Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7d7777e-5236-395f-b26d-641505e0c817.roa
File: f7d7777e-5236-395f-b26d-641505e0c817.roa (raw, json)
Hash identifier: 8cpGEM8z3mox0+x8TJLvr32UtxpsnPhgVhn+GSynyoM=
Subject key identifier: AD:14:C5:86:23:65:1A:0B:E8:E1:30:18:B0:44:EB:85:25:02:14:2B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F1793611D034D8BF3C4B2C560
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7d7777e-5236-395f-b26d-641505e0c817.roa
Signing time: Tue 30 Aug 2022 12:00:00 +0000
ROA not before: Tue 30 Aug 2022 12:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.245.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:17:93:61:1d:03:4d:8b:f3:c4:b2:c5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 30 12:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=b2509b66-6dae-46ca-8d8a-c122d9c888cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:78:c2:07:e5:20:9f:b6:d8:02:91:b4:5c:
81:6b:b3:c3:b7:b0:41:54:88:76:58:6c:2b:98:ab:
a9:a9:f6:c4:fd:44:86:d8:4e:2b:1a:9d:79:a3:7c:
84:9f:ab:c2:1c:70:fd:c9:3a:ee:b1:4a:70:44:5d:
72:20:d2:13:79:18:39:4a:a8:99:a1:d8:52:1e:55:
85:34:8d:19:88:42:7d:69:eb:9d:56:af:04:29:48:
c5:ab:ca:86:84:6f:eb:2b:3e:bd:48:1f:3b:aa:8d:
ed:2b:99:d4:58:04:72:47:da:5f:9d:66:01:78:6a:
32:33:5c:92:17:48:4e:7c:16:2d:e1:9f:52:7f:d8:
55:54:35:a2:34:7c:45:99:a5:85:86:ba:f8:14:f9:
75:e2:ed:2c:c4:fa:ae:5e:5e:f8:97:a7:7a:a6:d9:
13:f0:c0:bd:8f:74:47:30:95:3c:ed:1f:8e:db:6a:
d9:67:3f:fd:e9:f5:8d:46:b5:a2:f1:9f:5f:5f:d7:
10:99:65:0a:86:b2:a1:d2:6b:f0:1d:de:c0:ad:8d:
26:de:69:46:db:b2:eb:4a:69:e8:37:4b:57:5f:aa:
b4:f1:a1:47:ef:d4:44:da:b6:a9:dd:98:ab:9d:71:
7b:93:11:35:87:27:a5:61:fa:a1:a3:00:b3:5c:74:
e7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:14:C5:86:23:65:1A:0B:E8:E1:30:18:B0:44:EB:85:25:02:14:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7d7777e-5236-395f-b26d-641505e0c817.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.245.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:76:a9:ba:c4:ed:8a:3d:8f:2e:a8:e6:45:c3:69:b1:92:40:
c2:e1:3e:e8:dd:e6:c6:f6:55:1f:24:03:fe:8c:ca:35:91:78:
b1:ea:f4:19:c3:6c:e7:db:d2:f3:a6:37:31:ac:bc:bd:37:db:
06:dc:24:a3:82:4b:d5:7c:8e:e2:74:31:e4:0a:db:09:c1:65:
64:12:e0:85:c2:29:43:a2:4c:c5:bc:f9:31:cd:2b:13:83:f9:
3f:68:a4:dc:08:55:de:2d:0c:e9:bf:2f:c2:a8:ee:c8:bf:be:
5c:63:c1:69:3e:f5:c9:63:ea:be:21:dd:06:36:79:e8:8c:f1:
9e:d5:e8:ac:38:31:28:b6:b7:d6:12:0c:56:81:23:97:5e:1b:
2d:c6:6a:24:1d:3a:67:bf:11:2e:57:75:1b:68:56:ab:da:43:
0d:d4:d6:6f:da:35:02:a9:ab:d5:15:dc:8a:80:6d:7b:88:f3:
71:fb:59:01:1b:67:4a:eb:50:b5:47:f7:08:c7:35:2d:57:77:
3c:9b:b8:34:72:a4:b1:55:86:a3:59:02:57:b7:da:37:3b:e7:
f4:23:6b:65:ff:d0:b7:4c:42:8f:c4:69:ba:00:11:f3:a0:d3:
f2:d6:f0:f5:8f:ee:d7:71:49:0b:7e:2c:24:3e:96:07:5e:ac:
89:34:3a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:45:56 2025 by rpki-client