Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ad21f52-8294-324f-8e4c-0f48524263e0.roa
File: 1ad21f52-8294-324f-8e4c-0f48524263e0.roa (raw, json)
Hash identifier: Bf6VqBgB+HcxdtL1u8HR93P4aYIq8d8SgOGSj8SDkiI=
Subject key identifier: 7C:DB:66:D9:A0:77:0A:BC:31:E8:87:06:DF:BA:41:24:A5:D7:70:22
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DB7707B91850377EC4AE9F920
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ad21f52-8294-324f-8e4c-0f48524263e0.roa
Signing time: Tue 26 Apr 2022 12:00:00 +0000
ROA not before: Tue 26 Apr 2022 12:00:00 +0000
ROA not after: Wed 01 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.250.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b7:70:7b:91:85:03:77:ec:4a:e9:f9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 26 12:00:00 2022 GMT
Not After : Jun 1 04:00:00 2022 GMT
Subject: CN=2fe366d8-f1e7-49f3-bc66-831190588ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e4:f6:87:6c:e0:96:e6:27:2b:22:f4:c9:46:
a4:e9:68:b2:83:fb:da:6b:d8:e7:57:d7:ec:e8:ab:
79:26:8d:08:08:74:19:e7:a2:5c:9b:81:27:a7:81:
a6:41:b8:2e:94:a5:0d:f4:39:01:7c:f7:15:a8:6e:
e7:d5:a1:74:f3:96:fa:c9:0a:fc:91:85:b8:3a:fa:
60:72:4b:71:49:d2:22:b6:4c:17:eb:ab:2d:19:38:
ec:a6:ab:23:f9:c0:57:87:47:42:cc:86:1e:d4:b2:
5d:b7:37:51:fa:ab:e0:84:cf:76:07:d1:e8:76:4b:
88:4c:fb:63:26:dd:3a:d6:9c:6b:b5:5a:ab:be:3b:
83:b3:6a:6a:0b:bd:5b:d6:37:14:9b:e1:68:bb:03:
ae:79:23:3f:07:26:2c:07:e8:ff:33:b5:24:66:da:
d5:95:bd:44:56:02:e0:05:2c:3e:12:d5:99:1a:f8:
a4:f1:67:8e:1c:72:f0:41:15:c7:48:22:6c:71:aa:
a2:ef:4d:e8:45:70:65:01:7f:c2:a6:04:fc:d2:df:
2c:74:41:17:ac:19:3f:10:ca:78:45:66:8f:b2:9d:
4c:93:f9:30:66:6d:b8:4c:4b:ab:b9:ce:50:04:fa:
67:1a:57:fe:b3:68:dd:d6:b5:7c:fa:b7:61:02:90:
ec:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DB:66:D9:A0:77:0A:BC:31:E8:87:06:DF:BA:41:24:A5:D7:70:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ad21f52-8294-324f-8e4c-0f48524263e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.250.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:db:3b:6c:44:d5:00:15:59:01:5c:d9:85:80:8f:6c:8a:8a:
f4:3b:02:da:40:86:c2:4a:a4:bd:68:7c:0e:f8:51:4f:24:ba:
eb:fd:40:55:14:13:b8:17:f9:7c:56:d8:03:2b:5e:20:7f:b6:
69:ab:43:d1:2f:e2:73:8e:d4:4a:1a:23:4f:c6:7d:f3:aa:06:
a0:cc:41:3c:c3:b1:23:c8:d8:e4:3e:d1:bb:35:6f:75:4d:50:
9b:0f:2c:01:57:3e:4f:6d:02:9a:7f:79:ea:a5:10:e9:a2:a2:
6c:64:df:f4:fe:81:8a:ea:5e:f1:df:f4:7e:67:73:94:a4:84:
95:d1:fc:b9:c8:9b:89:d4:30:1d:87:a0:b0:ee:38:8e:38:c5:
e8:c3:2b:ab:79:b5:d6:2c:ff:52:6a:14:fc:6c:60:d2:60:ba:
a0:19:e5:2d:c9:3f:ca:cf:83:9e:63:cc:74:bd:0b:a1:f8:41:
7e:f1:4e:c9:b2:8a:ab:0d:a1:50:c2:5d:af:fe:20:e9:dd:d3:
e7:2a:3c:57:46:8c:6a:a6:f0:52:f2:c5:23:84:47:2c:88:d0:
d5:3e:66:3f:97:b1:9f:39:0f:a7:db:86:3d:07:c4:aa:89:0d:
08:87:0b:8d:e9:1e:b2:23:d8:2d:d9:eb:e2:1d:e0:9b:bb:38:
06:f6:36:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:45:05 2025 by rpki-client