Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4611479e-67c3-34d4-bc88-9f31751c6d41.roa
File: 4611479e-67c3-34d4-bc88-9f31751c6d41.roa (raw, json)
Hash identifier: VPfVpB/MJxBqtNwRfw8BTRVHTdAhhuV3MQiIcDYDSho=
Subject key identifier: 30:DA:8E:5E:6D:ED:CC:15:25:63:2A:6C:22:C7:D0:F9:EB:35:8B:E4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DCC6F48C6296DE98B128CC000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4611479e-67c3-34d4-bc88-9f31751c6d41.roa
Signing time: Wed 04 May 2022 12:00:00 +0000
ROA not before: Wed 04 May 2022 12:00:00 +0000
ROA not after: Thu 09 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.190.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cc:6f:48:c6:29:6d:e9:8b:12:8c:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 4 12:00:00 2022 GMT
Not After : Jun 9 04:00:00 2022 GMT
Subject: CN=3a74fa53-40d4-46ce-898e-f7f9b8bd6d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:77:79:03:eb:db:6a:9e:e5:27:1b:5e:22:
04:2c:18:f1:cf:85:d8:f0:d5:53:7a:70:d9:a1:0e:
44:30:ca:2b:37:54:4f:f1:81:61:27:2c:ec:a1:09:
d2:d8:c3:2e:bf:03:f8:8a:90:d0:d1:66:e4:36:be:
56:26:fd:5d:1a:c5:06:c8:33:d2:d7:1e:01:d5:64:
ab:d1:f6:43:48:1f:f2:21:e9:33:fd:8f:e6:8f:e6:
8b:1f:e9:16:2e:f8:4c:ad:bd:46:bc:a9:cd:5d:71:
f2:fd:29:68:e9:6a:df:9f:f9:47:2f:59:f3:5e:5b:
9a:a9:7a:94:2c:34:f5:1f:17:02:72:71:8e:52:96:
b3:37:c1:8b:e4:74:73:4a:be:8c:72:07:7a:bc:01:
22:45:5c:20:30:2a:c0:d4:ce:f6:c8:6d:43:3e:0d:
20:94:7a:e5:fb:71:c9:17:65:78:cf:31:5a:49:52:
44:a3:fd:17:33:b2:62:d1:db:c9:47:47:88:d3:88:
b0:56:41:f8:22:c9:9e:b0:46:64:81:40:63:72:16:
b4:4a:93:35:77:59:83:21:e5:db:11:d9:12:6f:2d:
d6:54:73:3e:99:c9:67:92:fc:7e:3e:c4:30:c5:cd:
73:12:b1:35:83:8c:57:4e:59:8c:c8:41:52:99:13:
5c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DA:8E:5E:6D:ED:CC:15:25:63:2A:6C:22:C7:D0:F9:EB:35:8B:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4611479e-67c3-34d4-bc88-9f31751c6d41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.190.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:79:80:a4:fc:fd:54:aa:b9:3c:ee:ef:ea:20:f1:58:14:9b:
9b:4a:e3:58:84:58:6e:b8:39:15:7f:eb:4b:5a:31:af:d8:e5:
49:5d:fa:a6:e8:93:38:6d:d2:7d:fb:ac:b6:93:7a:3b:02:fe:
ac:d4:2d:30:42:dd:4f:3d:48:94:7e:08:b0:e3:b5:a6:34:16:
8e:59:44:13:2e:4f:b2:d5:7c:1c:b4:0f:c0:d3:1a:6c:91:73:
7a:75:4f:8f:24:2c:3f:57:a9:34:48:cf:26:12:52:5d:48:58:
ea:e7:4b:af:20:c2:3a:4a:56:6f:53:ee:fc:bc:03:90:6d:d3:
a4:53:13:6d:95:39:34:e9:49:b6:fc:75:4a:87:64:a9:e1:f8:
8e:5c:bc:65:b6:03:3a:2b:86:c2:c5:03:c6:cc:b0:f7:a1:45:
6d:e3:04:16:57:13:c8:e5:ed:bd:cc:d3:98:72:f5:b9:b0:d8:
3b:a7:e9:24:12:a4:7f:05:e9:86:68:c1:e4:8c:c6:e1:1c:21:
45:2d:eb:c6:20:f5:d9:7f:a7:c4:56:64:4c:ab:c3:6b:f8:83:
a3:d3:a4:92:64:24:d0:3c:23:c9:8b:d5:98:10:d4:59:43:3c:
2e:5d:6b:ac:37:18:88:20:e9:94:6b:fc:46:7f:23:70:9a:20:
f8:a9:ce:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 07:22:09 2025 by rpki-client