Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/37aa2f29-4e1d-3e48-a3f5-99e91daef457.roa
File: 37aa2f29-4e1d-3e48-a3f5-99e91daef457.roa (raw, json)
Hash identifier: TTex9MP+fk+8yD9Bzs318xobKQm5/iVCVpm2atTOJUg=
Subject key identifier: D9:58:B3:E0:E8:73:7F:4E:C8:9B:AB:D2:B7:F7:7A:8B:F1:EE:70:BC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EB65BFAB417DF882256242B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/37aa2f29-4e1d-3e48-a3f5-99e91daef457.roa
Signing time: Wed 27 Jul 2022 12:00:00 +0000
ROA not before: Wed 27 Jul 2022 12:00:00 +0000
ROA not after: Thu 01 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.177.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b6:5b:fa:b4:17:df:88:22:56:24:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 27 12:00:00 2022 GMT
Not After : Sep 1 04:00:00 2022 GMT
Subject: CN=b1cd2428-dbd9-404d-91a5-1b0e84925d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f4:01:f5:9a:5c:7e:3f:83:2b:89:bf:b6:23:
4f:4e:98:bd:32:84:6b:8e:ec:fe:9c:bf:12:9c:fb:
c0:fc:c6:b1:93:d4:9b:67:8e:b4:97:48:78:90:37:
3b:e5:f4:af:18:b6:7e:de:9c:81:94:97:48:b7:d7:
58:fe:17:0f:2f:6d:75:fb:4c:8a:63:bc:60:48:a2:
0c:17:00:b2:96:5b:89:d1:5d:f6:06:41:20:2c:6c:
38:ab:f2:4c:e1:3b:73:29:00:7b:8f:04:e5:fa:d1:
36:65:98:e9:69:cb:98:27:6c:b2:9f:c1:2d:52:91:
c7:d9:72:0e:fe:2c:54:85:c6:d1:e9:03:1f:b4:57:
76:d4:c5:46:23:78:be:2f:88:97:9a:bb:e0:d7:0f:
e4:67:2c:b4:ef:de:56:46:46:56:e3:c9:1a:18:66:
76:b4:e6:cf:6f:18:eb:bf:d2:27:7a:f1:5f:4a:98:
e1:30:4c:86:47:22:8a:1e:42:92:bc:d1:9e:67:c2:
82:1c:c6:f2:e1:2f:73:13:32:c2:0c:55:4d:8c:fb:
3a:25:6d:18:0c:75:4d:a5:c7:99:47:71:f0:27:4d:
4b:75:91:8f:53:0e:4f:ba:a4:27:0b:fb:42:74:14:
c5:dc:94:91:e1:72:9d:b2:24:7a:5f:e6:21:07:ca:
1f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:58:B3:E0:E8:73:7F:4E:C8:9B:AB:D2:B7:F7:7A:8B:F1:EE:70:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/37aa2f29-4e1d-3e48-a3f5-99e91daef457.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.177.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:d6:10:90:82:bc:0f:a6:b1:57:fd:e3:d2:46:e8:54:ab:72:
09:c1:73:2c:c1:6d:50:52:55:b4:b0:fd:b7:19:d3:be:a0:e0:
96:b7:a1:7b:47:83:e5:60:3f:13:dd:cd:3c:14:86:7c:d1:51:
9a:32:f0:f8:d7:53:e9:01:55:24:b2:e1:2e:4e:a4:a8:b4:5c:
8f:0d:f4:24:03:10:5e:b4:c1:d8:8c:1d:d3:cc:a2:62:4e:80:
fa:45:33:a2:57:f8:b0:cd:45:04:bf:49:d3:52:6d:14:40:df:
94:91:30:dd:b0:cf:80:18:e6:2a:6e:fa:94:a8:28:0b:16:bd:
57:80:2c:46:aa:98:e6:3e:94:95:56:09:26:4c:1a:c8:bb:93:
d5:f7:40:e9:15:ba:ca:b4:75:8c:b3:e4:56:de:2d:24:fb:42:
2c:9c:89:9a:a2:84:64:f9:ca:d1:8c:e7:de:20:01:75:0d:8e:
d7:b6:7f:d5:75:fd:83:f1:21:35:0f:d2:a8:8a:c3:73:b0:fa:
b6:69:a0:fa:9f:b4:3f:cb:3e:11:a7:02:06:d1:ac:05:7a:69:
00:9b:87:a4:a7:c3:27:ed:f0:17:cc:3f:76:c2:e9:a0:54:66:
ee:a0:80:ba:bf:f5:6e:c6:ec:2b:e8:a9:ca:e8:9e:b9:4c:7e:
75:aa:0a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:06:49 2025 by rpki-client