Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/268c2db1-dded-353e-a458-2d35a2f603c2.roa
File: 268c2db1-dded-353e-a458-2d35a2f603c2.roa (raw, json)
Hash identifier: PlSM2piROC+Gp5crEDzTrud+muvtQkT4ptWS1JCSK8Y=
Subject key identifier: F2:AE:5C:7A:22:86:DE:EC:9D:F2:21:37:1D:FB:90:12:1D:80:2F:A0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E05B1BDB438803C713DEF9700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/268c2db1-dded-353e-a458-2d35a2f603c2.roa
Signing time: Tue 24 May 2022 12:00:00 +0000
ROA not before: Tue 24 May 2022 12:00:00 +0000
ROA not after: Wed 29 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.179.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:05:b1:bd:b4:38:80:3c:71:3d:ef:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 24 12:00:00 2022 GMT
Not After : Jun 29 04:00:00 2022 GMT
Subject: CN=1f08c16e-fcfc-4709-9698-4cc7f16b885f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f2:18:9b:e1:5d:72:03:84:e2:13:d2:4c:56:
c2:10:40:77:4d:a1:d6:5e:d1:26:b3:9b:ab:80:c9:
bd:b3:b6:cf:29:f3:ba:69:f4:63:17:b0:8d:36:ac:
ba:10:c7:4d:37:4b:2e:90:1e:b1:7e:96:3b:4b:7c:
52:d8:07:f6:f2:ce:54:a6:96:57:43:54:b1:2f:63:
98:75:1e:33:0e:34:f4:c5:5b:9a:19:dc:ee:90:92:
9a:0e:54:de:bb:eb:07:48:0a:17:b8:fd:33:86:03:
e5:10:60:15:4f:3f:62:60:de:a6:71:7f:06:96:5f:
ff:df:38:b9:d0:50:71:ff:95:23:68:e9:4c:bf:35:
03:63:8b:32:32:50:a7:46:83:78:4d:76:3f:dc:0c:
cc:f4:23:ce:36:77:77:26:57:99:3d:51:6d:6d:df:
18:ee:13:67:91:c3:fb:9f:a0:18:2c:e6:6a:b4:e7:
39:a0:29:88:3f:ec:da:9b:c4:fd:e0:88:fd:60:ba:
d9:57:fb:31:4e:81:ad:bd:83:af:e0:6c:90:59:92:
65:8a:1b:31:26:55:33:f5:3d:2b:81:b0:4d:86:49:
d5:b5:02:aa:37:68:2c:a3:b3:3d:95:cc:41:e2:20:
fb:ad:f0:82:de:44:37:e8:d1:27:bb:5a:50:81:49:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AE:5C:7A:22:86:DE:EC:9D:F2:21:37:1D:FB:90:12:1D:80:2F:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/268c2db1-dded-353e-a458-2d35a2f603c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.179.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:31:75:fa:75:0e:7e:d5:39:24:c9:93:c0:44:9f:f1:9d:7f:
70:6c:7e:d0:42:a3:24:92:02:36:64:e7:bc:92:6f:7c:06:62:
1c:57:6c:2a:2e:61:8a:f7:f0:5d:d9:a9:99:9a:e0:d7:49:d6:
ae:40:5d:a8:4b:82:15:3c:1c:00:af:8f:54:f1:22:04:c3:54:
fc:c3:b5:f1:a6:75:de:d5:19:15:f4:90:fb:95:47:77:d1:87:
05:da:1d:07:a0:f5:b6:3e:53:96:54:8c:f7:21:bf:85:40:2b:
14:c2:15:19:d3:24:8a:13:17:6e:e7:a3:07:59:b0:66:96:9b:
a9:a0:29:a0:86:bf:62:25:75:c8:e4:bf:73:65:d6:57:0d:fa:
fe:cd:88:33:0f:36:5a:52:7c:74:af:8c:9c:fd:bb:06:8c:c3:
b3:a8:e4:28:15:61:9e:19:31:02:93:8f:87:07:b3:30:fc:66:
2a:6d:81:b3:33:e2:2a:7f:e5:c6:d0:ed:0e:ed:4c:8d:c1:dd:
72:c1:3c:f4:04:79:30:64:14:2c:60:da:60:63:3d:fc:6f:af:
9c:95:ec:69:94:b3:b2:08:4f:f5:d5:7b:67:f4:d2:bb:c6:53:
9c:cf:61:3d:1e:5c:15:81:11:da:98:b8:e0:96:d7:db:71:58:
38:a7:f0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:36:57 2025 by rpki-client