Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/46ea241c-7f9f-34eb-9a59-fd9be4599416.roa
File: 46ea241c-7f9f-34eb-9a59-fd9be4599416.roa (raw, json)
Hash identifier: I5+3mgcU2zrhtbm3o5/kYqYRpii15WZlxgwdeL485/I=
Subject key identifier: 64:A3:CE:D0:B2:FE:1B:A5:C0:74:0E:31:BE:EF:E0:D1:D2:F6:D3:B9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D2F578EBD436C24D65D3B0580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/46ea241c-7f9f-34eb-9a59-fd9be4599416.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.231.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:57:8e:bd:43:6c:24:d6:5d:3b:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=a8003ab1-b634-44c4-978b-d420d43a1c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:39:4e:87:e4:03:fd:70:26:d1:7a:4c:b7:
57:fe:23:6e:2c:94:58:fc:f4:54:05:e0:ae:90:c6:
e5:92:de:13:a1:8a:d6:37:07:e9:d3:6f:3d:bb:19:
66:ae:25:5d:bd:5d:c4:e2:77:c4:88:5d:89:38:6d:
15:ae:e5:79:3d:90:0a:26:fc:b7:a9:c3:a4:61:61:
75:de:68:88:14:f0:82:5a:82:49:f8:9b:46:9b:b5:
7d:00:10:f7:d4:56:72:99:41:16:36:37:63:47:7b:
b2:d4:2e:b8:57:a7:90:72:16:5d:61:6f:19:4c:62:
df:83:e2:30:f2:a6:fa:a6:74:87:8a:02:09:88:a6:
12:f3:b0:47:5c:58:2b:92:1f:93:9d:3d:33:35:81:
69:77:0f:ec:fd:0c:1e:f1:52:d2:05:ab:45:62:32:
3b:35:8c:58:c2:6d:b5:01:d6:3d:a9:9f:18:b1:43:
f5:6f:cd:95:2d:fa:da:b5:d5:d4:db:51:d8:a8:61:
f8:00:91:30:c1:1b:b5:b7:6f:61:47:1d:a1:d0:17:
ce:f8:e2:c8:18:15:f9:1e:db:3b:f0:b5:a7:a0:dd:
51:dd:c4:65:5a:be:08:8a:fe:47:26:53:f9:67:e6:
b2:4f:41:aa:b2:12:c5:10:3c:ab:10:5b:23:33:8e:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A3:CE:D0:B2:FE:1B:A5:C0:74:0E:31:BE:EF:E0:D1:D2:F6:D3:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/46ea241c-7f9f-34eb-9a59-fd9be4599416.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.231.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:31:cf:e0:76:4a:90:8d:17:48:ac:c6:c3:8b:11:dc:76:aa:
c9:86:4b:68:95:7d:45:83:f6:09:c1:62:43:9b:5d:7b:ca:90:
92:f4:d8:23:60:a7:04:29:5e:fc:d5:db:b7:75:f3:24:70:44:
89:57:33:84:cd:ca:a3:e9:e5:09:47:21:52:7b:2f:38:b1:1e:
7b:bc:2f:db:48:df:52:a0:4e:9d:38:83:ea:21:60:7d:a2:1d:
df:fe:2c:7d:86:f4:33:51:42:10:7c:6c:38:6c:55:14:86:57:
f4:ff:be:c1:87:ca:ad:4e:8f:0c:03:dc:ea:d4:cf:c6:fb:29:
cd:6a:ac:a6:69:57:cc:3c:b9:c1:e2:01:bd:dd:1a:98:15:61:
7b:55:44:2b:78:1a:2e:ae:50:3e:eb:a1:a5:3b:8c:d2:48:b0:
3e:53:d0:d1:52:df:1c:df:a9:d2:95:b5:40:51:65:9c:3a:86:
0d:9d:cd:93:5c:23:c2:24:0f:f5:e2:95:9f:80:80:37:ca:dc:
84:62:83:da:53:6e:a0:a1:5a:ee:cc:b6:25:3a:71:a7:bb:db:
7e:f9:1e:bb:6e:78:c2:1a:0a:cf:74:95:da:00:13:a4:09:14:
9e:59:bd:8a:8c:56:ff:fe:a5:f5:61:62:99:a5:89:18:ed:93:
eb:f3:17:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:28:49 2025 by rpki-client