Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a7796e7-1325-3785-a98e-22674d3bcfc3.roa
File: 2a7796e7-1325-3785-a98e-22674d3bcfc3.roa (raw, json)
Hash identifier: SPLeoCDUBMrmR6iWl5/mFGVTsKWbaPEVBhctFzXQUjE=
Subject key identifier: 0A:E9:E6:17:9C:90:F6:82:D1:91:92:80:80:0E:7C:04:AC:98:7E:60
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE1086869830496503BC74260
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a7796e7-1325-3785-a98e-22674d3bcfc3.roa
Signing time: Thu 10 Feb 2022 05:00:00 +0000
ROA not before: Thu 10 Feb 2022 05:00:00 +0000
ROA not after: Thu 17 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.206.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e1:08:68:69:83:04:96:50:3b:c7:42:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 10 05:00:00 2022 GMT
Not After : Mar 17 04:00:00 2022 GMT
Subject: CN=e037eef4-747a-41cf-8d74-c20770a3462f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:41:9e:13:3d:39:b4:69:13:ef:ee:dc:97:11:
7b:72:83:11:3d:15:81:c3:ff:58:d8:41:29:ca:d0:
31:98:f5:37:d9:72:1f:57:0d:90:be:32:20:fa:c3:
2d:d5:fc:1a:78:37:1b:a6:03:4b:85:5c:ba:f4:e9:
72:88:c2:e9:78:c1:bc:71:8d:91:d6:f4:aa:9c:0a:
cc:cd:85:c3:a0:89:7e:d6:a5:32:58:07:5e:bb:b1:
5a:5d:9d:2c:a4:0b:60:09:a4:60:3f:13:69:4f:58:
41:da:4b:67:67:e0:8a:61:26:ed:c8:2b:84:0f:e8:
9b:fa:1e:40:58:ff:83:ad:ec:1b:e5:74:cb:60:58:
4c:68:0b:81:b4:44:e8:75:f0:b3:92:e5:4a:f5:4f:
6a:c6:00:05:c5:58:e8:fa:bb:4b:74:58:27:57:91:
7f:0e:6d:a2:cb:2f:47:f3:1e:b8:46:25:df:50:05:
2d:5a:00:5f:6d:68:94:58:25:14:4e:e1:4b:f8:af:
f3:19:ec:d4:4b:be:b5:dc:74:ae:ab:ab:7f:1d:7e:
2e:b5:51:ba:1f:8f:95:d5:e1:91:0c:0f:3d:69:7a:
07:d0:89:76:0f:10:c6:00:b5:57:89:98:fe:08:e9:
b8:14:46:32:de:f4:f1:da:77:1f:8a:18:56:2a:79:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E9:E6:17:9C:90:F6:82:D1:91:92:80:80:0E:7C:04:AC:98:7E:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a7796e7-1325-3785-a98e-22674d3bcfc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.206.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:05:0e:8b:b3:26:69:c8:c9:82:7d:45:72:1a:17:c7:48:3c:
59:a3:03:30:23:b6:35:93:37:52:83:37:91:ef:27:6b:f4:98:
cf:df:46:e8:90:d5:b0:a9:dd:9d:23:4b:89:a9:5f:a6:d4:dc:
e1:8c:9b:e9:09:1b:91:3c:09:e1:c7:b8:17:59:9e:fb:24:c5:
32:f4:34:b4:13:fa:ba:ff:49:55:ea:06:44:fe:de:3c:9c:c9:
a9:2e:e6:68:89:9c:47:d5:43:99:2b:d1:db:fe:6c:2e:4d:66:
68:14:cb:34:48:68:2b:b4:61:50:22:51:d9:0c:f2:e0:91:d1:
74:55:db:d5:00:1d:de:31:f0:84:8a:0f:66:fb:f2:57:0c:82:
57:cb:1a:ed:1a:41:dd:fe:da:64:36:0b:59:09:ad:a2:a0:9a:
48:76:6a:88:09:71:8e:8b:9e:0f:a6:d6:da:94:7e:ae:18:be:
81:98:09:32:a3:26:90:73:e1:71:a5:b9:43:bf:c0:b4:75:b6:
1a:3d:b5:c7:01:e4:4d:9b:d0:46:c4:8b:70:35:6d:d9:1d:9f:
ee:86:ad:04:cd:b0:a9:45:ff:9f:a4:f0:73:9c:8a:d7:39:b1:
3e:b6:74:98:2f:90:ca:9b:12:de:13:3e:ac:9a:20:fe:9b:19:
46:3b:f0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:11 2025 by rpki-client