Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e021588-a551-3d02-9b4b-0fc7da9c9118.roa
File: 2e021588-a551-3d02-9b4b-0fc7da9c9118.roa (raw, json)
Hash identifier: iEquoM6ob5c6dBcIroyOo9KSDpPb1UsTFkg12/+xHiQ=
Subject key identifier: 8C:D1:A6:F6:58:20:E0:C8:8B:54:C9:C1:22:28:36:B3:3C:38:18:64
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F4BDCCD34D3D254108484CD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e021588-a551-3d02-9b4b-0fc7da9c9118.roa
Signing time: Sun 18 Sep 2022 12:00:00 +0000
ROA not before: Sun 18 Sep 2022 12:00:00 +0000
ROA not after: Mon 24 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.251.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:4b:dc:cd:34:d3:d2:54:10:84:84:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 18 12:00:00 2022 GMT
Not After : Oct 24 04:00:00 2022 GMT
Subject: CN=6fc7f256-859f-4ed1-b71f-a8dc51c3401a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:68:4e:0d:98:e9:a5:8e:43:1a:9e:aa:63:
65:71:36:3a:63:2f:0c:45:b0:8b:fa:a6:83:3d:68:
73:cc:ea:ea:11:38:0b:12:1f:36:e6:b4:bd:a9:2a:
94:79:8e:be:4c:b0:9d:5a:0e:ec:e1:bc:a9:d3:65:
6a:ab:4e:7e:01:53:ec:90:fb:66:ff:a4:56:a0:54:
1f:17:c5:77:8d:85:da:a2:ef:83:f2:ea:8e:b2:7f:
c6:2f:5f:81:fc:4f:5a:b0:32:18:fd:5d:44:64:d5:
b6:3d:13:da:08:71:00:57:2d:3f:cb:d6:e7:2f:c2:
3b:31:7a:52:2f:3d:b9:63:61:e9:20:3c:3a:30:c4:
7f:d1:67:35:21:34:1e:e9:76:e0:4b:5b:7f:f9:aa:
d2:fe:23:83:95:b3:b6:c3:f4:4d:e4:b0:65:a5:c1:
3f:cc:97:7e:d9:0d:fc:2c:5c:ca:fe:67:52:12:6b:
97:aa:8b:0c:1a:75:c0:65:05:50:d0:69:04:51:1b:
60:a6:74:0a:6c:9a:08:94:a7:ea:f4:ef:90:a3:87:
82:65:29:eb:f1:aa:f2:dd:46:ff:e2:8e:be:ee:9c:
46:9f:db:ea:d4:96:c0:90:b6:cd:74:a0:96:45:2e:
d8:6b:54:c8:42:4c:15:eb:90:49:37:95:3f:fb:b8:
a8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D1:A6:F6:58:20:E0:C8:8B:54:C9:C1:22:28:36:B3:3C:38:18:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e021588-a551-3d02-9b4b-0fc7da9c9118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.251.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:79:8f:b9:c8:1f:a5:83:ab:e4:b2:b4:25:29:0d:db:03:a2:
65:09:cf:af:c3:1b:6f:aa:0d:ac:c5:20:1d:77:a4:55:36:08:
7e:54:7b:4f:34:99:b8:c0:80:f2:d0:1d:74:64:89:f5:07:2b:
e1:3e:79:46:cd:ff:0a:b9:b1:ec:0e:ab:89:b4:d3:e8:98:ea:
bd:42:39:a1:19:67:b5:ef:17:84:f6:93:ca:6d:63:b9:6e:a5:
19:a5:1a:37:c8:c3:e8:f5:1f:94:46:40:15:85:c1:53:12:bd:
87:2e:e9:59:a8:23:65:1e:55:3b:3e:25:6e:e5:ac:30:bc:cb:
a6:9b:80:47:39:9d:85:07:69:a6:24:5f:03:e8:67:93:33:d6:
de:ee:93:e8:87:cf:90:29:66:2d:ea:b1:ec:2e:66:4f:8c:55:
11:cb:bf:a7:17:84:4b:7f:5a:04:81:c6:15:16:ed:15:26:7d:
75:4f:da:22:b3:8b:39:68:d1:71:b0:b7:c3:af:5d:e2:8f:ea:
78:7c:2d:86:81:0b:10:c9:e2:33:42:37:5f:02:cd:8d:6d:92:
6e:6e:3b:c4:a3:53:c9:36:fb:ec:e7:5e:75:66:35:54:c4:6b:
5a:02:e9:43:85:9c:a9:d1:e2:dc:d1:aa:6c:44:db:0a:d0:5d:
ed:bc:e4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:16:06 2025 by rpki-client