Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/48eb43ff-59bb-36eb-8632-c69556ebd60a.roa
File: 48eb43ff-59bb-36eb-8632-c69556ebd60a.roa (raw, json)
Hash identifier: OhDJYKIEb1aZWacM+cLQpE0455LsJcmpWwVcFEm6KXU=
Subject key identifier: E8:F2:C1:60:65:90:DA:BC:F1:D6:4B:8F:FE:FE:2C:C9:52:48:7A:C8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F178C01A61853E9A9FAAAE700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/48eb43ff-59bb-36eb-8632-c69556ebd60a.roa
Signing time: Tue 30 Aug 2022 12:00:00 +0000
ROA not before: Tue 30 Aug 2022 12:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.166.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:17:8c:01:a6:18:53:e9:a9:fa:aa:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 30 12:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=631ce658-1c80-49af-b120-8eac4fc11de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:d6:76:35:aa:a5:7d:37:d2:a6:7e:9c:5b:
3e:cc:01:5b:b7:8e:0d:e3:09:d9:37:0d:11:78:e2:
66:0b:20:68:df:01:c0:59:f2:70:54:5e:47:c2:06:
2c:c8:a9:34:ac:92:f8:63:1e:9c:50:c3:8d:95:cd:
08:59:12:ae:64:8d:8a:b1:b5:22:e7:ed:90:20:a4:
b9:0c:15:26:6f:84:d9:5e:24:ca:9e:e4:39:46:a6:
12:94:ad:3c:05:ee:3f:48:81:2f:fd:d4:a1:62:f0:
28:34:26:fe:fe:1e:a0:77:a1:51:5c:2e:b4:8a:e3:
3d:6e:99:c3:e8:3c:e1:aa:67:81:2b:f0:c6:f4:db:
33:ec:d5:5e:88:94:83:5f:6f:a1:aa:73:e3:3e:27:
64:08:11:b8:f2:02:ce:76:16:92:be:ec:36:9c:c9:
51:2d:9c:9f:65:ea:fe:e4:96:2d:4c:a2:bf:50:52:
51:56:52:6c:0a:08:52:c7:b6:df:59:61:b4:4a:ab:
78:85:ea:c7:86:b3:5e:cb:ab:fa:7c:ab:e6:4c:dc:
d9:4b:ec:32:86:6d:20:dd:cb:cf:63:6f:70:aa:1b:
99:d6:48:01:9d:9a:64:20:df:df:e9:7f:e2:b0:a8:
b8:f9:bc:ea:a8:16:bd:6e:6b:a9:af:d8:95:de:93:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F2:C1:60:65:90:DA:BC:F1:D6:4B:8F:FE:FE:2C:C9:52:48:7A:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/48eb43ff-59bb-36eb-8632-c69556ebd60a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:db:88:9b:39:3c:66:39:60:04:ab:98:3e:fa:80:5d:d1:ec:
2a:4a:dc:3b:2c:e6:7b:fb:a5:9a:e4:22:ee:0e:a5:4e:85:cd:
4c:c7:9c:e1:bc:f7:0a:cf:ed:10:5b:e6:7f:31:90:2a:9d:19:
4c:31:b1:7f:9e:39:f2:32:d2:f4:aa:4f:df:90:e4:c7:f1:a1:
50:5d:f7:58:a8:dc:08:bd:22:d8:e1:d5:b1:e5:00:22:5f:9f:
9f:6e:ec:b2:6d:50:01:73:eb:83:93:03:15:2d:60:79:51:83:
bd:9f:05:6f:6d:ed:89:0a:17:43:12:75:31:f8:d6:b9:6e:37:
45:89:e3:bf:1e:12:d0:ab:b3:2f:92:59:42:8e:2b:3d:e8:bc:
2a:7a:66:6a:bf:7a:de:c3:ae:93:e2:90:a9:b5:5e:9a:2f:24:
88:2f:1d:7d:33:b0:a0:73:7f:dc:30:b4:dd:54:c9:0a:0a:b7:
af:e3:49:20:60:75:22:8f:99:f9:4b:70:b2:72:f4:81:d3:fc:
67:98:81:65:2f:94:f3:84:c9:92:64:f0:aa:67:fa:6c:c3:f8:
1c:f1:d2:0d:90:ec:de:1b:51:4a:f7:d7:e4:43:e4:61:e8:7d:
40:e7:a4:08:e7:cf:7a:71:c3:82:fc:fe:ff:78:7c:56:1d:a7:
02:8a:58:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:23:00 2025 by rpki-client