Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f1203ae-db61-3eef-b126-c4766d9fe7dc.roa
File: 0f1203ae-db61-3eef-b126-c4766d9fe7dc.roa (raw, json)
Hash identifier: U2Jh3bKfiKqq0vcRbDIJjHbmftI7VRiVmlMRps8obSE=
Subject key identifier: 0A:8C:47:FB:5C:84:75:5F:AB:23:BA:F0:4B:01:BB:B2:00:34:BC:4B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E19F6D73F259D161C878C8000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f1203ae-db61-3eef-b126-c4766d9fe7dc.roa
Signing time: Wed 01 Jun 2022 12:00:00 +0000
ROA not before: Wed 01 Jun 2022 12:00:00 +0000
ROA not after: Thu 07 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.236.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:19:f6:d7:3f:25:9d:16:1c:87:8c:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 1 12:00:00 2022 GMT
Not After : Jul 7 04:00:00 2022 GMT
Subject: CN=080ffa45-10c8-44aa-bba6-2200f947f2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cf:9e:f4:66:74:24:79:bd:27:75:62:52:2d:
1a:f4:23:79:ac:ae:10:b4:48:30:03:89:da:7f:23:
d2:81:08:60:ef:80:1a:67:fd:dc:d6:93:c9:c8:de:
40:43:78:f3:af:d6:99:1a:9e:18:ea:aa:84:9c:d1:
80:dc:ce:09:7f:56:76:ae:c3:89:77:e5:4f:93:7e:
c9:e5:b4:ce:7f:cb:af:48:2c:f2:0d:13:1d:32:60:
42:cd:0f:61:44:f3:e8:78:6c:fb:1d:cf:bd:44:7b:
80:2c:96:6d:72:45:0b:9c:2c:4e:5e:f9:6f:08:39:
f7:96:f7:92:22:a7:36:9e:05:16:36:8f:7c:e1:11:
50:91:55:78:c5:b9:fa:8f:d0:2a:50:70:bd:2b:0a:
a3:50:6f:51:07:00:d3:e3:1c:76:b6:06:ec:d0:f6:
81:ff:f6:06:80:41:9f:d6:74:51:82:76:30:5d:37:
7e:9c:7a:47:33:f2:7f:ba:e4:05:be:b6:88:45:52:
5e:a7:35:6d:29:49:a7:75:f7:de:df:54:ee:f7:c7:
d5:ac:6b:3a:0b:5a:14:b3:16:f4:70:b6:17:a9:e5:
fe:0f:80:b6:09:4f:50:1a:bf:c1:ea:4d:24:f0:82:
a7:48:55:1f:e7:15:88:cb:d3:f5:3a:c1:9a:b9:cb:
d9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8C:47:FB:5C:84:75:5F:AB:23:BA:F0:4B:01:BB:B2:00:34:BC:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f1203ae-db61-3eef-b126-c4766d9fe7dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.236.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:fc:ec:eb:17:1a:90:b1:19:ef:0a:32:c5:cb:c8:78:12:db:
36:0d:03:54:2c:80:c6:8e:cc:25:05:8f:06:3e:56:99:28:7d:
48:e3:58:e4:48:79:c8:9b:d0:cd:d0:5a:a9:8f:b0:ed:74:2f:
ed:ad:f8:94:d6:20:0d:05:02:50:6f:4e:43:96:a0:6e:07:bb:
35:1e:e8:76:ad:85:95:99:d1:21:e5:0e:40:eb:af:3b:6c:bc:
77:50:0d:5f:3a:e8:45:10:f1:b0:18:ca:c6:73:f1:f8:ca:2e:
24:57:33:04:37:56:b7:4a:19:d0:68:ec:17:e6:6e:6f:61:76:
e2:df:39:2f:6a:e0:96:e1:5b:8b:b9:e0:9b:a9:b3:b0:d5:26:
d1:c1:8e:c4:99:a4:9b:a5:30:ad:6d:5d:7c:a8:09:4e:a3:ed:
fa:89:4a:6f:16:fa:49:63:c8:08:ea:89:ad:e9:0e:84:c6:b4:
e5:fe:a1:c9:78:f6:42:61:94:3f:04:0c:3d:49:ee:1d:a8:c8:
45:57:1d:f4:f0:69:75:cc:68:a3:34:b6:05:2a:5f:06:93:d5:
f0:45:7a:16:13:cf:52:12:92:bc:9c:e9:de:0b:72:6e:25:46:
2b:59:c6:3f:23:4b:97:a5:56:87:4b:d7:06:87:41:db:4a:75:
31:ce:d6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:07:26 2025 by rpki-client