Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b1ed1ef-b70a-3157-b6df-b08f5585412e.roa
File: 1b1ed1ef-b70a-3157-b6df-b08f5585412e.roa (raw, json)
Hash identifier: sChvztAe5FHkCyJzKBoc8Hmt9O4svGdVSQ+cCG54tAo=
Subject key identifier: E4:DE:E7:D3:1F:68:B6:69:35:1B:27:B4:F0:7B:27:3E:41:97:86:E9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D7D83507B5B738F9ACE442880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b1ed1ef-b70a-3157-b6df-b08f5585412e.roa
Signing time: Thu 07 Apr 2022 04:00:00 +0000
ROA not before: Thu 07 Apr 2022 04:00:00 +0000
ROA not after: Thu 12 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.254.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7d:83:50:7b:5b:73:8f:9a:ce:44:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 7 04:00:00 2022 GMT
Not After : May 12 04:00:00 2022 GMT
Subject: CN=d536e3b9-9664-4ce6-8b33-2a4d6c000a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fd:ed:5f:48:55:6f:b5:de:df:c4:21:d0:5c:
22:7a:a9:e5:93:ba:21:46:27:ea:3d:9d:df:2a:ca:
87:aa:72:20:d5:2c:23:c7:e1:52:ef:41:77:6e:73:
90:c5:44:4d:4e:e6:bf:75:26:0c:a6:a1:a5:9f:2c:
1c:fb:ef:cf:ae:4d:2f:44:33:12:14:a3:02:4c:10:
87:5f:fc:6d:45:2e:61:48:e9:8e:a5:eb:58:8e:fb:
62:32:0b:75:47:ce:fa:d4:a1:56:3d:41:e7:0e:90:
7a:39:7d:10:d5:28:bf:2d:a9:3f:15:78:09:51:ad:
3b:9e:43:5c:72:75:95:83:d6:34:c9:81:d2:e6:40:
3a:06:c2:34:fc:a3:bd:24:0a:5d:78:c7:2d:6d:f1:
74:86:45:fa:39:cf:08:1e:b0:48:91:0a:11:4d:32:
af:7f:ef:9e:b9:a7:c0:35:4f:c1:47:be:0e:9e:b0:
2b:e3:d6:46:86:7d:bb:1d:ab:7a:0f:59:c1:e3:40:
e5:a5:9e:b6:73:3a:fb:3d:3f:bf:00:6b:89:80:2e:
a1:e2:ce:41:12:f2:34:f1:74:a1:8d:df:64:82:df:
6f:81:49:0b:59:d8:48:4c:fa:c0:93:b5:12:84:44:
e0:fb:79:05:ad:db:b3:1a:61:11:b8:f6:b2:5d:f8:
1d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DE:E7:D3:1F:68:B6:69:35:1B:27:B4:F0:7B:27:3E:41:97:86:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b1ed1ef-b70a-3157-b6df-b08f5585412e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.254.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:0a:13:e8:56:3a:3f:5b:fe:70:b5:5f:ff:7b:c7:8c:4e:47:
7b:ec:55:ff:30:fd:fe:75:5c:eb:bd:4f:48:9b:54:a6:f1:82:
26:38:fe:0a:da:a6:5a:0a:07:40:4d:13:07:a9:0e:a6:c5:c7:
0d:2e:9b:a5:59:13:72:c5:25:3e:7a:fc:3a:77:4d:78:96:64:
c2:05:fb:31:c1:23:03:b7:e8:3f:e1:43:66:12:ef:a2:e1:10:
18:85:11:89:88:d8:d3:5d:fe:fe:fc:39:45:e0:5a:0f:20:3e:
a2:bd:60:d3:7c:53:80:a9:14:b4:8c:5b:32:3a:e7:6f:a4:c5:
c0:8b:be:ab:66:0a:0c:63:7c:99:24:18:db:29:65:f7:9b:6b:
3e:a2:11:e1:5e:6a:8d:ed:87:f6:20:22:9d:7c:f7:f7:20:9b:
c8:1d:32:e4:2f:c8:7c:80:65:45:1a:49:28:7f:8f:ef:9a:60:
f7:9f:38:97:3b:66:f0:d8:4f:9e:aa:17:36:9f:51:fd:b3:1e:
6a:55:f3:83:8b:5e:1d:ca:f5:c4:9b:77:da:3d:bf:6e:6d:23:
0a:3f:68:db:e2:65:5b:a9:3e:24:39:0b:e9:f9:f9:a9:6f:b9:
69:1b:e8:bc:91:85:35:91:36:b3:11:32:c9:53:02:d8:32:85:
c7:b8:3f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:30:10 2025 by rpki-client