Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1181f5a7-edaa-3ff5-a27f-4832a6baf315.roa
File: 1181f5a7-edaa-3ff5-a27f-4832a6baf315.roa (raw, json)
Hash identifier: bPUY3e1C9PrYZSgQ9soDlAFrIdDPDDXvlXK4IeYh0a4=
Subject key identifier: B3:AB:09:47:D3:83:E4:CF:83:9A:AF:2D:9B:A5:DB:DB:ED:F7:49:15
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FB5B719A50855F73C536AEBC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1181f5a7-edaa-3ff5-a27f-4832a6baf315.roa
Signing time: Wed 26 Oct 2022 12:00:00 +0000
ROA not before: Wed 26 Oct 2022 12:00:00 +0000
ROA not after: Thu 01 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.209.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b5:b7:19:a5:08:55:f7:3c:53:6a:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 26 12:00:00 2022 GMT
Not After : Dec 1 05:00:00 2022 GMT
Subject: CN=2f3c7d1b-2492-4e20-9054-16024b82c0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5f:88:43:8d:09:00:4a:1c:f7:c7:ee:d2:b2:
66:08:e4:c1:c5:bb:c9:32:75:89:d3:0c:c5:3a:2a:
d1:e4:3b:b0:da:ab:bb:ed:8d:b7:c5:b4:5c:87:50:
ca:80:17:aa:19:44:2c:7e:7b:32:e3:ee:fa:97:c2:
69:5b:db:af:19:94:2b:ae:bd:a6:8a:5b:c4:f6:65:
91:d0:7b:8e:09:a9:4e:e5:15:d0:af:b0:fe:96:87:
13:78:0a:22:e2:34:41:6f:67:70:33:c1:82:9f:ad:
1d:cf:ca:28:ff:2d:5f:f5:42:25:a9:80:30:05:f8:
11:b2:d7:4e:69:bb:66:ab:83:b6:09:73:14:44:01:
6b:3e:7e:e4:5c:6c:b1:1e:93:cc:ff:95:da:d8:53:
4a:f6:fa:6b:78:a2:08:47:d2:56:0c:82:27:61:26:
30:5d:3c:1b:11:2c:95:ab:6d:1c:74:0e:98:5c:10:
f1:99:d6:78:d2:b7:2a:a4:1c:6b:0e:b0:45:92:bb:
6f:35:52:16:fd:2a:81:b3:0b:85:23:ca:95:ea:0b:
d6:30:ed:c2:5d:5c:05:b2:6c:39:72:b0:75:be:ff:
d5:b5:c7:0f:a7:b5:0a:ad:ec:67:28:2f:ec:43:7f:
02:b6:f6:58:ca:f8:4a:9d:16:87:f4:54:20:ff:b4:
0a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AB:09:47:D3:83:E4:CF:83:9A:AF:2D:9B:A5:DB:DB:ED:F7:49:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1181f5a7-edaa-3ff5-a27f-4832a6baf315.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.209.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:4a:54:ce:b9:26:e1:43:b5:14:fc:30:6f:f6:b0:8c:31:ae:
e4:29:a1:d1:c5:3e:61:53:17:75:30:03:56:86:d2:82:ec:d4:
02:cc:f7:fd:00:96:87:5b:ea:bc:19:4f:98:3c:da:58:2a:53:
26:db:67:2e:ad:de:c5:53:77:ea:5a:a7:0a:3e:8e:4d:7d:36:
23:26:8a:b5:66:94:c0:a3:ba:a2:bb:4f:5e:f9:de:04:93:fa:
51:8a:64:be:ab:08:f1:b4:ab:67:e3:3b:d0:e3:35:30:6a:0a:
76:72:ae:a9:ca:cf:f0:ad:9f:b0:41:44:20:4d:99:65:81:55:
76:06:44:3c:b2:4a:93:c9:a7:e9:fb:b8:c2:5f:67:19:ee:f6:
65:ab:e4:bf:76:f2:63:0e:cc:0d:9a:3d:36:ff:e0:cd:0f:a0:
c8:34:51:84:db:3d:52:8a:50:0c:e1:6b:b6:81:ce:df:c0:17:
1b:4a:cc:58:5b:8f:09:ea:1e:3d:05:2e:f5:97:bd:f7:4a:09:
58:8d:5b:97:10:d9:ed:46:1f:0f:bf:49:ea:75:13:87:b5:5e:
68:33:2f:49:f6:fc:a5:84:e0:e3:12:1e:ef:70:b5:90:8d:52:
13:6d:7a:a2:01:b8:72:3f:2f:c7:0c:72:f1:fc:66:85:9b:43:
b3:f6:ab:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:24:26 2025 by rpki-client