Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15c1111f-4dae-3373-892d-ece6451fdefb.roa
File: 15c1111f-4dae-3373-892d-ece6451fdefb.roa (raw, json)
Hash identifier: CMhi5p+kg2biIXQNkosljbxBHMPBw5fOIdaaQ/nHmJA=
Subject key identifier: EF:44:25:24:95:0D:CD:B1:DF:0B:3B:17:91:6E:E3:D8:65:2F:DD:03
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CB2EFB3B3CDAB565329C87100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15c1111f-4dae-3373-892d-ece6451fdefb.roa
Signing time: Mon 24 Jan 2022 05:00:00 +0000
ROA not before: Mon 24 Jan 2022 05:00:00 +0000
ROA not after: Mon 28 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 15.251.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:b2:ef:b3:b3:cd:ab:56:53:29:c8:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 24 05:00:00 2022 GMT
Not After : Feb 28 05:00:00 2022 GMT
Subject: CN=66b728b9-31d9-4cdc-901b-50adc824d4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7f:25:95:d6:8e:6b:51:b7:89:04:cf:1e:bd:
0f:93:ff:07:ef:35:2a:80:69:66:41:13:28:34:fd:
f5:29:00:84:33:5d:fa:01:da:b9:61:32:b0:c1:9f:
7b:b6:96:d2:f9:e6:0b:12:93:99:1c:85:03:71:b8:
48:70:1a:af:c5:fe:fe:57:4d:7d:4d:7e:e7:a3:c6:
72:72:5d:01:84:ac:a7:97:78:ec:34:e6:3e:fd:33:
79:56:1d:07:50:52:66:42:7a:d9:3a:57:6a:55:d9:
87:c8:27:8e:bc:75:94:0e:16:09:3f:14:14:59:bb:
b9:9e:8f:04:4c:ea:8f:0e:94:4b:25:1d:17:e4:72:
ff:82:a5:8a:8c:02:a0:14:65:77:28:3b:72:30:5d:
cf:92:29:d0:11:1c:6e:34:4c:a1:23:d4:55:32:8f:
ba:b1:00:2d:ec:12:b8:b6:a1:c4:08:98:71:9d:15:
f3:72:48:1d:7c:28:df:b8:af:81:fd:1d:be:42:0d:
82:dd:ec:bf:4c:c3:2f:a8:1c:76:77:7a:9e:d8:45:
e6:16:d4:18:d5:74:0d:d3:32:78:eb:46:5a:a1:10:
24:e1:13:e5:dc:69:c1:34:63:23:60:67:99:a5:55:
5d:3d:4c:81:62:2a:c2:6f:63:b2:ad:eb:d0:ab:12:
59:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:44:25:24:95:0D:CD:B1:DF:0B:3B:17:91:6E:E3:D8:65:2F:DD:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15c1111f-4dae-3373-892d-ece6451fdefb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.251.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:f6:c4:5b:7c:ef:9f:84:7a:c5:a7:4d:3e:00:03:5b:32:6d:
85:cd:af:9b:14:80:78:5b:1b:74:b0:8c:76:c5:40:d6:a1:98:
3f:e7:76:37:48:c9:1e:38:5b:00:30:8d:d8:a2:ed:cf:c9:53:
d5:44:b8:05:83:ab:3f:99:bc:6c:bb:48:4b:87:1b:d1:ea:7c:
13:55:57:a9:b8:68:ee:f4:d9:ec:50:25:9a:f9:9b:82:ec:5b:
66:eb:41:36:ff:bd:92:30:ea:4f:fa:ee:28:1f:2e:45:d8:f9:
ae:87:bc:81:14:6b:c6:45:ff:51:ad:1c:ca:fa:d7:81:3e:d6:
1a:0c:6a:ef:6f:c9:2b:35:f8:d3:d5:87:0f:1a:15:cf:f0:53:
fb:47:06:dd:0a:b6:56:a5:82:d0:f5:13:67:6c:cb:7e:ba:62:
a5:68:35:7f:e1:5a:e6:c3:15:9a:f1:fc:f1:85:b0:39:76:b5:
e7:ce:af:3f:fe:57:9e:74:88:d1:09:1c:25:8b:34:93:b6:5f:
90:a4:64:61:c8:19:62:9b:4a:e2:2c:af:94:d1:cb:8b:e4:ef:
22:bd:1d:51:ba:06:52:67:40:ab:3e:21:05:5a:58:b3:48:b4:
7a:8f:75:41:be:5a:95:7c:e2:53:80:11:4e:ff:65:6f:a7:76:
c6:fe:61:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:13:44 2025 by rpki-client