Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e471082-f072-3c9a-8d20-bda136733cf1.roa
File: 2e471082-f072-3c9a-8d20-bda136733cf1.roa (raw, json)
Hash identifier: HeWl4j68KI2BM1d8VoosSFkFF18PJ8a1tUYxFukSl4Y=
Subject key identifier: CE:E4:D3:6C:36:56:BB:2D:1A:00:B6:E7:6E:82:CE:08:33:C1:0C:5C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584064A2B730FE0B12B42D58FDE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e471082-f072-3c9a-8d20-bda136733cf1.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:64:a2:b7:30:fe:0b:12:b4:2d:58:fd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=737cf879-820c-4bc8-af90-30b3956f3e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cd:ae:ea:0c:87:d2:60:af:72:92:bf:2a:20:
1b:31:53:14:ec:49:63:3c:b2:8a:5d:d8:fa:e6:1d:
74:8e:10:34:c8:ad:da:6a:7a:3f:b0:a3:89:fa:ba:
20:f4:65:7c:82:ea:b4:31:20:af:d6:5b:92:8f:e4:
30:8e:88:4a:86:4a:ee:20:54:3a:fc:0c:69:e1:28:
06:0a:05:a7:ec:04:ae:7e:ca:a3:70:19:76:22:91:
54:01:c2:30:57:4a:7b:6f:de:52:db:84:c7:4c:86:
98:e0:b6:79:1c:4f:47:f9:be:2e:53:6e:c6:e5:f2:
07:02:e2:41:a9:ef:7f:66:1d:2c:bd:a6:96:a8:1d:
bb:53:6a:7a:b0:e0:26:1c:7a:fa:5c:d7:33:7f:21:
1b:66:fa:de:20:97:65:2a:7d:ea:97:b0:ab:42:4b:
e9:bc:35:34:b3:a0:c1:8e:e9:f0:23:97:48:8e:0f:
28:92:02:d6:ad:8d:5f:75:b9:cb:59:9e:ff:14:fc:
9d:09:27:c7:24:14:c5:a6:77:d8:e9:3f:7f:6d:cf:
a7:72:58:a7:fc:d7:71:2a:05:64:68:8a:66:37:ce:
74:c2:37:9e:61:a6:ca:ff:0e:e5:b2:bb:bb:87:59:
a4:07:bd:7d:36:65:cb:5f:9b:a4:98:53:ee:b9:9b:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E4:D3:6C:36:56:BB:2D:1A:00:B6:E7:6E:82:CE:08:33:C1:0C:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e471082-f072-3c9a-8d20-bda136733cf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:f7:88:c6:57:74:8b:57:c4:6e:4b:bc:01:82:c9:ee:07:ff:
b4:69:00:91:30:71:1b:9b:9e:ff:91:db:f8:89:04:65:9c:fe:
67:b1:b5:1c:eb:f2:07:13:99:d6:d5:17:bd:3b:d7:21:04:65:
54:6d:b5:a1:05:7c:26:50:bf:b0:df:72:b0:f2:a9:5a:de:eb:
0c:2a:eb:55:ec:ca:aa:f3:73:34:91:b4:6a:db:d7:f9:a4:b4:
b2:d4:0f:a0:73:9a:8d:4b:b8:4a:d8:3c:e1:a8:17:99:e1:e1:
41:0a:29:0e:8d:37:6e:d1:3f:3b:e3:be:25:06:48:21:b9:26:
f2:1f:73:5f:c2:6e:f2:d7:17:f0:f7:25:4f:d6:5a:08:7f:c6:
5d:94:a1:35:ce:84:6f:66:f5:23:ae:19:10:b3:70:9c:a2:34:
df:98:b5:db:72:11:ea:a6:df:43:3b:ea:03:a8:a3:65:d1:f4:
54:40:8c:82:26:59:7c:db:b3:bc:c3:9e:db:73:80:b0:ee:16:
2b:9b:1c:c6:4c:e2:7f:f3:63:e3:64:d3:06:32:93:7e:0a:9d:
01:53:ec:ec:02:2d:1e:22:69:9c:2f:52:2a:8d:06:10:a4:3c:
31:ea:68:c0:57:65:90:c8:45:5d:ed:86:56:50:a2:ed:96:8e:
f7:d4:60:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:55:19 2025 by rpki-client