Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2fd75f18-58b7-34b0-811c-951b2b6e7310.roa
File: 2fd75f18-58b7-34b0-811c-951b2b6e7310.roa (raw, json)
Hash identifier: bkZp3RE/PeMbHRZNJWYQDFFULhWx+BfPIe5nzdpkXjU=
Subject key identifier: E1:ED:94:D2:4A:74:E9:21:5F:98:2C:85:08:CB:47:A9:4D:B6:EB:5D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C92D5AAE8C1E0C48B814B8600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2fd75f18-58b7-34b0-811c-951b2b6e7310.roa
Signing time: Thu 13 Jan 2022 05:00:00 +0000
ROA not before: Thu 13 Jan 2022 05:00:00 +0000
ROA not after: Thu 17 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 15.239.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:92:d5:aa:e8:c1:e0:c4:8b:81:4b:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 13 05:00:00 2022 GMT
Not After : Feb 17 05:00:00 2022 GMT
Subject: CN=a75207f3-ca96-4010-bb51-1142b19bfe2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dc:1a:79:cb:bc:6b:4a:29:56:aa:a5:8c:8a:
8c:c5:ab:c9:c9:be:e0:77:db:34:94:7e:36:11:00:
64:97:a3:58:e7:73:76:f5:91:3f:ff:d8:b5:3f:f8:
61:32:23:f7:55:92:ae:50:22:20:78:73:01:33:f4:
4c:76:ad:e7:cb:99:5b:41:6b:bb:af:90:47:d7:de:
70:26:03:86:46:95:fb:22:19:26:73:e0:ed:30:c0:
de:64:2d:58:09:23:be:71:f4:79:f3:48:36:5c:50:
37:f5:10:45:a8:79:5f:47:e0:12:2d:e5:0b:05:63:
b7:d5:60:35:8e:c9:1c:38:54:ff:4f:77:77:09:55:
2d:dd:90:29:cd:fe:00:9d:b0:ff:8f:67:41:5d:02:
21:ae:39:35:de:cb:b6:d7:d8:ab:b1:ed:b1:77:3c:
ac:4a:6c:8e:eb:92:e5:67:39:fd:5a:c8:d5:e8:b8:
47:3f:a5:b7:ca:87:48:7d:79:5c:d2:53:94:a5:ea:
21:90:e0:14:ae:2b:73:1a:b4:51:19:3b:3b:7b:5e:
a6:63:3d:bc:98:1a:5c:79:08:89:ce:04:ad:c0:c1:
cc:26:9a:fb:99:ad:c9:8c:24:45:40:aa:07:ec:73:
bf:d7:e9:b7:d5:0d:7e:68:e5:88:d0:d9:c3:9d:57:
6d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:ED:94:D2:4A:74:E9:21:5F:98:2C:85:08:CB:47:A9:4D:B6:EB:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2fd75f18-58b7-34b0-811c-951b2b6e7310.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.239.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:b1:dd:13:56:3e:f1:f1:30:f2:5f:86:53:78:e2:71:c9:b1:
13:38:87:32:4a:c6:9b:5b:13:4a:40:30:f1:99:e6:d7:f6:83:
1a:eb:36:6b:3e:5f:6e:bd:cf:1e:27:5d:88:a2:32:dc:8c:8c:
bd:32:19:ad:32:bc:8d:73:b6:5e:18:34:b0:f7:0a:e8:d5:6d:
83:0d:9f:a5:bf:ac:b7:96:f0:ec:dd:77:65:aa:0d:98:88:d4:
3e:f8:5e:8d:bf:eb:36:70:d2:46:46:d8:0d:19:9f:bf:56:7d:
3c:79:57:be:83:35:26:5a:f6:fe:1f:4a:42:d3:35:8b:01:78:
72:48:d6:e1:f9:f8:ec:1e:c7:27:08:05:27:a5:3e:de:89:47:
61:27:a1:5e:90:91:5d:f1:c8:c5:0c:8d:91:a8:a7:26:9a:02:
1c:92:f6:89:67:eb:99:2d:ce:be:57:7b:7a:f9:ca:fe:fc:61:
e4:c9:46:66:0c:da:85:77:d1:82:7e:cf:54:1f:5d:8e:db:4a:
9f:41:a2:da:9b:6b:c1:08:dd:38:1e:15:dd:8c:fd:49:0d:37:
15:28:53:17:19:25:98:85:31:6f:a8:95:a8:1b:3e:df:4b:f8:
2e:77:77:6d:43:99:0a:12:59:d2:e7:8c:02:e5:52:f6:9d:2c:
83:c3:ca:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:40:53 2025 by rpki-client