Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e951724-a9f9-3788-b62a-50ecbb769c4c.roa
File: 1e951724-a9f9-3788-b62a-50ecbb769c4c.roa (raw, json)
Hash identifier: YND+i21TnYpUswKh8wYqzq0gV95EgCk5RDoMcAvzSIY=
Subject key identifier: E9:B1:FC:AA:C0:AC:E3:19:FE:F3:6B:85:23:C8:AC:28:03:C8:65:5F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD8BA9A665C5F04DEA779D380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e951724-a9f9-3788-b62a-50ecbb769c4c.roa
Signing time: Tue 08 Nov 2022 12:00:00 +0000
ROA not before: Tue 08 Nov 2022 12:00:00 +0000
ROA not after: Wed 14 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.245.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d8:ba:9a:66:5c:5f:04:de:a7:79:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 8 12:00:00 2022 GMT
Not After : Dec 14 05:00:00 2022 GMT
Subject: CN=3348e6bc-3bb2-4250-bd23-213f21a5e801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dd:86:f6:1f:b0:58:58:92:ca:41:a8:65:08:
e8:af:cc:49:95:09:92:ac:3f:5a:87:80:06:2f:5a:
c3:46:b0:23:91:28:0d:f2:8f:97:e5:cb:48:5c:1b:
d0:c2:f9:1f:60:37:ff:0c:01:81:3d:a2:4d:cf:26:
d5:85:3e:ff:fc:76:8a:5d:f2:a2:99:71:91:7a:d5:
1a:6b:52:74:f0:f9:58:05:ad:93:0d:4c:c5:93:2b:
47:ab:aa:76:1a:b1:e0:ec:7a:62:14:9b:24:9f:97:
77:d8:67:e6:51:75:72:3f:af:77:ea:88:2a:cd:ff:
b0:62:78:59:8a:46:7b:62:c0:28:6a:08:16:aa:f3:
78:56:20:e7:37:27:81:a0:41:c0:fb:7b:42:54:37:
79:c7:8a:c8:60:a4:a1:87:67:05:f8:fc:cb:e8:8b:
17:0c:eb:f7:48:9a:71:ce:ad:16:e5:f9:b6:40:40:
5e:6c:08:4a:57:bb:a3:0e:6e:a7:94:70:4e:17:33:
b0:10:d0:0a:82:59:93:09:f7:22:03:69:9f:a8:31:
27:a7:31:14:87:d4:3c:2c:cd:97:9a:77:91:0b:98:
88:2a:14:ff:a4:19:60:44:92:92:65:81:54:ea:92:
00:5a:91:5e:fa:ad:28:f7:f7:01:2b:42:16:d0:f4:
f3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B1:FC:AA:C0:AC:E3:19:FE:F3:6B:85:23:C8:AC:28:03:C8:65:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e951724-a9f9-3788-b62a-50ecbb769c4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.245.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:39:27:86:9d:64:f7:ab:90:81:2c:0d:84:8c:dc:8d:72:c5:
90:de:ff:8b:58:7e:29:f8:db:32:6a:d1:84:74:92:3e:b9:14:
ed:3e:da:c2:2f:17:73:24:e9:6a:75:9a:34:6f:d6:0d:13:40:
80:39:b6:1a:f0:e9:47:42:2d:5d:15:ac:5b:9a:45:15:5a:08:
b9:1e:3f:98:12:90:a3:d7:72:17:2e:6e:bb:34:b0:dc:1e:ce:
3a:a8:12:85:f3:a8:57:82:d8:d6:87:68:c5:94:c9:23:70:85:
60:66:ee:4a:98:3e:b6:8a:bc:0c:46:8f:22:91:1e:8d:a4:8d:
50:ea:db:31:88:ad:02:04:d1:cb:bc:c1:da:1a:05:60:3d:6c:
06:8a:67:e8:60:aa:60:ee:2c:49:99:ce:33:97:85:01:82:e3:
54:ad:a6:48:51:20:41:10:e5:da:12:e0:5e:cb:7d:2d:b0:93:
55:8c:8f:1c:ea:a7:53:56:10:e2:c8:44:8e:18:e8:31:b4:64:
8a:57:98:1e:45:45:b9:22:9f:bb:b7:fb:de:4e:dd:bb:3a:11:
f3:c4:3b:9c:e5:96:ba:99:d8:32:20:ad:81:9f:40:ef:84:90:
dd:d6:18:30:53:a7:77:92:b9:2c:4b:2c:f4:7d:99:4b:b9:b7:
54:b7:73:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:56:13 2025 by rpki-client