Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2eed2884-f069-357d-a98c-0a30fad984bd.roa
File: 2eed2884-f069-357d-a98c-0a30fad984bd.roa (raw, json)
Hash identifier: Gn4SewH/n39NKoiStDenCNzQ7HM7dda8JD/1lKnjKqY=
Subject key identifier: CA:29:D5:81:6A:66:3B:2E:CE:63:C5:05:BD:34:FD:39:3B:BA:A8:BF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584051627243043C92142EBCFF60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2eed2884-f069-357d-a98c-0a30fad984bd.roa
Signing time: Wed 21 Dec 2022 12:00:00 +0000
ROA not before: Wed 21 Dec 2022 12:00:00 +0000
ROA not after: Thu 26 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:51:62:72:43:04:3c:92:14:2e:bc:ff:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 21 12:00:00 2022 GMT
Not After : Jan 26 05:00:00 2023 GMT
Subject: CN=8bd29ed7-97c2-49f1-a430-6ebd66ad9ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:29:55:3c:a5:1c:b2:ed:63:8e:6a:20:95:
7c:dd:2f:1d:b3:cb:31:9c:d3:3a:73:21:45:db:83:
f6:3e:2b:da:52:56:0c:33:e7:ca:40:17:c0:b7:18:
8e:48:da:98:91:c9:75:e8:91:9f:22:a4:81:4b:a1:
c1:47:69:80:ef:b7:5f:68:01:0c:fc:e6:b7:b9:6e:
b6:f4:79:31:3f:5d:f9:a1:04:85:8a:38:45:5e:52:
2d:81:51:01:d3:d2:96:93:ff:dd:29:21:1e:41:a9:
39:9a:ea:91:5e:12:e6:92:99:7c:e9:27:e7:67:fb:
f8:4c:1b:75:3f:a6:21:f2:57:c6:57:d3:73:bb:ad:
28:86:a4:08:5c:2c:02:5d:61:2d:6f:14:75:02:1d:
2e:48:9e:58:80:4e:63:e6:dc:bf:36:a7:64:d6:43:
e7:01:91:63:0c:8f:da:6c:42:34:11:27:01:0b:5f:
27:bc:9e:65:42:a9:05:c4:34:ee:05:9d:92:16:c5:
e7:76:90:a5:41:7d:ff:2b:3f:75:0c:e3:0f:5c:e8:
e2:33:ec:a4:98:05:ac:c8:7c:42:6f:fe:83:6a:de:
74:d5:a6:14:fd:48:e6:5d:85:0c:92:e9:a9:d1:e0:
4d:3c:cc:29:b6:02:6e:aa:5b:71:04:b5:b6:70:a6:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:29:D5:81:6A:66:3B:2E:CE:63:C5:05:BD:34:FD:39:3B:BA:A8:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2eed2884-f069-357d-a98c-0a30fad984bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:8a:54:25:98:33:ef:f4:22:d4:ba:98:66:c2:ec:f7:c1:56:
da:6b:67:c1:cb:33:e3:d7:4b:c9:fd:12:55:0e:55:ba:ba:8e:
74:90:32:5c:67:04:73:ec:88:5d:cc:91:0e:74:e1:77:2e:b1:
17:91:11:cf:9c:f2:f3:92:79:35:3d:4e:f6:f6:62:3b:d3:72:
71:be:d0:9c:7d:32:93:dc:25:62:9f:f4:81:b8:f8:33:0a:57:
2f:86:6d:84:79:51:66:75:b9:44:25:7f:f0:22:61:7e:d9:1d:
66:6a:1d:ab:29:94:3d:30:9a:40:be:21:3a:cf:4b:c3:b1:83:
6d:05:11:a8:04:3f:53:26:d0:0b:cb:1a:11:77:40:4c:77:de:
03:d2:10:d1:de:0e:ed:00:db:aa:79:90:53:22:36:96:49:47:
18:85:d2:30:82:3d:6a:96:84:46:28:84:da:9a:b6:19:4c:43:
ad:e1:c4:4c:8b:4b:e5:00:df:ac:73:0f:4d:09:44:f9:29:99:
d2:e4:43:83:c5:4d:4d:ed:70:8d:a8:37:e2:b4:04:19:e6:24:
06:d8:e6:cb:9d:0e:0a:4f:b0:46:31:87:94:51:c2:3f:0e:82:
04:a0:3e:e5:02:01:76:e1:f8:cd:a8:f2:47:55:99:38:fa:e2:
9f:82:ce:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:38:36 2025 by rpki-client