Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/09cc4254-d516-3dd1-846d-53ead7d7ecc9.roa
File: 09cc4254-d516-3dd1-846d-53ead7d7ecc9.roa (raw, json)
Hash identifier: 7IvDqPyJvq2/qeDgYL/SK4Vxy3uGNeEYmoV9akPuWXE=
Subject key identifier: CC:A0:03:34:74:EB:F0:7C:25:44:FD:15:60:77:E4:34:BA:EB:88:21
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584016DF9D2CD2B88C47553DEC40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/09cc4254-d516-3dd1-846d-53ead7d7ecc9.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.184.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:df:9d:2c:d2:b8:8c:47:55:3d:ec:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=45f467c9-cc17-45e5-8f5e-39941fed8af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e3:e0:43:3c:b7:ae:d9:66:b0:b7:bf:a6:5f:
9f:d7:42:dc:06:b1:63:f1:e0:d8:17:da:2f:5d:ee:
e3:22:e5:00:0e:e9:ac:26:c0:20:bf:e4:70:79:e0:
1c:1d:03:5b:34:b0:ea:8f:36:dd:1c:93:a5:a1:fc:
31:f4:c9:02:21:18:07:e7:f1:25:13:15:62:83:c2:
df:6f:15:c8:6d:a0:fe:88:6e:5a:e7:d7:ac:e4:0f:
8e:9d:b0:de:95:92:ec:3d:75:e8:53:2d:a3:29:4c:
15:d1:9d:f4:27:10:50:f6:02:79:6a:90:8b:77:82:
5c:fd:af:f6:c4:4d:dd:73:a3:a7:b4:67:2e:c0:85:
10:73:f5:ee:76:72:74:66:b4:86:20:4c:d8:cf:61:
e6:7a:af:c6:c2:70:fd:3b:48:ce:58:b3:c4:10:fa:
ad:73:88:67:59:8d:d4:39:f7:de:e3:48:bf:db:16:
3a:3a:e8:e8:01:5a:a0:ee:7c:93:e0:2d:49:a7:1f:
48:9b:c7:93:08:1a:db:05:83:c8:f1:1d:a1:f9:97:
34:ec:0e:44:31:96:27:dd:95:19:c6:98:13:94:90:
68:6e:44:d1:55:ec:86:01:20:41:de:43:8b:ca:bb:
33:10:8a:a3:26:e4:eb:38:cc:03:51:a2:7b:5b:53:
b8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A0:03:34:74:EB:F0:7C:25:44:FD:15:60:77:E4:34:BA:EB:88:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/09cc4254-d516-3dd1-846d-53ead7d7ecc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.184.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:d9:3d:43:b1:1c:21:f1:61:66:5d:29:a9:6e:ee:49:62:a8:
74:f1:76:6c:32:99:64:8d:81:5e:ad:17:2a:50:ce:66:57:44:
27:64:50:6e:e5:81:6d:02:b2:a5:79:9d:26:09:e7:ad:5d:cb:
5b:e4:09:5d:cc:bf:c4:c0:c2:57:7e:c0:94:87:23:0f:c7:e4:
f7:63:72:fa:4a:75:d0:f2:af:f8:3a:85:0b:aa:2c:f9:33:a6:
b7:c9:0e:b5:92:2c:2a:8e:5b:8b:6d:9c:e7:4a:b4:a7:62:44:
57:36:72:08:04:d7:c3:dd:ce:08:da:0e:97:8b:df:ab:18:f3:
7c:1f:f5:f6:1a:9f:bf:49:a4:d3:26:b7:8b:78:0f:ec:f9:d1:
7c:b3:7b:81:28:64:4f:95:ee:8e:1d:f8:a0:ec:36:ad:90:e3:
15:51:a2:79:46:0c:ef:2b:ea:2a:8a:a7:b3:0c:26:d4:b9:30:
72:6f:a2:79:7b:cf:0e:e0:f2:7e:88:15:dd:7d:f5:b3:ed:5c:
c3:bb:49:c0:f4:0f:1b:ae:e3:6b:59:43:42:e3:d3:36:88:f1:
11:95:43:8e:96:ac:d4:79:95:93:27:9e:2b:63:5f:e2:69:3c:
a5:f7:d2:5c:c8:8f:a0:84:d1:6c:ea:5c:c4:cb:52:ae:a7:69:
a7:cf:33:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:18:17 2025 by rpki-client