Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a0ab22f-64e8-31bf-8d8b-76d69a918930.roa
File: 0a0ab22f-64e8-31bf-8d8b-76d69a918930.roa (raw, json)
Hash identifier: W/wB6/q9uoYTg2lJ9d4DCMt759FmvJ+62gqbsqt1kbc=
Subject key identifier: 43:40:27:34:EC:51:E5:84:4D:7F:8D:1E:41:99:95:8C:48:AF:7D:F2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EF0677DF9D66A8F485AFACC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a0ab22f-64e8-31bf-8d8b-76d69a918930.roa
Signing time: Tue 16 Aug 2022 12:00:00 +0000
ROA not before: Tue 16 Aug 2022 12:00:00 +0000
ROA not after: Wed 21 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.144.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:f0:67:7d:f9:d6:6a:8f:48:5a:fa:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 16 12:00:00 2022 GMT
Not After : Sep 21 04:00:00 2022 GMT
Subject: CN=ad350a44-f82d-4b89-be93-4d89e4d01291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f2:c7:a0:6b:4c:92:57:ca:c1:35:cd:27:06:
e8:fa:6a:41:63:58:51:69:c5:94:0d:ac:89:76:5d:
a2:dd:0d:2d:14:c8:a5:96:a4:43:5a:3b:b0:2f:05:
8c:4e:e0:fe:b3:f0:ca:9e:83:05:3a:fb:ea:de:0c:
7b:5a:80:db:be:2f:15:fc:cb:2b:6f:0e:dd:fc:f3:
1a:7f:53:ea:99:15:e8:3e:eb:31:a2:3d:2a:07:a8:
ad:b6:5b:79:19:2b:9a:ce:eb:20:29:9a:92:93:fd:
47:5b:78:8f:1b:43:19:e4:78:a9:3f:a7:bc:8c:30:
4f:74:aa:59:ba:c0:6d:f6:b8:ca:65:82:7d:73:40:
ca:a8:10:d2:56:5a:9c:0c:91:f8:1c:cf:18:51:31:
b6:c6:73:d9:99:d1:5f:bf:26:b3:72:88:b7:94:f7:
b7:30:bb:e1:dc:e5:1c:5c:65:04:f3:d0:18:14:14:
6b:e4:a3:bb:36:b5:59:d1:d3:cd:09:4b:4a:70:e2:
e8:7c:11:0d:65:20:ff:a8:14:5e:31:ff:82:e4:be:
a7:b9:de:82:c6:56:65:50:50:a9:2d:1b:96:b7:cd:
12:d4:15:21:84:d2:40:08:3a:ca:cb:55:8d:d3:36:
07:9d:d9:d2:ff:4b:28:6f:46:e8:27:4a:4f:21:29:
04:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:40:27:34:EC:51:E5:84:4D:7F:8D:1E:41:99:95:8C:48:AF:7D:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a0ab22f-64e8-31bf-8d8b-76d69a918930.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.144.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:2b:e6:eb:5b:43:13:2f:b3:ef:67:93:a0:69:f8:a0:6c:67:
89:46:84:55:3b:c5:5c:e4:73:fb:9f:db:ad:9d:06:19:36:e3:
4b:fd:0a:fc:0d:2c:2d:50:22:c0:06:e6:3f:e2:33:3e:52:20:
9e:d9:fb:bb:fd:63:7f:66:e9:59:57:12:86:05:00:ac:53:03:
a1:34:f2:b0:93:08:e8:3a:85:06:c2:c2:cc:22:a5:0d:48:0f:
3e:c4:e6:46:cc:cc:f8:2f:19:50:57:c7:94:1f:cc:6c:c0:02:
c0:94:7d:26:b7:7e:6e:1f:d2:d7:f7:d2:e8:f4:ac:ab:6c:68:
23:17:bb:c6:be:2c:e7:51:4e:cc:f5:67:7a:9a:89:38:0a:1c:
e6:32:2a:fa:25:70:80:74:72:96:61:98:18:a6:69:38:0a:51:
c8:3c:e8:a8:c7:55:11:74:78:06:b9:be:87:37:c9:9e:02:50:
c3:b3:36:ab:d2:d0:d3:69:9e:bf:18:f7:7d:22:de:a4:0c:d7:
41:7b:9f:ce:b0:17:04:c2:d0:f4:a4:7b:1b:de:ee:42:2c:00:
1a:fd:44:21:a7:e9:8d:e5:8f:63:97:91:4b:3a:59:e8:ed:84:
7f:bf:90:b9:93:85:10:64:31:d1:58:9b:67:13:93:e9:20:3c:
f9:77:f5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:57:36 2025 by rpki-client