Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/38c79a61-64a2-3b35-a9aa-14e77699f98f.roa
File: 38c79a61-64a2-3b35-a9aa-14e77699f98f.roa (raw, json)
Hash identifier: ctaSyrKKzvdEl+FVV1T46Bydtl5aTkdr843I/XTxu3U=
Subject key identifier: A8:68:26:DA:03:DF:0B:78:0E:B2:C7:9B:0C:3A:E0:CC:58:D4:40:3D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D2F498A24F69FD2D76A7C9F40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/38c79a61-64a2-3b35-a9aa-14e77699f98f.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.230.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:49:8a:24:f6:9f:d2:d7:6a:7c:9f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=87428ba2-e4cd-4ee8-8c8f-777066eeadae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:50:d1:72:78:a9:47:a8:52:f0:76:eb:7f:6a:
03:5b:ee:5a:f7:12:03:b9:38:08:dc:07:88:e7:ff:
34:44:80:43:54:26:3e:36:e3:5a:aa:d9:d4:3a:81:
80:e2:72:6d:5b:7c:b7:b1:fb:51:7a:53:f0:c1:43:
00:0d:ce:f2:fe:e2:7a:bc:ea:06:6c:c4:99:32:6d:
40:88:c1:9c:fe:ae:34:e5:91:ac:50:3c:17:a9:48:
ca:36:64:c9:a0:2a:de:c1:f8:18:87:71:a2:92:a2:
54:fb:cb:e7:d2:a1:a3:28:1b:41:1a:78:60:3f:42:
0d:3e:af:f7:35:72:ed:be:ac:6a:4a:fa:e0:80:4b:
51:cf:91:03:61:35:fe:43:74:b8:3a:9b:8b:fe:61:
31:d6:a8:ba:0e:6a:9b:9d:7e:9c:6f:54:17:de:cf:
5a:56:b3:67:7f:58:a4:11:32:bb:65:61:bf:d5:2e:
ab:3f:5f:a7:f5:95:db:76:93:02:bb:6a:c8:0e:85:
c8:12:79:e1:42:f4:a1:88:2c:7a:ad:7a:5b:f8:e9:
af:04:04:bc:6a:45:9f:c8:bb:64:eb:fb:13:31:e5:
92:04:29:33:5f:88:94:28:c4:66:a5:d3:27:99:17:
a2:bf:ca:a2:96:fa:d0:ff:02:88:84:1d:95:b6:f2:
d2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:68:26:DA:03:DF:0B:78:0E:B2:C7:9B:0C:3A:E0:CC:58:D4:40:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/38c79a61-64a2-3b35-a9aa-14e77699f98f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.230.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:12:f5:04:4e:9d:8e:f3:93:82:d6:ee:2b:d4:2b:f6:43:1c:
00:5f:8b:dd:a4:06:e0:01:ea:0a:f9:c6:60:e7:02:46:a2:1a:
68:ff:d1:cf:43:03:7d:2c:69:ac:b6:6f:45:f2:6d:fc:84:e4:
19:84:2c:ee:63:0a:4e:18:c0:65:33:c7:e9:99:3f:8c:1b:24:
aa:ef:58:09:8b:1f:9f:6c:10:ee:bf:f8:49:a5:d1:16:7e:4f:
e8:cb:67:3f:55:a4:08:eb:db:54:34:ea:c7:aa:35:12:c2:fd:
74:f2:fe:8e:ce:71:3d:1b:45:5e:d9:6f:b9:4c:e9:1f:af:69:
ca:bf:db:4d:e4:88:32:9f:10:db:9f:55:85:9e:91:db:8b:52:
bb:68:bb:cc:57:d1:1d:4c:b0:f9:77:07:65:a5:28:cb:7d:97:
6d:14:56:cc:07:a1:da:a4:02:93:64:e2:4c:17:ec:21:95:fc:
91:e6:19:45:66:5f:8a:5e:a5:a4:46:37:96:6d:3f:f9:15:f8:
87:2f:4d:23:af:0a:06:59:81:e1:40:5e:1c:9b:9f:9b:57:65:
a6:9f:15:37:63:35:d1:0d:ff:a1:cc:5a:75:a5:eb:6e:7c:26:
68:6e:90:27:dc:41:a5:71:3d:c2:d8:65:c5:9d:06:1c:5c:95:
bf:ec:f6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:17:01 2025 by rpki-client