Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fdd3ab38-abb6-3952-8139-2c3816ae09e5.roa
File: fdd3ab38-abb6-3952-8139-2c3816ae09e5.roa (raw, json)
Hash identifier: 8CQsyp4miPtnn5ry8RZS12XMy4TvhP4Aof1x+2Zxgw0=
Subject key identifier: FD:F1:67:43:ED:F5:28:1F:19:D0:FE:85:91:7F:62:02:4A:B3:70:6D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840274DC6531662EED890ECD400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fdd3ab38-abb6-3952-8139-2c3816ae09e5.roa
Signing time: Tue 06 Dec 2022 12:00:00 +0000
ROA not before: Tue 06 Dec 2022 12:00:00 +0000
ROA not after: Wed 11 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.255.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:27:4d:c6:53:16:62:ee:d8:90:ec:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 6 12:00:00 2022 GMT
Not After : Jan 11 05:00:00 2023 GMT
Subject: CN=b009817e-1d26-4b24-a5a6-bce284dfc41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3c:ba:b2:ae:0f:a4:75:78:83:23:9c:7d:4c:
83:95:9b:ea:67:f9:b7:e2:4a:2f:72:21:23:21:9f:
b0:56:75:1b:24:29:f6:0a:8d:f1:aa:77:fd:86:ad:
87:06:b8:37:37:e3:24:39:69:ae:c8:61:fc:ab:db:
24:f0:54:f8:54:16:a1:14:59:27:88:dd:09:a1:c3:
09:cb:81:c3:f7:a0:93:00:ae:7a:55:31:cc:52:7c:
1e:42:73:9d:dc:d7:b7:2d:04:de:16:ef:0c:91:78:
ac:4d:6f:65:50:d0:0c:91:0f:14:9c:93:0d:86:a4:
32:c7:88:27:1b:e8:f4:74:fd:7c:89:0d:ac:33:f9:
96:7b:76:ce:5e:02:a2:12:27:27:61:a2:16:e9:14:
e5:17:e4:6a:47:a6:b8:3e:6e:cb:8f:7a:47:f8:a8:
43:f8:0b:fa:3d:04:5f:e7:1a:6f:62:b8:a4:10:47:
62:8e:0d:04:8a:29:12:ef:75:86:bc:4f:3b:3b:a0:
94:a5:92:9b:17:1f:c1:4a:08:c2:5a:a9:17:69:cd:
69:86:72:58:9d:22:47:2e:cd:19:f2:0b:5a:01:8d:
8c:63:3d:65:6a:12:66:59:30:cf:70:ed:95:db:fc:
c4:26:2f:08:b3:2a:da:6f:dc:a5:8c:5c:19:0f:ae:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F1:67:43:ED:F5:28:1F:19:D0:FE:85:91:7F:62:02:4A:B3:70:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fdd3ab38-abb6-3952-8139-2c3816ae09e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.255.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:57:56:6f:82:ad:39:12:01:c9:fa:f7:0e:d9:20:6a:53:00:
2c:d0:cf:93:d2:b6:81:d9:63:69:7a:37:d4:50:23:17:15:08:
cc:60:9b:3a:95:b3:c9:dc:cc:d6:bd:65:ed:a8:16:8e:34:46:
63:71:23:27:c2:dd:1e:7f:5e:f2:ec:bc:0c:d4:82:49:c0:a4:
ea:de:4b:01:4c:09:85:6e:b4:ae:d2:3e:98:00:43:c5:d7:b3:
a3:fe:22:2c:a8:08:d6:b9:e3:7e:23:8e:14:54:28:f4:24:62:
ec:a3:d7:ff:aa:aa:8a:ad:2c:ce:e1:22:7d:8a:bf:33:fa:d5:
72:1f:02:c5:8d:11:47:08:0f:c6:95:8d:69:f2:fc:69:40:1c:
32:89:7e:3b:d3:c6:9b:dc:63:53:ae:5d:ae:a3:78:00:c6:43:
c9:cd:14:99:76:f6:6a:40:4e:6b:c2:2c:40:6b:e9:54:4f:c4:
ab:a3:6a:8c:c3:c2:c3:59:75:84:0c:87:c5:9b:a2:f2:58:eb:
0e:80:55:4d:03:e4:3c:6a:4a:98:c9:c4:23:fe:e9:e0:57:40:
a5:a9:76:85:e5:cc:c6:ae:84:aa:df:43:0c:7e:65:d1:5c:06:
36:a0:80:7d:2d:b1:93:cb:33:da:6d:86:b4:90:cb:58:81:4b:
64:4d:78:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:46 2025 by rpki-client