Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/33bb0e2f-fff1-3cac-b56b-5ae126be03b0.roa
File: 33bb0e2f-fff1-3cac-b56b-5ae126be03b0.roa (raw, json)
Hash identifier: QTbeERpGcEV6R7jajYVFMnjMha3S4XqosgLwAxB6y1E=
Subject key identifier: 08:83:6B:7D:35:18:03:81:11:A9:EF:0C:3A:40:9C:8F:81:A8:1B:7C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EDD87B61FA6F3522FA2F3A640
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/33bb0e2f-fff1-3cac-b56b-5ae126be03b0.roa
Signing time: Wed 10 Aug 2022 12:00:00 +0000
ROA not before: Wed 10 Aug 2022 12:00:00 +0000
ROA not after: Thu 15 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.228.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:dd:87:b6:1f:a6:f3:52:2f:a2:f3:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 10 12:00:00 2022 GMT
Not After : Sep 15 04:00:00 2022 GMT
Subject: CN=976a5059-fc56-4971-a5c4-6a6b714660b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:49:23:53:99:de:9d:09:77:44:3f:65:4d:81:
9d:2d:77:fa:b7:18:b4:a7:d3:bb:b6:9f:c8:e3:ec:
07:2e:1d:d0:c0:d5:d2:29:34:65:5f:e7:98:d4:5f:
70:15:39:fa:42:81:11:7d:44:aa:3a:68:cb:80:25:
f6:2b:53:66:d6:23:34:c1:8f:b9:6b:16:59:43:38:
8c:db:98:aa:de:d7:01:76:f3:98:97:a0:27:93:b7:
f7:4a:1a:6f:8a:f3:cd:bd:15:3d:70:d6:0e:a6:12:
5d:89:e4:a2:e4:0c:db:e1:27:0a:60:bd:85:8b:f0:
f7:fc:e8:17:ce:df:98:e3:5e:33:0b:40:82:45:e2:
f9:d9:ca:84:2f:f2:2a:2f:8d:d5:cc:b3:c6:1f:1c:
6a:3d:89:9e:f1:34:c5:c8:76:10:97:d8:3e:4e:fd:
f2:39:ed:f9:06:06:aa:32:17:2a:fc:de:83:44:80:
3a:4a:9e:b1:14:56:fc:e8:42:6a:7e:fd:b9:99:4b:
71:bc:ae:89:1a:d6:ef:fb:a0:c2:40:66:34:55:8b:
5c:47:96:36:50:e2:1c:4c:99:60:9e:18:ec:56:7f:
37:7a:81:30:d7:59:a7:11:89:80:00:be:d7:ef:14:
3d:57:bb:91:6f:ec:91:c7:4e:c7:0e:e3:96:3e:2e:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:83:6B:7D:35:18:03:81:11:A9:EF:0C:3A:40:9C:8F:81:A8:1B:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/33bb0e2f-fff1-3cac-b56b-5ae126be03b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.228.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:3b:73:e7:a3:27:32:cc:23:d3:13:d8:69:d1:bc:26:5e:09:
91:16:2d:31:c6:2d:e3:c6:be:3e:d6:c2:8d:1b:2e:3d:0b:a5:
14:17:e4:80:13:fa:d9:38:1b:87:23:3a:4d:4e:9c:6c:c0:a6:
85:6b:ea:7c:4a:ac:8d:d5:e4:3c:e8:c4:b2:9f:d3:98:a9:0f:
57:85:32:d1:e9:ed:59:df:ca:61:50:12:f6:3e:3b:e8:e8:fc:
27:44:04:47:a0:2a:ec:36:eb:3a:43:21:b8:58:b1:9b:6b:27:
63:2b:60:65:85:05:de:86:a3:5d:67:d9:5a:b0:3e:81:f9:89:
d4:da:49:e8:16:6a:bd:9b:71:ab:1f:05:a5:12:ad:c6:b1:b2:
30:23:2e:95:ff:92:cb:c7:67:62:06:e9:56:68:81:ba:5a:16:
23:38:83:96:dc:c3:b8:ea:e6:1d:8a:93:6d:6b:46:7a:c5:00:
db:86:d5:68:4c:6f:1f:23:30:5b:c4:10:8a:b3:ab:75:c5:36:
2b:fa:0b:98:25:6b:e5:db:f7:72:b0:1b:92:92:96:10:c7:1c:
85:9d:2f:19:31:c5:f2:f3:48:80:72:16:41:22:ad:3c:7f:fa:
81:d0:37:b9:5a:5e:9f:7b:44:ca:36:6c:97:dc:d4:c6:1b:11:
1f:0e:b4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:08:41 2025 by rpki-client