Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1dfd1e9b-d964-3b46-bc69-4c184c89c5be.roa
File: 1dfd1e9b-d964-3b46-bc69-4c184c89c5be.roa (raw, json)
Hash identifier: apEKRyaeqxDGwnPlItAhCX0jjITEds7DxW5q+pOCb5c=
Subject key identifier: 70:68:B4:90:48:6E:E7:6A:02:8B:28:50:6A:86:D5:83:7C:E6:E5:F6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6BA98D38F9718045E16C5740
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1dfd1e9b-d964-3b46-bc69-4c184c89c5be.roa
Signing time: Thu 30 Dec 2021 05:00:00 +0000
ROA not before: Thu 30 Dec 2021 05:00:00 +0000
ROA not after: Thu 03 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6b:a9:8d:38:f9:71:80:45:e1:6c:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 05:00:00 2021 GMT
Not After : Feb 3 05:00:00 2022 GMT
Subject: CN=e7a45200-8b6f-4511-bfb7-91a5d81d489a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a3:4a:d0:ff:3f:23:35:4e:56:fa:b1:28:0c:
cd:4f:f5:aa:d3:75:d5:08:1a:a7:8e:e3:6a:47:2c:
48:db:31:55:70:1d:a7:9b:58:93:07:6d:d2:96:56:
ff:3e:a7:51:56:9b:34:5f:90:3c:74:67:17:40:cd:
c1:8a:57:f3:81:de:81:eb:cd:d4:65:25:16:45:21:
5e:fc:e3:7d:3b:2d:7c:8d:7e:34:25:51:8a:46:dc:
59:28:7d:0c:19:57:24:c6:56:a9:68:d9:72:18:51:
3c:50:fb:31:f8:27:26:78:3c:04:3c:8b:5c:d6:66:
c5:d0:5a:6e:45:51:53:ea:6c:92:3f:7f:42:e7:90:
67:16:71:99:d7:42:5c:65:f2:d1:a0:73:79:68:94:
1f:7c:05:1a:47:40:94:72:1d:7f:f3:a1:f8:92:5f:
63:42:da:48:a7:5b:d3:08:0a:58:0c:db:08:3c:e7:
36:36:8f:e3:f7:b5:d6:05:28:a1:2d:23:f7:29:3d:
7e:0d:cb:73:47:e2:a4:c4:a4:5f:72:5b:c0:98:1a:
80:b3:3e:84:50:9b:f4:7c:ea:51:3d:5f:c4:ea:cc:
37:d1:f9:b7:09:75:ab:6f:c6:60:54:54:75:87:83:
61:ed:08:75:98:5c:6f:74:72:f1:c3:77:cf:eb:60:
62:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:68:B4:90:48:6E:E7:6A:02:8B:28:50:6A:86:D5:83:7C:E6:E5:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1dfd1e9b-d964-3b46-bc69-4c184c89c5be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:af:a2:e4:45:8c:2e:e7:13:24:14:90:11:24:6f:72:09:89:
5f:24:8b:4a:9f:a3:9c:77:51:3f:fd:ed:6c:cc:bb:e6:dc:85:
89:6b:16:28:3e:ad:aa:85:6f:58:26:e9:12:f7:92:68:41:f9:
a0:5e:19:50:bb:e7:d7:58:e0:2f:27:04:80:c6:ff:9e:58:a2:
0b:34:1b:08:7d:ae:24:fc:ce:f7:39:12:ea:51:ae:05:b5:32:
1e:80:b9:1e:7e:e7:70:8d:fe:84:25:2b:45:b6:72:3e:e3:a1:
dc:2f:28:c3:4b:7e:3e:a7:b1:ae:89:16:79:2e:a5:24:40:a0:
12:e3:86:5f:ca:55:69:f7:56:7a:fd:99:89:62:b9:4f:19:50:
0a:76:4d:89:3f:47:04:2e:ac:39:d9:b3:1b:ba:f4:ad:50:a9:
a4:8b:f9:36:5a:16:d2:09:e8:e3:51:9e:f3:ef:ed:24:cd:d3:
ea:2a:16:95:1a:cf:23:2e:55:a2:db:08:a3:33:c4:45:2e:b8:
c1:e8:a1:a3:7b:66:2c:dd:59:f0:5a:ab:65:1a:62:8e:36:88:
23:ab:e8:4f:fb:78:b7:3a:36:8c:f9:05:b8:51:3a:73:47:3e:
2f:f5:86:72:03:68:f4:2b:22:f2:f2:7c:e5:2e:5e:6b:f9:83:
ff:aa:e4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:30:33 2025 by rpki-client