Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40bf5345-f057-3a7f-a0e4-288d4ebca6af.roa
File: 40bf5345-f057-3a7f-a0e4-288d4ebca6af.roa (raw, json)
Hash identifier: LMskdP1Ug/C/UhBmi3J8SYbJPyyUTHr0ow59HRg2Fyc=
Subject key identifier: BB:73:F5:60:46:9A:DD:ED:06:9C:F8:14:BB:D4:1B:0A:29:6D:09:CA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E05C813A71B29BB83E7FBD3C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40bf5345-f057-3a7f-a0e4-288d4ebca6af.roa
Signing time: Tue 24 May 2022 12:00:00 +0000
ROA not before: Tue 24 May 2022 12:00:00 +0000
ROA not after: Wed 29 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.245.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:05:c8:13:a7:1b:29:bb:83:e7:fb:d3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 24 12:00:00 2022 GMT
Not After : Jun 29 04:00:00 2022 GMT
Subject: CN=3ac7146d-c21e-420c-a3ad-cf65fbc9e7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:bf:2d:f7:79:60:88:88:c3:55:af:f6:70:
95:a2:29:0b:ac:f2:d2:13:12:97:ad:1a:1a:3f:2b:
6b:0a:c8:f2:74:af:6b:b2:89:7f:f4:9a:d2:9e:01:
77:7c:b6:3f:7b:24:a4:05:da:7f:cf:a1:d2:63:bc:
ff:1e:d8:6f:cf:b3:56:55:06:e9:01:48:bb:31:f6:
24:d6:ff:d5:2f:30:4e:4b:6d:5e:6f:c6:b6:53:41:
00:3d:5e:b5:4e:f0:37:79:d2:54:f4:1d:08:25:b4:
bd:de:79:12:b1:1d:16:9f:2a:a2:ce:6d:82:e5:ed:
21:69:0b:9a:7d:9f:11:4e:ef:10:07:35:0e:bb:97:
82:8d:c5:ab:99:88:b6:85:ea:e2:e4:41:59:a3:51:
26:ea:37:01:e2:a8:bd:11:b6:5e:75:b3:3a:10:8f:
cf:6b:43:42:b5:91:53:26:9b:8c:56:22:e3:15:12:
6a:06:b2:f1:eb:0a:91:4a:37:4f:77:b0:f3:28:e1:
25:e9:e2:c3:6e:9b:2d:47:ae:9c:2d:c4:c1:af:69:
27:90:a5:28:9c:83:27:39:c6:84:0c:a0:0f:87:0e:
0e:54:02:c8:95:b5:33:a6:5d:af:79:66:0f:45:a2:
1a:33:79:f3:85:d0:47:cd:16:2c:7b:7f:c0:f4:05:
4c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:73:F5:60:46:9A:DD:ED:06:9C:F8:14:BB:D4:1B:0A:29:6D:09:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40bf5345-f057-3a7f-a0e4-288d4ebca6af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.245.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:16:81:46:b0:20:ac:d3:4c:75:e6:bd:c0:06:04:fe:82:f6:
1a:c0:04:ba:d5:3a:e4:97:85:2c:e6:e6:fc:41:a6:18:4d:53:
8c:d7:7e:3c:61:d0:4e:e2:55:9c:9a:32:d4:ce:0a:48:72:d4:
ef:c5:1f:0e:c7:98:d2:8f:60:b5:f5:d5:b4:c1:29:c7:ec:e9:
13:c9:42:b1:15:f6:41:59:03:80:ae:89:90:71:c7:cf:a6:ce:
9d:22:77:e0:65:03:74:b0:c9:99:2c:9d:97:49:7a:c7:0f:6e:
cb:7f:93:21:1b:4e:8d:e5:f8:41:b7:a9:49:95:cf:94:2d:e4:
39:8f:ce:a8:e1:b3:e5:17:33:0a:24:1a:70:91:fd:63:7c:db:
62:1f:bb:3c:5b:71:4d:02:0f:0a:df:01:6b:4d:74:57:69:9c:
8a:53:95:6e:4d:f0:00:90:0d:1d:a8:a3:3e:81:63:bc:12:ff:
79:a3:10:7f:bd:c5:30:f4:6f:8b:b3:78:d7:a8:10:87:c3:32:
b3:0d:40:f5:47:58:8b:f5:c4:5c:61:a0:e9:1d:f9:61:6e:d4:
eb:68:b1:a8:2e:1d:9d:d5:7d:f6:31:c9:9a:1b:ac:48:55:67:
93:ac:4f:d6:02:71:c9:19:e8:04:27:85:f4:c9:8a:3a:d4:bd:
33:c3:dd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:25:50 2025 by rpki-client