Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ed9cb078-91ae-3cb0-ad40-fcfb569928df.roa
File: ed9cb078-91ae-3cb0-ad40-fcfb569928df.roa (raw, json)
Hash identifier: 5C26L/TzruIIJFWLl59sCE4QhbTVcHIj2R18EaI1QTQ=
Subject key identifier: 3C:BB:01:EC:F3:D8:92:2E:51:03:D6:37:24:B1:35:D7:9C:E2:C7:F3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FC8E8C55D92EA5C987B25AA80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ed9cb078-91ae-3cb0-ad40-fcfb569928df.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.206.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c8:e8:c5:5d:92:ea:5c:98:7b:25:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=d47d2eba-6c69-4f5d-b3f4-650fa0db178e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:e1:de:bc:f7:f6:53:e8:a0:57:bf:79:7e:
ad:61:dc:92:1d:e7:d6:1c:0b:fe:34:4f:bc:a3:98:
43:7e:47:52:04:92:c4:31:30:8a:3e:7a:1f:84:a2:
a8:b0:da:11:c4:f7:7d:19:7b:41:5f:da:6f:35:08:
d0:62:14:7f:8f:8b:3a:78:ac:e9:60:93:af:f3:7c:
1b:d6:66:cc:81:f7:1e:b0:17:0d:a5:1c:2b:df:de:
ba:3d:11:0c:24:45:1a:81:ac:7e:3d:d4:13:01:1a:
5a:8e:7f:a9:fc:0a:ad:bb:bd:1f:59:ea:d9:68:90:
9a:c3:7a:46:89:37:bd:bb:0a:06:52:70:db:b5:8e:
f2:22:5d:c4:da:90:d9:fb:32:39:3b:54:d9:c5:b2:
42:33:2c:a4:76:14:0a:d8:c9:86:e4:aa:6a:d9:ab:
bf:35:89:c9:7a:be:da:94:fa:de:58:b3:81:1d:8d:
5b:34:30:33:eb:6c:d0:8c:73:1a:50:ba:1f:2e:8a:
0b:ab:fd:a1:ca:e5:4f:96:6e:8e:ba:ba:f7:d9:31:
12:6b:34:5c:12:0b:06:11:84:4d:d0:6f:60:d2:a9:
fa:c3:6e:7f:8f:00:13:a9:de:b1:f0:ba:54:5b:28:
0e:04:8c:ec:1f:35:77:27:e8:20:52:3e:57:2d:2b:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BB:01:EC:F3:D8:92:2E:51:03:D6:37:24:B1:35:D7:9C:E2:C7:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ed9cb078-91ae-3cb0-ad40-fcfb569928df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.206.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:93:fb:02:6f:98:c0:b1:82:b2:da:df:73:66:ae:a6:7d:81:
8c:47:f4:62:f9:57:ba:1a:e3:8e:3b:bd:22:c3:ec:43:16:13:
ac:ce:ff:8e:50:c6:26:9b:2b:78:35:95:6c:57:1d:3a:40:74:
f1:f7:4d:a5:51:51:54:2b:4c:87:01:04:a1:ae:2f:35:79:74:
4a:4d:c8:d8:98:2b:3b:ac:58:31:7f:04:8d:32:2c:a1:38:a6:
0d:09:96:5d:6e:7a:91:ef:0c:d1:26:e7:cb:cf:25:5c:ad:83:
f9:28:a1:70:88:81:06:c5:74:fa:3c:1f:f5:cf:b0:c0:e8:89:
17:3a:a6:73:41:b4:3f:56:33:f5:40:67:ef:0e:a0:7d:21:3a:
ce:ec:58:bb:e6:76:32:86:0f:6b:cc:63:42:9f:0f:62:97:8a:
7e:8c:b6:27:f1:0a:a2:dc:fa:48:e3:87:68:9b:88:f0:11:3e:
1e:21:0f:98:19:c3:91:a1:3c:0e:9d:05:c7:14:4a:b3:1e:28:
ff:1c:66:05:ae:01:e2:77:f9:90:a2:45:0f:db:14:70:9c:4f:
83:ab:55:c6:cc:0b:3d:9e:18:2e:a7:bb:22:de:04:e7:42:2b:
63:b0:d1:d7:5e:00:4b:ee:76:0d:1b:98:b1:2b:e8:cd:bf:28:
99:41:16:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:02:45 2025 by rpki-client