Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/105419e6-6f5f-34df-aa75-286dd1800b6c.roa
File: 105419e6-6f5f-34df-aa75-286dd1800b6c.roa (raw, json)
Hash identifier: adB33GkZQQeBBCXZZpYkxLk9mwZvE82bVOWbZUTfCh4=
Subject key identifier: 44:3A:E8:7D:5A:46:9C:7D:3C:0E:30:CB:24:B0:7C:E1:77:8E:C1:B6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E8FDB22A791E7DBA94A14B300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/105419e6-6f5f-34df-aa75-286dd1800b6c.roa
Signing time: Wed 13 Jul 2022 12:00:00 +0000
ROA not before: Wed 13 Jul 2022 12:00:00 +0000
ROA not after: Thu 18 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.222.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:8f:db:22:a7:91:e7:db:a9:4a:14:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 13 12:00:00 2022 GMT
Not After : Aug 18 04:00:00 2022 GMT
Subject: CN=54f703c3-04b1-46dd-902c-cad9cfbaeca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:c1:d8:6e:f9:7a:b1:b4:e7:33:ff:ba:60:
da:6b:e6:d1:05:86:df:fe:da:02:52:7b:bc:64:a8:
ad:2d:a6:6a:b5:7d:3b:ee:48:c5:e1:f8:c5:a5:ac:
f5:33:84:cb:e5:2d:e2:64:c2:cc:37:5d:b4:df:d3:
a1:c8:8a:b4:c6:17:69:3e:2a:61:81:2d:d1:e6:af:
e8:aa:fd:6c:71:fc:fa:41:cc:e8:32:89:35:5f:8e:
9d:97:41:a1:fa:5e:74:ea:1f:d6:3a:bb:da:21:a9:
33:ba:3d:1e:a9:75:b5:f7:03:2a:01:75:ca:d4:e1:
b9:6e:fe:5e:7d:dc:a7:8a:92:8d:5d:fa:ae:90:34:
10:d4:3b:11:7d:6f:70:7f:2a:4d:31:81:a9:8e:8b:
0e:10:89:31:29:64:f5:44:4d:6c:e0:fb:e2:34:be:
e9:70:78:3e:13:5d:d1:88:11:ca:71:ac:45:cd:ed:
7f:7d:0e:30:82:fa:ba:6e:44:1a:f3:41:6a:4d:48:
b5:4f:8f:f2:8c:15:52:00:a7:bb:32:be:89:1b:2e:
40:1b:e3:f6:df:2d:2b:e7:48:a9:f2:54:6f:08:f5:
db:d2:bc:ae:ae:ff:1a:69:74:f8:97:e2:1b:10:92:
16:eb:0f:63:d7:00:d2:5a:a3:0d:4b:54:23:15:ab:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3A:E8:7D:5A:46:9C:7D:3C:0E:30:CB:24:B0:7C:E1:77:8E:C1:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/105419e6-6f5f-34df-aa75-286dd1800b6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.222.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:b6:0b:b9:43:5f:cf:36:3f:53:56:92:61:27:34:c7:c7:25:
7d:9e:93:5a:46:8e:88:fa:00:b7:79:5f:5b:d1:af:0d:e1:af:
64:b0:68:87:e4:67:54:c6:a1:14:24:94:da:44:57:f2:84:97:
d6:aa:08:70:76:80:4d:96:a8:ff:2e:d0:01:65:62:ce:d5:fa:
2a:3e:b7:ae:3e:84:f1:3e:d3:be:cf:3c:85:dc:ff:4f:b3:84:
55:76:61:4e:28:c3:59:65:28:d3:9f:2f:3c:03:bd:b2:82:5f:
fa:19:03:ce:b8:bf:01:b4:dc:ed:fd:f6:ab:d1:27:2a:30:bd:
00:9b:ef:ec:a8:10:84:bb:b9:d6:dd:47:b3:b3:f5:9c:cf:c2:
18:ba:d7:a6:69:05:32:c6:7e:66:51:b6:49:b9:36:fa:92:20:
f5:21:fe:e1:9f:56:77:0c:40:98:21:3b:92:2d:37:ec:a7:99:
31:89:da:cc:a6:26:5d:cf:3d:42:23:e1:60:8b:e6:79:18:95:
50:d4:11:c5:bb:fe:a4:18:fc:f6:a0:64:0e:8d:a0:c9:e1:3f:
40:52:d9:8c:fc:ec:4c:11:09:55:04:07:07:37:d7:55:10:63:
53:64:63:df:ff:1e:fe:36:c9:8b:a5:60:44:2f:cd:de:d8:0b:
6f:5d:82:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:14:14 2025 by rpki-client