Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d1a33e9-aafb-34a0-beba-b43ba7a77368.roa
File: 0d1a33e9-aafb-34a0-beba-b43ba7a77368.roa (raw, json)
Hash identifier: DfORauLiXymzojO6yidWhNIX8yGMACFc0+VzWL17m+o=
Subject key identifier: 41:AA:20:5C:8F:E7:80:46:4E:D3:09:03:5F:A8:50:B1:D5:C3:6B:DA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403E4E89474DF578556FF7FF00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d1a33e9-aafb-34a0-beba-b43ba7a77368.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 7224
IP address blocks: 15.248.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3e:4e:89:47:4d:f5:78:55:6f:f7:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=48299b03-6afb-4dc0-9ad1-c0b0b50e0de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:04:7b:e6:04:96:c0:d5:53:a9:e2:31:e9:d3:
f7:a2:bf:3e:2e:f5:a1:80:66:7f:4d:44:68:91:b0:
16:d4:f9:0b:64:6a:5e:42:8b:4a:38:28:7b:07:ca:
74:2d:d0:6c:3f:68:ac:bf:08:2d:59:74:d8:8b:85:
33:02:f7:d7:05:9e:d9:c3:47:5d:ac:bf:15:32:53:
6c:af:ba:9a:c3:52:93:2f:d6:bb:75:d5:0a:b4:b5:
9f:8f:60:7f:68:10:f3:e6:c6:47:9e:5c:fa:e3:06:
0a:40:c9:3d:71:3a:5f:9b:a8:c0:4b:5d:79:dd:7e:
6b:c6:3b:02:db:b0:9a:00:7a:96:e3:69:52:fc:9a:
75:d9:84:2a:94:d3:5f:23:f9:6f:48:71:1a:ea:d5:
c2:91:09:ce:70:e8:69:f7:13:d3:16:5d:86:99:a7:
03:65:e5:75:0a:c5:6f:30:e0:f1:54:eb:a9:c2:e9:
cf:b7:26:7b:df:87:22:b9:10:b9:26:b1:92:e8:77:
8f:f3:1f:7e:39:4a:ca:be:f2:0b:81:d8:37:79:18:
a2:bb:17:8d:4c:af:d7:38:c8:f1:9c:74:ed:18:30:
6d:54:71:b2:f4:f9:dd:ee:af:f5:cc:b5:1a:75:ed:
63:a3:74:c6:61:ca:fc:93:b4:ab:06:d7:cc:bc:64:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AA:20:5C:8F:E7:80:46:4E:D3:09:03:5F:A8:50:B1:D5:C3:6B:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d1a33e9-aafb-34a0-beba-b43ba7a77368.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.248.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:e9:e8:80:d7:79:43:bc:2a:5f:41:00:5e:d2:a5:4f:81:0a:
f4:76:13:99:f4:a3:11:53:0b:8a:7a:d9:c4:71:23:d5:a4:69:
7a:25:69:84:54:1c:86:1d:03:4c:84:4f:e1:a9:d6:51:db:e2:
71:cd:0f:91:3a:47:14:ae:5b:17:1c:fa:24:b0:74:9e:35:32:
44:f5:c7:b3:a8:11:46:a1:9d:ea:51:5c:e3:00:e2:df:53:ab:
b4:d5:d4:33:79:c9:fe:42:87:e7:70:c9:a6:4a:cc:20:35:f1:
be:d8:21:00:51:1f:c8:16:43:13:fd:8e:f4:de:4e:54:a0:e0:
32:e0:e2:64:b6:65:c4:f4:8e:04:af:ad:39:89:ce:e1:dd:af:
d9:a2:5b:77:1f:20:3b:3d:70:fc:17:82:9e:57:e8:b5:cd:6b:
27:93:c0:16:2d:c0:ca:3e:a6:b5:4c:e0:7e:b9:6f:63:62:e0:
95:26:32:0c:5b:c1:bd:ac:74:06:9e:f6:34:3c:b1:ca:2f:67:
5f:58:8f:3d:67:57:88:10:7c:46:b6:27:d7:90:68:7e:df:43:
73:01:64:d9:14:73:b9:9b:8d:b6:1f:0c:9d:33:4c:ca:2a:c3:
93:5b:c4:f5:d7:7d:97:60:83:a2:64:37:fd:e9:a3:0c:cb:f0:
de:9f:c9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:43:18 2025 by rpki-client