Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c14ce47-7970-3c7c-bb17-358af2c2bc66.roa
File: 2c14ce47-7970-3c7c-bb17-358af2c2bc66.roa (raw, json)
Hash identifier: ZyFwM+1si1Dm/1iGf9VhOPHOWlc1xwcO3Dqo4DlQoAI=
Subject key identifier: 78:24:B1:EB:3C:73:F0:4C:C8:05:69:54:54:34:02:39:BD:CD:C0:B1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C97565F22C35442DE3FAD1900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c14ce47-7970-3c7c-bb17-358af2c2bc66.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 3209
IP address blocks: 15.145.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:97:56:5f:22:c3:54:42:de:3f:ad:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=03276d13-47aa-4d75-9d14-61ef0026b6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:38:eb:23:72:1d:43:59:c8:d6:c5:49:fa:8e:
c4:5f:97:75:74:8e:1a:bd:0d:64:aa:ca:48:16:bc:
6f:fb:7d:08:72:6e:50:59:db:ac:51:22:50:55:8b:
21:b3:5b:f6:6d:1c:4e:b8:8b:91:a9:fe:53:86:f4:
cd:39:25:37:a1:65:94:71:38:f8:e8:a9:31:50:cb:
6a:45:02:aa:46:34:34:54:7f:ee:97:6f:5b:48:4a:
73:40:32:61:3f:c0:68:2d:d3:f4:18:d1:82:4d:8e:
81:b8:c8:f0:a7:ae:a5:d1:03:c2:87:71:c4:d0:6e:
a1:d8:07:74:b2:12:8d:d4:7f:de:41:9b:a6:ab:9e:
e3:af:e1:66:29:b4:99:e9:16:4c:1b:07:f0:7a:f6:
58:16:52:24:33:ac:09:36:23:3c:ec:8d:d1:1e:9e:
04:a9:cd:ea:bd:d3:e5:eb:c7:d5:e1:dc:11:f5:4a:
11:4d:15:cf:5f:5c:26:9b:b0:7c:03:63:10:f5:b9:
05:a3:0a:a8:d5:18:cd:bc:75:bb:48:07:41:b7:13:
81:e2:b0:13:9a:d9:dc:67:21:16:2f:5a:94:f9:80:
82:d9:9e:9f:79:f3:b4:17:4b:c1:b9:ae:22:11:fc:
44:41:8b:d5:29:d4:23:73:a5:8f:74:58:28:59:d5:
4a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:24:B1:EB:3C:73:F0:4C:C8:05:69:54:54:34:02:39:BD:CD:C0:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c14ce47-7970-3c7c-bb17-358af2c2bc66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.145.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:34:de:55:63:2a:ef:35:ff:7a:8f:3b:a2:f2:80:5c:cb:94:
1a:b8:b7:53:0e:d5:0d:db:0f:1d:0f:2f:ee:d1:c8:ff:e2:1f:
41:a7:4c:63:de:ad:0a:74:2f:94:43:af:8e:28:98:45:83:29:
08:2b:11:a1:ca:c1:14:5e:cb:93:cc:1c:4a:5a:89:e0:8a:84:
09:30:3d:27:55:58:5b:a2:b5:53:34:2b:89:94:29:25:2f:be:
b0:30:46:73:3a:ef:c1:b1:d9:bb:91:ef:ef:be:f1:85:17:a2:
79:f1:3f:ab:77:ee:cc:18:f4:8f:88:7c:0b:7b:f7:69:04:af:
3a:49:bf:e1:7f:ae:0e:bf:3d:ae:27:66:c2:57:2a:5e:c6:18:
f4:fd:19:a8:97:0e:ea:15:3d:9d:c3:6b:a7:15:e1:9c:4b:0d:
93:f0:e9:92:de:40:3e:ec:bf:6c:ff:25:91:05:69:1f:97:d6:
bd:4e:27:b0:db:fb:4d:53:d7:11:fc:35:c8:63:b7:d2:a5:7a:
9e:a6:3e:29:d8:68:6c:b3:d9:c7:80:54:19:2b:26:19:02:82:
8b:ea:eb:84:e4:d0:ee:eb:9f:e2:48:23:a1:23:f5:a2:3a:c0:
39:4d:25:03:57:18:ab:05:35:45:23:9a:05:a8:be:7f:2b:0d:
51:23:f4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:26:07 2025 by rpki-client