Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f155c13-5103-3389-a295-bc4e25c2abf3.roa
File: 1f155c13-5103-3389-a295-bc4e25c2abf3.roa (raw, json)
Hash identifier: ZvNZ7A6T2juR7qvkBU9qSiQDG8SS9cvMt9AKaDsPKVU=
Subject key identifier: FB:27:04:42:AD:A7:A8:AA:2D:40:85:17:D7:34:67:55:F5:63:50:97
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6BA96D5FC63C83E4605AC940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f155c13-5103-3389-a295-bc4e25c2abf3.roa
Signing time: Thu 30 Dec 2021 05:00:00 +0000
ROA not before: Thu 30 Dec 2021 05:00:00 +0000
ROA not after: Thu 03 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.190.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6b:a9:6d:5f:c6:3c:83:e4:60:5a:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 05:00:00 2021 GMT
Not After : Feb 3 05:00:00 2022 GMT
Subject: CN=f0e9df7c-c421-4310-a538-0fed2b132d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:d2:c4:82:b2:8d:b6:d0:7c:20:49:af:61:
46:53:19:d9:b7:ca:1e:16:f1:c7:19:1d:34:2a:e4:
7a:1c:1a:d2:00:b7:75:b2:02:6e:43:e8:67:f4:ba:
a8:b6:85:f2:a2:af:19:c4:63:ca:ad:14:e4:ac:db:
4a:69:38:b8:2b:c8:e8:63:fb:d3:be:f8:2f:e4:b7:
12:e9:23:74:b8:e8:13:95:5f:7c:b8:be:b2:6c:d7:
e9:be:41:2f:0a:ea:54:ce:c4:75:25:dc:10:98:3b:
31:ab:cd:f6:15:f7:3f:fc:d5:57:d2:c2:01:a6:0f:
a5:e4:24:23:0b:ab:30:8e:e8:00:d5:16:64:07:a9:
66:16:f1:67:35:d2:fe:dc:3c:75:76:6b:83:d3:ae:
0c:e0:4d:2e:46:2d:e1:60:ff:87:94:6e:78:95:43:
52:6b:3f:c5:ac:57:9c:01:1c:31:bb:6c:6f:5c:6a:
f8:92:e0:2f:46:78:1d:11:ef:4b:05:37:81:2a:75:
9c:f9:78:ff:54:07:53:e6:79:2b:5a:8b:b1:eb:04:
25:b1:e5:39:5f:97:75:d9:f6:3c:ef:38:7f:b7:f1:
90:25:e8:17:19:17:22:b5:bb:fd:6c:68:f6:46:ff:
94:e4:82:ae:bb:10:3d:27:eb:57:69:b0:87:75:30:
5d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:27:04:42:AD:A7:A8:AA:2D:40:85:17:D7:34:67:55:F5:63:50:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f155c13-5103-3389-a295-bc4e25c2abf3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.190.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:0d:84:fc:27:c4:ef:fb:f6:ba:fd:a6:9a:d7:c3:d7:3c:fb:
4f:56:d4:5a:dd:8e:05:80:5a:c9:85:60:ef:36:a7:d3:93:7f:
c6:e9:35:31:71:5c:19:ac:57:e5:16:7b:f1:5b:0c:81:43:1d:
9b:b5:cb:d0:06:17:a2:10:03:42:c8:15:b7:27:d4:7e:ab:cd:
60:90:48:31:36:76:10:63:4d:8b:70:20:02:e2:29:f9:9b:9b:
70:10:b3:7c:ca:bf:f2:04:49:1e:68:48:3e:a0:d8:9e:fe:93:
50:7d:19:2b:8f:c2:da:e5:23:c7:c8:b9:b6:20:db:18:72:87:
cc:5d:48:ae:67:2d:16:73:e9:4d:2c:60:32:da:ad:ea:6c:f1:
50:7c:33:6c:a9:a1:64:c7:87:9f:f3:b3:ad:0f:73:d1:c2:e9:
cd:19:59:3a:bd:fc:b6:31:31:fc:db:9e:f1:9d:a1:38:2e:91:
70:75:64:6a:78:66:be:32:0a:e1:06:6b:6a:9c:68:64:66:06:
46:b8:60:32:a4:7c:7f:18:62:4d:1a:23:ac:8a:10:44:d2:99:
b4:87:1d:c2:2f:69:75:a4:67:ca:a9:2d:21:00:7d:af:a9:73:
24:03:db:19:b2:d5:39:95:04:d4:22:04:7f:d6:0a:b3:79:b2:
9f:53:7e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:00:11 2025 by rpki-client