Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e007f47-d860-37f8-b32a-09ba3ab7b954.roa
File: 0e007f47-d860-37f8-b32a-09ba3ab7b954.roa (raw, json)
Hash identifier: kaS8Myiq2bXx3i7+B9/ZMgFzjAUXN86zcO1lF63sw1A=
Subject key identifier: B4:73:D5:9D:CA:80:71:9D:0E:1F:AF:42:3D:C0:7E:49:52:FF:F7:09
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6BB821A3212C433BDFD09920
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e007f47-d860-37f8-b32a-09ba3ab7b954.roa
Signing time: Thu 30 Dec 2021 05:00:00 +0000
ROA not before: Thu 30 Dec 2021 05:00:00 +0000
ROA not after: Thu 03 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 15.254.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6b:b8:21:a3:21:2c:43:3b:df:d0:99:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 05:00:00 2021 GMT
Not After : Feb 3 05:00:00 2022 GMT
Subject: CN=b6afa80d-1704-457f-aa65-dd225147f1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:67:24:6f:30:9f:ea:1e:77:21:d2:6d:cc:79:
06:f5:ca:a3:31:e5:fc:07:9f:fa:ab:f9:c0:85:32:
82:80:11:87:0a:9c:11:ad:88:0b:77:d9:cd:67:cd:
fe:8f:ca:3c:c5:ec:3d:41:16:d4:1f:2a:f6:a7:90:
73:af:fc:40:bd:bb:a8:7b:17:96:66:b5:e9:76:a0:
a1:2d:23:62:04:40:3d:7c:d3:2d:36:fd:92:dd:5a:
bf:9c:cb:39:51:fd:a6:c8:fc:4c:25:19:71:6c:06:
71:1c:95:96:ed:06:76:6e:37:67:b7:3c:ab:9d:c5:
02:1e:3d:84:97:a3:61:21:86:70:82:63:c6:5c:70:
ee:4f:42:90:5e:5b:4e:d1:80:03:92:2c:51:29:a5:
f6:f4:dd:24:ec:14:5d:fa:e3:e8:35:0f:a2:c5:f5:
c2:27:7b:3e:05:fc:c2:d2:ff:a3:be:de:f7:75:83:
d9:80:c4:a0:29:cd:e6:11:26:96:23:cc:0b:f6:0b:
4a:04:f5:f6:fe:76:a4:fe:4e:4e:d1:08:00:8c:99:
44:3f:b2:36:c9:08:3d:d2:73:78:56:f7:88:4e:1a:
27:b9:91:29:6c:ef:cb:c9:42:01:92:f9:af:01:3b:
3f:79:7a:05:16:9d:56:98:c1:79:9d:24:69:50:23:
3d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:73:D5:9D:CA:80:71:9D:0E:1F:AF:42:3D:C0:7E:49:52:FF:F7:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e007f47-d860-37f8-b32a-09ba3ab7b954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.254.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:2b:f1:e5:2d:87:03:e6:aa:12:26:65:4e:8c:1a:89:6c:88:
8b:44:19:49:80:f2:09:ff:8e:96:b1:2c:a2:fd:1d:dc:68:b9:
b4:e7:66:8d:95:0d:f3:b0:4e:2c:71:68:fb:57:3c:14:7e:26:
97:c0:e7:8c:e9:bc:fd:92:95:9b:52:df:6a:67:9f:cb:2b:54:
01:78:6f:6c:64:55:10:02:a9:b9:7a:d7:60:9c:10:f7:c6:5f:
91:51:e2:6d:74:3d:2f:4d:31:df:7b:36:35:bf:3e:e4:a0:ca:
29:35:df:b7:1c:37:5e:31:6f:02:0f:a4:ff:e2:49:8a:6e:27:
cf:b8:be:58:76:90:16:0d:3b:28:d5:d4:71:92:16:41:ef:cf:
e6:83:bc:cb:04:bc:d4:67:a0:19:06:b6:3f:9c:c2:7e:84:2b:
0b:d1:cd:e4:64:1e:63:5a:ae:40:8f:44:a3:42:83:79:68:32:
6c:bc:be:fa:ba:c2:d3:79:bf:79:1b:99:71:1f:12:41:e3:9e:
72:da:d5:24:a1:42:9a:b7:56:fa:57:21:0f:a9:99:86:f8:52:
58:a4:04:64:62:be:94:ca:ba:2e:68:fe:73:43:9b:15:e4:7f:
f3:59:e3:b9:7b:7b:dc:67:5b:3c:ba:2c:46:39:20:0a:4b:f0:
d1:8c:3f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:05:50 2025 by rpki-client