Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f41210f3-4a2b-3df7-af0f-df71d604bba1.roa
File: f41210f3-4a2b-3df7-af0f-df71d604bba1.roa (raw, json)
Hash identifier: UCMnYvcnaBRx/viBd8u95DLZrzDg58kczSMRnZ2+lFk=
Subject key identifier: D8:D6:89:F2:A5:04:34:DA:45:4E:AD:36:19:8A:BB:82:70:7F:40:4E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F8E14214543340EF021A05400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f41210f3-4a2b-3df7-af0f-df71d604bba1.roa
Signing time: Wed 12 Oct 2022 12:00:00 +0000
ROA not before: Wed 12 Oct 2022 12:00:00 +0000
ROA not after: Thu 17 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.142.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8e:14:21:45:43:34:0e:f0:21:a0:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 12 12:00:00 2022 GMT
Not After : Nov 17 05:00:00 2022 GMT
Subject: CN=04a9e60d-43e1-4fb0-aceb-f86b54400ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:eb:12:c0:93:34:e3:78:6e:4c:13:83:a3:
ed:b9:11:9c:ef:88:88:92:30:0a:82:57:fa:a0:e5:
17:df:36:aa:35:b7:b0:fd:9d:a5:d2:f6:28:c9:7f:
29:f1:a8:9f:1d:b6:00:72:3c:d1:14:6a:07:dd:e0:
80:b7:92:45:4a:56:61:9d:8b:a5:ee:30:72:bd:24:
8a:71:0e:6b:b3:14:c1:b3:b4:83:7e:b6:90:f8:8b:
8d:44:af:65:b5:df:e6:1b:60:ef:58:20:de:01:01:
7e:db:5d:6f:7d:f1:13:74:82:7c:0c:49:17:60:2c:
47:e3:2f:1c:ab:57:89:3d:25:bb:aa:97:cc:40:05:
b2:87:2d:21:12:de:e0:43:29:a0:51:56:e2:46:b6:
61:e7:83:5f:ab:4e:8e:84:26:90:0c:cf:f3:d8:fe:
cc:c2:e6:8f:70:ea:71:14:a7:15:bb:ed:3a:3f:d1:
b2:9a:84:85:06:d7:9a:36:3f:2f:e9:40:3e:d4:64:
c1:26:1c:fe:de:39:73:de:70:98:5c:57:fb:48:4b:
b3:78:fb:06:f2:35:cb:d6:61:78:8b:11:56:7e:43:
15:87:93:dc:4f:28:06:0a:c7:57:8c:61:21:9f:b8:
06:40:8b:57:36:d1:62:31:d8:8c:59:f7:97:ae:8c:
3a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D6:89:F2:A5:04:34:DA:45:4E:AD:36:19:8A:BB:82:70:7F:40:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f41210f3-4a2b-3df7-af0f-df71d604bba1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.142.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:6b:a4:12:ea:b5:53:ef:68:23:79:12:36:e7:3f:bb:97:fc:
17:de:27:b1:0e:0e:2b:95:7a:3c:ce:13:87:98:62:3b:f4:20:
d1:35:68:66:33:5f:9b:74:7d:51:91:27:bb:cd:9c:57:86:84:
5c:cd:84:ca:c8:f3:4b:38:47:8c:ff:47:ec:24:63:1c:12:31:
86:e3:fe:91:f8:29:fd:33:ef:8d:34:96:de:93:5e:6a:7a:8b:
b7:56:0d:36:96:d0:ce:91:73:22:0d:57:ed:fa:d8:ed:e7:64:
71:1e:55:0c:11:92:3b:15:a7:af:54:83:c5:e0:54:40:6f:37:
3a:d1:1a:92:7c:aa:23:d7:31:db:06:3a:14:ec:cb:f2:43:07:
37:d8:9c:fd:a5:73:5c:c0:8c:2e:03:a7:1a:79:1e:32:47:11:
32:8d:f5:be:4f:24:f9:11:01:31:88:30:09:b8:8c:b8:2d:57:
f2:c8:02:b9:7c:ca:c5:ac:eb:fa:e1:96:77:11:e8:da:5f:4d:
9b:07:49:90:c5:be:45:dd:42:40:10:f9:48:45:5d:36:7d:5b:
91:1e:cb:a7:fd:9a:af:51:d4:f1:8e:ba:e9:11:4b:75:86:ed:
a1:fc:98:1a:e3:1c:92:08:46:66:89:7e:5f:f5:28:db:29:a7:
68:23:81:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:07:12 2025 by rpki-client