Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f979f1d8-46a8-38a3-9845-f5a90d074b42.roa
File: f979f1d8-46a8-38a3-9845-f5a90d074b42.roa (raw, json)
Hash identifier: ZMYy7iip1aZhuL6G5XYge9MIMHOk2fzZ8z5kcp75p+0=
Subject key identifier: C4:68:48:AC:5C:93:F5:43:87:54:1B:93:54:09:34:75:E8:11:5C:9C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D7D746A3C39A227A866CAFA18
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f979f1d8-46a8-38a3-9845-f5a90d074b42.roa
Signing time: Thu 07 Apr 2022 04:00:00 +0000
ROA not before: Thu 07 Apr 2022 04:00:00 +0000
ROA not after: Thu 12 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.158.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7d:74:6a:3c:39:a2:27:a8:66:ca:fa:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 7 04:00:00 2022 GMT
Not After : May 12 04:00:00 2022 GMT
Subject: CN=142498a4-d4f2-4e0a-b7e4-772be0a27ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:30:b4:7b:8e:b5:f5:9c:13:47:11:8d:cd:10:
f1:2c:e9:8a:04:bb:ca:45:cb:2b:2f:d0:20:ee:56:
5a:3c:61:ec:2a:51:e4:60:83:6a:2a:ad:50:71:b1:
ca:84:ae:ec:c8:ad:8c:98:79:df:7b:35:eb:a7:2f:
c8:f5:62:41:2a:f3:7e:df:2e:f9:be:c3:d6:ef:93:
52:19:ba:b9:dd:6f:f3:d9:31:d1:f4:41:d0:19:17:
ce:2f:a1:f5:48:a1:f1:7c:de:1c:d5:29:20:4f:8a:
f6:24:9c:7e:6b:29:bd:45:2d:75:4b:ca:54:aa:4c:
88:fd:0a:3a:6e:19:c4:4c:a4:ff:20:26:6e:a7:4c:
1e:09:01:96:ed:f7:fc:0f:f8:29:32:92:c1:09:5d:
de:26:f2:41:f1:ad:c9:2d:88:ad:3d:a5:4a:a2:1f:
c0:ca:2c:ae:14:c7:0c:36:e4:c7:1a:04:b0:9d:08:
ba:c3:75:15:8a:7d:06:b3:f5:30:27:ec:c4:d9:26:
f7:70:ed:27:cb:0d:e2:bf:e1:d2:71:7c:28:c6:47:
5f:9f:1b:fb:92:00:1d:c4:31:41:ac:f1:af:1b:20:
45:89:93:da:44:06:8e:dd:ee:28:6f:73:24:e4:fa:
e0:0d:fc:bd:8d:03:2c:2e:75:54:9d:ea:6b:3a:7a:
3b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:68:48:AC:5C:93:F5:43:87:54:1B:93:54:09:34:75:E8:11:5C:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f979f1d8-46a8-38a3-9845-f5a90d074b42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.158.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:be:27:72:ce:1f:5d:91:29:3f:02:16:b7:44:25:f4:59:ad:
59:3a:ea:b4:c2:1e:30:21:21:85:e5:20:94:d6:e5:b3:4e:98:
a5:2d:92:5b:a7:89:f1:c9:a2:ed:29:f3:ed:70:b8:d1:7b:34:
fb:d2:a6:6c:f8:a2:06:7e:2e:f0:96:b6:1d:df:8a:e5:0a:e9:
c9:07:cd:f5:d0:72:bd:e3:05:96:5e:df:2b:75:48:41:07:70:
98:a7:27:5f:8e:51:11:71:a9:1a:d4:76:c3:78:b0:78:c9:3a:
65:ef:5e:f5:fb:b6:cb:c2:61:f5:7b:65:b9:17:02:dd:78:b2:
11:24:6f:3c:fe:e3:82:42:3e:eb:a3:41:bb:45:05:03:fe:c8:
66:80:54:b8:25:cc:26:bc:99:3d:12:c5:47:96:8c:d2:50:45:
76:a7:66:17:19:bd:e9:70:78:8c:1c:2e:d2:f3:a3:16:04:bd:
1f:c3:f0:cf:a0:f5:4b:e0:3e:4a:2f:ae:fa:7a:29:4f:c5:01:
56:36:7f:62:93:67:97:f1:7a:0f:aa:86:ec:83:84:e7:c6:77:
03:3f:7b:79:05:fb:1b:bb:4d:a4:71:80:c3:51:ce:8e:87:72:
47:2c:85:0c:b2:89:23:ba:d3:a7:5a:e7:6c:1f:a8:f0:bd:dc:
c1:83:a6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:03 2025 by rpki-client