
d8:0d:87:a0:3b:3c:60:a5:3d:bb:5f:c3:40:d1:dd:
58:e7:0d:7e:af:3a:7c:7c:a7:9a:2f:b3:ef:02:89:
01:ae:c3:15:16:1e:4e:b5:f2:fc:a5:6a:93:c7:a8:
08:ad:7b:6c:bd:0c:6a:8c:c6:0b:d2:f8:ef:fe:2b:
ea:5e:98:06:9a:38:0d:da:65:d2:fc:5c:eb:76:00:
88:23:de:12:97:46:10:ef:3a:18:f8:52:d2:64:da:
76:86:61:1b:a2:be:5e:c8:e2:8d:ae:03:9a:2c:28:
a7:36:e1:73:ad:eb:2f:7c:9d:e2:81:07:de:0b:d3:
61:12:7e:38:cd:71:9c:6e:f5:7f:a5:43:ed:a3:bb:
78:2e:7d:ef:08:b0:3c:2d:e3:19:05:0a:4c:7a:8b:
85:47:0e:48:b1:cf:c1:02:db:5c:86:1c:d0:63:13:
6a:fa:4e:e4:2d:18:1d:1f:e4:ea:9d:5c:57:0c:b1:
90:e3:b1:24:af:72:ec:5b:85:7f:60:98:88:75:f3:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4D:1C:98:3D:8C:DD:8A:22:C9:87:91:C4:02:95:54:E1:FC:6E:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e78e09e6-ddb0-34d5-8231-ec0c524743a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.248.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:f7:b3:63:d0:dc:9a:4e:ef:db:e3:17:02:4e:86:04:8e:fa:
f5:18:16:8e:58:91:2c:10:c6:31:40:6a:32:ec:9a:a0:d4:9f:
a0:3c:47:3f:f3:2e:6b:15:4c:55:90:94:7e:e3:7c:c0:ca:68:
9c:2a:02:e3:f3:fe:1c:2d:1c:cd:e6:a3:53:d9:29:d3:b4:92:
a1:72:33:2d:97:41:df:a5:7b:f3:bf:01:d2:c3:1f:f0:bf:88:
16:d0:09:20:52:b8:68:e9:d8:25:60:12:23:0e:f4:11:da:28:
00:45:5a:11:35:ad:54:ca:ab:03:d6:d7:32:74:4e:bb:94:f1:
1d:be:dc:9c:6a:12:1f:07:52:25:9b:47:63:17:45:f8:27:e8:
d3:3c:6a:d8:47:b7:32:87:8b:f4:73:7c:17:14:50:b0:90:8d:
ca:ca:92:be:ba:85:e0:8b:07:d4:a4:7f:4d:66:e3:40:1a:3a:
47:19:ed:74:bd:e1:1f:16:4d:a6:8d:3d:ca:a3:ee:a7:3f:82:
04:13:c2:38:43:16:91:d0:c3:ea:85:a0:ba:10:61:d1:97:42:
04:5e:d6:7c:fe:47:11:96:f8:98:a4:36:bc:10:13:20:f4:df:
90:d5:50:80:22:5d:73:fe:76:1f:4b:d0:7c:b7:99:c6:8d:fa:
9e:58:7f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:26:07 2025 by rpki-client