Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fe04cf7-6ec6-381d-9f7d-2f0ab6db9b30.roa
File: 0fe04cf7-6ec6-381d-9f7d-2f0ab6db9b30.roa (raw, json)
Hash identifier: J3lqBi/vztgnzT6M2rf+9XGRBgHLs1K0aL+K+cuLkTI=
Subject key identifier: 31:04:5F:24:D8:24:5E:28:37:ED:A7:DA:DC:FC:1C:98:5D:F5:61:52
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F052AC87CABF56EA2E2EAAE00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fe04cf7-6ec6-381d-9f7d-2f0ab6db9b30.roa
Signing time: Wed 24 Aug 2022 12:00:00 +0000
ROA not before: Wed 24 Aug 2022 12:00:00 +0000
ROA not after: Thu 29 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.198.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:05:2a:c8:7c:ab:f5:6e:a2:e2:ea:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 24 12:00:00 2022 GMT
Not After : Sep 29 04:00:00 2022 GMT
Subject: CN=146b2de8-49ec-4ae8-ae6d-d09776b8cd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ea:d7:47:72:ef:79:de:8e:b0:44:4b:58:ef:
0d:ca:69:0d:78:2d:b2:63:95:85:8e:22:2d:6f:e7:
43:bb:59:7c:71:ab:f5:63:d7:bc:ae:68:0c:e9:21:
a0:e7:42:58:32:00:6b:f9:a2:45:ec:dd:75:33:f0:
10:9f:0c:e8:f4:ac:34:c1:59:4d:ac:e1:3e:4c:16:
91:92:c7:8f:2c:54:b3:68:5b:e3:6d:77:d5:b7:24:
93:8c:b5:ab:e1:ea:37:71:3b:df:1a:3d:fe:09:66:
bc:d3:66:68:7a:72:26:76:06:28:39:6d:bc:86:36:
f9:78:8d:42:48:0d:13:7a:f8:e6:0b:b8:69:39:34:
50:71:fd:de:0b:3c:ab:df:98:6f:d4:1c:56:e8:e9:
74:69:7e:09:55:38:ba:89:ac:14:93:80:64:48:fc:
4b:6d:11:7f:75:23:8b:c6:b7:58:1a:46:09:93:3e:
28:b3:56:88:fa:03:bb:35:c2:4f:f1:33:f2:fe:5c:
13:a9:70:29:27:81:db:bb:33:13:22:2d:91:7d:f4:
7a:64:22:cb:a5:b3:bb:e6:3b:46:8b:04:21:6f:07:
d4:2d:27:98:6a:65:0d:8c:a2:21:68:d6:a3:4b:b9:
a4:f2:3a:10:ed:d3:bb:e3:f7:61:57:dc:b7:7d:2b:
92:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:04:5F:24:D8:24:5E:28:37:ED:A7:DA:DC:FC:1C:98:5D:F5:61:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fe04cf7-6ec6-381d-9f7d-2f0ab6db9b30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.198.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:b5:94:a0:a4:ab:18:20:e0:ee:07:12:50:09:dc:33:e4:1e:
d4:34:da:bc:0e:ad:72:97:e5:d1:a9:d6:bb:71:36:85:5a:5a:
7a:cb:4f:50:ee:da:51:ea:c9:74:28:e7:c8:b4:f4:4a:21:fb:
4d:9b:41:d2:d4:f7:42:99:cd:63:0b:88:11:fb:1e:01:d9:8a:
d6:16:a8:51:a5:60:37:fa:38:13:37:22:91:33:9e:cf:e0:49:
cd:ba:76:6e:21:66:e8:41:a4:a2:24:a5:5f:c1:7c:c2:24:fc:
a6:19:ed:ab:50:db:38:c2:3b:88:62:72:12:d3:b4:06:46:57:
2a:3c:e3:c7:2a:06:69:22:0a:7b:4a:2c:b8:58:a3:fc:30:2c:
5f:43:8a:77:4f:61:1c:c9:eb:7e:01:a5:34:0d:7c:5f:0e:c9:
ae:06:48:81:91:56:d2:98:4b:e5:fe:cc:fd:48:c8:49:f0:11:
88:80:79:4f:53:75:69:03:2d:34:57:ec:4b:70:be:22:03:13:
f0:22:0a:ec:5d:13:7b:8f:d0:46:ec:e1:2b:4a:ee:f7:d1:fe:
f7:04:47:3c:26:97:e7:95:34:aa:fc:e4:98:c1:93:6d:11:b2:
0c:78:71:62:69:27:eb:98:6d:8a:3f:e1:a3:8c:46:f7:ce:69:
a6:a8:3c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:30:39 2025 by rpki-client