Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34417d9b-c539-3bf0-8fff-6b91e956cbb4.roa
File: 34417d9b-c539-3bf0-8fff-6b91e956cbb4.roa (raw, json)
Hash identifier: ekZpS850RKW60Yh1Z0bpA4mje35Vkk9EQFpZOSitq7Y=
Subject key identifier: 0A:35:70:73:C9:D4:55:67:4B:C5:1F:8E:B3:11:D6:45:3D:33:8C:ED
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DCBB55F2C15DE2911F5C76B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34417d9b-c539-3bf0-8fff-6b91e956cbb4.roa
Signing time: Wed 04 May 2022 12:00:00 +0000
ROA not before: Wed 04 May 2022 12:00:00 +0000
ROA not after: Thu 09 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.192.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cb:b5:5f:2c:15:de:29:11:f5:c7:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 4 12:00:00 2022 GMT
Not After : Jun 9 04:00:00 2022 GMT
Subject: CN=7d3d91a0-27b9-436e-a4d0-10fe5e6d0971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:81:52:39:c5:de:7f:23:4b:6b:23:25:cf:
69:e0:4b:79:fa:a2:04:95:c0:05:ad:01:3b:f2:72:
20:aa:2d:88:cb:a7:c5:b1:7f:da:47:44:9f:c3:60:
e6:84:dd:17:73:51:55:0d:be:32:2f:3c:d5:68:39:
f0:49:15:81:70:0c:b7:c4:8e:03:5c:90:bc:8d:95:
01:6f:5a:72:ce:19:a2:ec:02:44:dc:95:ed:6f:25:
b3:a4:ce:b7:43:39:e3:24:1c:1a:4d:82:9f:5b:c1:
81:10:9c:c8:6f:4d:e2:75:4b:27:ae:32:38:fd:98:
e9:81:52:62:4b:f6:d6:01:e9:08:41:e4:98:cb:c7:
44:3f:d3:6a:a5:bd:20:1e:3c:38:79:1f:b7:96:87:
41:17:ff:88:e4:d3:98:55:4f:66:bd:5d:19:4a:20:
06:f7:3e:8f:a8:4d:00:de:20:90:e0:41:6b:d5:79:
d7:cb:52:dd:8d:03:fb:0a:a3:e2:e7:47:bb:85:a3:
af:fa:9f:6f:f6:ea:2c:87:96:a9:6f:31:31:f5:7f:
09:42:c2:c9:64:43:97:ed:d0:b0:0e:99:7b:d5:a7:
ad:71:ba:91:62:1e:c4:29:85:e7:97:5b:4b:15:a8:
37:70:8f:75:9a:85:75:57:53:2a:a0:f1:3d:b2:8a:
23:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:35:70:73:C9:D4:55:67:4B:C5:1F:8E:B3:11:D6:45:3D:33:8C:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34417d9b-c539-3bf0-8fff-6b91e956cbb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.192.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:43:e0:3e:47:39:8b:d3:22:83:49:04:2f:d5:7d:19:8e:2b:
52:7d:6c:9a:14:dc:fa:71:63:c1:44:ac:2e:6b:cb:fe:ca:20:
85:65:b7:5f:5c:07:76:b6:fe:18:49:ba:8d:67:1a:df:a5:cd:
a9:3e:c3:35:46:db:3c:39:e8:e2:35:2b:4b:36:8b:e0:43:69:
07:9b:6a:f1:e0:bc:5d:51:44:e7:af:b6:67:76:9d:a4:dc:d9:
fa:01:e9:15:50:eb:6d:9b:de:d4:36:f9:7f:97:6f:b2:ff:9e:
07:ef:3a:30:77:b7:48:8c:4b:f0:14:14:21:a2:c1:a1:a0:d1:
cb:c8:41:1a:ba:8b:e6:cf:6b:7d:4a:db:22:8a:cb:8e:3c:db:
67:03:5d:60:bc:f7:c8:5c:a2:8e:3f:73:62:26:c8:58:37:78:
0e:5b:01:1c:07:8e:72:51:31:34:b4:97:47:e6:e3:5f:ef:a1:
5a:65:80:67:48:98:47:cc:0f:35:a9:18:51:23:38:d7:4d:d1:
67:9c:c6:4f:c0:0b:81:64:ae:cd:55:b8:f0:e2:fc:c0:3c:aa:
c6:22:89:b3:ac:9f:f9:c7:f8:c0:e1:b1:d4:c3:3e:ef:a0:d0:
ad:db:4e:2e:18:99:32:f9:81:dd:b2:1c:62:3e:3e:7c:3d:d3:
db:b2:70:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:12:23 2025 by rpki-client