Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/28b19c38-ef6a-3342-8e02-d949d22d59a4.roa
File: 28b19c38-ef6a-3342-8e02-d949d22d59a4.roa (raw, json)
Hash identifier: sn696D9adahSRODOHAeyqq2HHRw3TN3pqQHGODNkPps=
Subject key identifier: 84:95:21:CF:1C:3A:69:B2:B2:C1:52:17:BC:AB:E7:EE:C2:0F:BC:46
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FBFA966BE98D858F482DD9A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/28b19c38-ef6a-3342-8e02-d949d22d59a4.roa
Signing time: Sun 30 Oct 2022 12:00:00 +0000
ROA not before: Sun 30 Oct 2022 12:00:00 +0000
ROA not after: Mon 05 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.251.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:bf:a9:66:be:98:d8:58:f4:82:dd:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 30 12:00:00 2022 GMT
Not After : Dec 5 05:00:00 2022 GMT
Subject: CN=f0b8b9a3-2575-4ba1-993a-ec66eaf02e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:6f:6d:83:f0:d3:6a:65:41:4a:00:97:46:
f2:85:f0:d6:17:61:ca:7c:25:4c:66:7f:6b:2b:e2:
5d:a0:3d:39:f6:ef:5c:43:03:c9:b4:57:af:2e:6e:
bc:64:54:ba:c1:33:75:91:08:c8:63:a3:a6:12:b4:
49:8f:ca:ba:cc:2d:f0:b2:08:c0:f9:19:8f:8a:b7:
b0:ce:54:fd:8c:85:d6:79:db:e6:06:98:66:b9:2d:
b8:82:60:27:59:cb:cd:a6:9d:68:52:23:96:5d:9c:
ab:e5:ee:97:90:ba:37:6f:1d:e1:ca:36:6c:ea:00:
d4:6e:80:2a:b2:88:d1:ee:74:ed:71:a3:46:44:8c:
52:dc:14:30:05:c4:b0:4e:bf:fe:0c:57:b8:3f:13:
1c:d2:ef:fa:58:13:b1:f2:8b:e8:7d:ba:f8:36:1d:
2f:68:89:61:de:4c:7f:c0:fa:9b:c3:3c:92:46:6e:
70:c6:0a:3b:a7:61:be:05:19:d9:c7:cd:57:77:d6:
c7:0b:4e:6a:d7:29:b2:93:97:1b:2c:35:31:bf:0e:
3f:93:3b:54:b1:69:77:5c:a7:bc:79:6d:9b:69:98:
bd:7b:cf:d4:2b:f5:9e:d9:a4:a8:7d:8e:e3:e8:27:
44:7a:e1:78:c0:43:4d:4b:cb:fb:46:d1:53:0e:4d:
d1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:95:21:CF:1C:3A:69:B2:B2:C1:52:17:BC:AB:E7:EE:C2:0F:BC:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/28b19c38-ef6a-3342-8e02-d949d22d59a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.251.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:19:25:c6:ea:80:6a:65:cf:f8:67:70:7a:de:6d:8c:91:7f:
51:42:c9:62:2a:35:8c:a7:dd:15:bc:db:1b:84:74:f2:6a:c2:
a2:6b:ce:57:1d:be:a8:29:26:0f:09:ff:10:f8:e3:a3:78:94:
54:96:3c:02:42:e7:43:ea:b9:2b:49:84:7a:88:41:03:eb:7b:
cf:c9:25:96:e5:d9:36:d6:cf:a9:39:1c:76:a5:e9:4c:7a:bb:
2f:e1:3e:72:3c:74:a4:36:af:df:81:58:21:a1:05:e1:c7:d9:
18:61:e3:a9:21:8c:e4:33:93:ab:ed:c0:cf:ce:ca:c2:46:27:
08:e5:39:5f:58:a8:b2:2d:a1:a4:a9:5f:79:a9:e3:69:0e:9d:
06:0f:86:43:44:da:e8:a2:c1:05:ac:c0:25:b9:b9:cb:5e:5e:
6e:36:27:5b:39:c7:32:55:e4:a5:b3:38:45:b4:7d:8d:f6:a6:
c0:f3:46:6b:4a:54:13:5c:c6:67:57:7e:c8:d3:53:c7:0c:ce:
e7:63:41:8b:e0:b4:70:20:3e:b2:d2:ae:49:bd:69:b1:bd:3e:
a7:93:2b:dc:51:65:b2:76:51:4a:dd:8b:63:bb:ff:20:fb:85:
18:e7:ed:a3:34:fa:48:77:3f:f1:a3:c4:a4:6f:8a:43:38:3b:
da:81:66:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:10 2025 by rpki-client