Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a60fc30-99d3-30dd-b824-7bcf3a465af2.roa
File: 0a60fc30-99d3-30dd-b824-7bcf3a465af2.roa (raw, json)
Hash identifier: AffyxfXP/7LEXYbWcAVV4WFnplE8dKnLLZsFoEcmHAU=
Subject key identifier: 0C:26:0C:EB:3E:C0:1C:73:1E:B1:2E:9B:8D:9B:BF:9C:E9:17:5F:11
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403E3FEE4C16CBEF50CC0ACF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a60fc30-99d3-30dd-b824-7bcf3a465af2.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.206.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3e:3f:ee:4c:16:cb:ef:50:cc:0a:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=96c35aab-6ddd-40ae-a6b1-be8b84b12b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:9b:96:53:42:7f:1d:5c:e0:1b:c2:5f:a4:
7d:36:68:de:43:26:5e:fe:89:68:0b:74:f5:d8:1c:
ce:07:99:ff:64:8c:7a:12:20:f9:77:bb:93:1a:01:
f9:fd:1b:d9:b5:51:95:36:6a:57:3c:a8:c0:33:9e:
10:ad:36:84:85:5f:9f:73:8f:f4:16:b1:76:e8:20:
8d:55:ae:9b:96:b8:50:bb:a7:db:59:ee:2c:0c:00:
30:dd:4a:fd:ea:6c:2b:d0:17:94:91:a9:5a:b1:fb:
4b:1f:ba:33:02:55:53:b8:82:89:1e:a8:21:01:b7:
f6:d9:a4:54:df:ff:00:6c:56:31:f5:44:41:c8:bf:
d1:19:87:b5:18:48:74:60:17:7b:65:7c:40:b4:4b:
25:50:72:3f:3c:32:2d:39:fc:ac:4a:72:15:b3:8d:
2b:96:02:ae:24:87:86:2a:b9:5e:0d:5c:82:b7:6d:
67:97:4e:47:11:90:9b:0c:a0:ba:af:3d:5b:5c:63:
ec:ef:38:48:3a:1d:16:1a:4a:eb:e9:b2:2d:93:2e:
3b:03:15:36:08:50:28:90:a8:75:56:48:6b:8f:5e:
f3:00:6c:31:ae:bf:9e:98:73:81:52:99:e1:78:78:
b0:06:3b:f0:50:7f:a7:b6:41:7e:ba:84:0e:0a:4d:
ec:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:26:0C:EB:3E:C0:1C:73:1E:B1:2E:9B:8D:9B:BF:9C:E9:17:5F:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a60fc30-99d3-30dd-b824-7bcf3a465af2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.206.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:d1:e3:49:e9:97:6c:00:c8:90:f7:f1:8c:52:3b:fa:46:87:
8e:05:6c:f1:ef:a5:8e:c4:9f:be:1e:56:1f:7e:ef:a2:aa:a7:
e1:5c:74:18:31:92:8a:2b:78:93:f4:06:71:6f:3c:ee:e2:60:
44:df:aa:74:cf:2b:e1:3f:0b:70:e0:2d:53:f9:cb:d6:16:68:
7c:47:80:03:3f:f3:ea:31:c7:fb:a9:cb:c6:20:e7:87:85:db:
f0:13:6e:24:a5:a8:2f:5b:b5:2c:94:c7:4f:a2:c4:fe:74:0f:
fb:c5:17:45:8b:fe:5c:ff:b5:8f:35:4d:0e:8e:02:6c:b7:a8:
a2:ed:9d:ba:e5:fe:5d:46:82:8c:30:98:c3:7a:1f:ff:29:4b:
e5:02:60:0e:f3:6e:c8:7e:26:d2:be:ee:19:b4:8a:42:ed:a4:
0d:3d:9a:e2:16:2b:bb:ae:34:93:1b:5e:3b:97:ef:24:9d:c0:
df:c8:50:18:65:a7:91:72:e6:a9:c1:f8:f3:ec:21:07:33:f7:
c3:69:f6:11:2b:d3:46:16:7c:69:f0:06:c1:73:17:e9:6f:67:
15:65:3b:21:e3:ba:2b:3a:29:5d:70:1c:6a:c3:f7:4f:63:59:
5f:41:25:87:7d:7d:98:08:5e:1c:cc:19:0d:52:50:d8:52:0f:
15:10:e5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:13 2025 by rpki-client