Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3755f4e2-3baf-3ed2-ac9a-4253af0f7b55.roa
File: 3755f4e2-3baf-3ed2-ac9a-4253af0f7b55.roa (raw, json)
Hash identifier: onXKv1vsa9d3LCd3PXzMEPZRj+na1XvH/oJSf6wllZA=
Subject key identifier: B8:1E:D7:1C:4B:A0:33:FB:F7:FC:26:77:2D:93:DD:1B:9C:C9:84:BA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD94F9455ECC8FDD0D75D6280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3755f4e2-3baf-3ed2-ac9a-4253af0f7b55.roa
Signing time: Tue 08 Nov 2022 12:00:00 +0000
ROA not before: Tue 08 Nov 2022 12:00:00 +0000
ROA not after: Wed 14 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 15.199.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d9:4f:94:55:ec:c8:fd:d0:d7:5d:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 8 12:00:00 2022 GMT
Not After : Dec 14 05:00:00 2022 GMT
Subject: CN=23fd491e-8c9e-4f72-a68a-f824d63736b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:a6:14:c6:86:f5:29:da:79:e9:24:6a:68:
68:0b:33:76:53:d6:c2:d0:c9:70:7e:fa:22:16:c4:
4d:46:17:c8:0a:7c:c4:11:28:1c:17:37:54:ac:9a:
7f:9a:c7:f9:28:bd:9b:a0:0d:91:53:f3:57:65:b5:
21:0b:e7:13:7c:8e:98:fd:15:3a:37:f2:8c:13:a4:
41:bd:9f:19:00:f5:b5:4e:d9:03:76:7f:cc:90:74:
e4:1e:46:c5:c0:70:f7:fc:41:8e:01:43:32:59:47:
67:01:64:d2:83:db:98:2c:ee:cc:69:ac:1a:cb:e9:
27:f4:81:ba:d2:22:96:25:36:2a:59:c8:b8:90:8f:
18:ef:87:56:56:5a:36:3b:6d:80:b6:60:ec:b3:ec:
9f:e8:85:e2:08:6e:78:db:27:8d:fa:ed:f7:06:4f:
c1:a0:cb:d7:89:96:70:01:d6:1c:59:aa:87:1c:80:
cd:12:1c:9f:9f:25:f8:96:7e:6d:f2:07:9a:08:f9:
17:dc:0f:d4:51:b0:53:84:cf:3d:e6:1c:47:c0:8b:
f6:1b:3a:5a:81:15:6f:b4:2d:3a:41:8f:09:6f:d3:
ed:f2:e7:7d:92:94:b9:46:60:89:d8:d2:21:f1:4b:
38:38:4a:c5:4c:d7:af:01:6d:55:c2:00:6c:09:ec:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1E:D7:1C:4B:A0:33:FB:F7:FC:26:77:2D:93:DD:1B:9C:C9:84:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3755f4e2-3baf-3ed2-ac9a-4253af0f7b55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.199.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:8c:86:9a:f7:02:71:e7:3f:53:d2:89:76:7c:fd:02:12:a2:
95:4f:56:6b:7f:3a:ec:39:07:92:d9:fe:c3:05:57:fa:df:7e:
17:db:8e:07:4e:39:dd:2d:6c:30:77:c2:4d:5e:03:dd:d1:97:
3b:3d:fe:14:e5:65:b2:f6:4b:42:9b:a7:65:67:b0:40:e5:9d:
9b:aa:7f:fe:aa:7b:de:6b:50:0d:ad:bc:62:59:36:3e:6e:be:
4a:3f:4b:fd:e0:83:57:a3:07:5d:b9:b5:02:21:4a:56:23:06:
ed:9d:73:89:f2:c5:c6:cb:40:1a:9c:29:86:ff:b2:37:3a:aa:
55:97:10:5d:88:c2:80:ed:df:c7:af:0b:b9:b9:78:2b:ca:0d:
36:5c:61:4a:d3:eb:90:7d:7f:ce:c2:ee:27:0e:9a:b1:fe:a5:
8b:fb:7d:88:c3:4e:a5:e7:ff:81:40:09:5f:52:7f:17:3b:6c:
bf:67:30:c3:bf:8d:04:c1:bc:3a:7a:07:96:51:8c:08:60:b6:
63:cd:a8:e1:43:21:76:3e:10:75:28:1f:31:8f:5b:36:4d:88:
1e:be:b6:39:7d:2e:61:fc:9f:46:55:94:35:d5:24:bd:c2:d3:
b3:d8:1e:ff:82:8f:78:d2:b9:4f:85:9f:a9:cd:ee:21:39:b6:
d4:9e:48:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:36 2025 by rpki-client