Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40a6daa6-e1a1-3810-b7cf-222262e73594.roa
File: 40a6daa6-e1a1-3810-b7cf-222262e73594.roa (raw, json)
Hash identifier: nCrj21B4HkV3xGRuNFtIiBGxsGScABnPo/u8mXOrNSY=
Subject key identifier: 22:4D:0D:57:2E:F0:57:81:0F:13:37:1A:28:81:16:6A:F1:27:EF:6D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840170C92A8A377B8C8E3CE78C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40a6daa6-e1a1-3810-b7cf-222262e73594.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.205.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:17:0c:92:a8:a3:77:b8:c8:e3:ce:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=39e3d6f4-7488-420a-b903-65d7ee15fa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:f6:1e:98:72:7f:ae:55:fb:1a:ea:db:80:
73:60:c6:e4:e2:29:40:63:99:46:ea:c7:2c:08:31:
b3:34:13:8e:71:25:5a:e7:c7:2f:a9:77:3b:63:86:
cd:92:fa:f6:e4:09:4d:73:f1:d7:87:50:d6:f8:30:
ec:82:ae:3f:dc:02:70:8a:02:64:8d:c7:d0:cc:8c:
de:73:44:c4:88:a9:f9:c2:a7:65:dc:a3:21:cd:6f:
c8:de:eb:3f:8f:0b:f1:22:38:da:bd:cf:49:17:46:
60:7d:a4:67:86:02:d6:68:fd:32:36:f6:59:1f:67:
2e:55:82:16:fb:b5:f6:3d:1a:c1:bb:e8:44:40:13:
ab:98:ab:b6:de:61:d9:e6:da:cc:63:8f:f2:b0:90:
7a:b5:92:08:4b:d7:a6:2b:59:9a:60:13:79:0b:c9:
92:ae:41:bb:c1:ea:c3:d5:4b:2e:13:ce:52:94:9c:
ca:a0:43:58:55:17:a2:a7:26:88:a0:c4:04:98:13:
c0:f1:cd:37:55:12:ae:ae:25:79:3d:8e:81:a1:a0:
5d:62:76:61:8f:e5:7b:2b:dc:40:8f:6a:29:92:f3:
63:2b:90:ec:09:e2:9d:f5:bb:cc:1d:b6:5c:1d:e1:
b1:45:31:ff:41:a0:6a:64:c9:aa:3b:c3:da:47:d6:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4D:0D:57:2E:F0:57:81:0F:13:37:1A:28:81:16:6A:F1:27:EF:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40a6daa6-e1a1-3810-b7cf-222262e73594.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.205.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:12:13:06:e2:48:a1:9a:86:d3:20:de:a9:1b:72:dc:0c:94:
4c:27:de:30:e9:09:80:00:a6:e4:70:70:e4:4b:b5:18:d3:dc:
ac:be:75:ba:0e:66:fd:b6:72:8e:30:5b:72:5b:af:f5:bb:35:
27:e3:eb:29:14:de:d0:61:6e:a3:e5:70:43:4d:10:a3:e6:2a:
64:74:14:26:dd:9c:77:3e:76:e1:28:93:32:55:7f:1d:8d:5a:
d8:55:19:71:48:f6:a3:5d:c3:1f:30:b7:89:e0:cc:bd:f3:bb:
56:fa:66:87:60:90:1f:5c:81:5c:17:58:d6:f8:49:dc:e8:0b:
2b:27:87:eb:78:44:46:60:c3:06:ad:f8:50:29:b9:b6:b4:01:
e0:a3:7a:ad:38:2f:10:63:56:31:76:57:b9:07:f1:42:ae:6a:
a9:cc:f4:30:b8:17:7e:57:f4:8a:4a:58:d1:99:2a:a4:38:19:
72:0d:06:dd:c3:73:f8:0a:9e:21:51:6d:d4:87:cf:e8:84:cd:
37:40:bf:73:e4:93:75:3a:7c:83:86:27:4e:a2:03:12:fe:e4:
ed:5e:76:4a:65:2b:8a:a6:98:12:5b:4a:13:bf:66:e8:83:76:
a7:c2:10:f8:61:17:91:42:4d:c2:43:e4:c6:6b:70:eb:f5:b2:
4b:ab:1f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:38:40 2025 by rpki-client