Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49abe733-7432-31b2-8c62-9cee5529c65c.roa
File: 49abe733-7432-31b2-8c62-9cee5529c65c.roa (raw, json)
Hash identifier: d4+ROMF2I4VCNdHFuyWMlxe2LH3HFvc3lUwxQa+cxn0=
Subject key identifier: 4F:E0:B8:9E:F3:68:67:24:35:4F:F9:D1:34:B9:99:C7:6D:2B:4A:82
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F2BC1FDEB635FE0236F9945C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49abe733-7432-31b2-8c62-9cee5529c65c.roa
Signing time: Wed 07 Sep 2022 12:00:00 +0000
ROA not before: Wed 07 Sep 2022 12:00:00 +0000
ROA not after: Thu 13 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.236.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2b:c1:fd:eb:63:5f:e0:23:6f:99:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 7 12:00:00 2022 GMT
Not After : Oct 13 04:00:00 2022 GMT
Subject: CN=a8d94e8b-0d10-4d11-a366-f651e862f4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:50:a1:fa:b0:ef:70:99:50:2c:89:dd:f0:04:
f3:12:c3:cd:7c:94:12:09:2a:0c:fd:9b:ba:1f:c7:
52:d1:49:41:77:83:31:03:a4:e3:e0:09:2f:1b:7a:
e7:05:f9:7e:d7:32:73:bd:c0:a1:2e:32:0f:91:20:
4d:f4:df:c4:22:6f:6e:7e:7e:bc:f6:cd:6a:6e:13:
20:b1:70:c4:b1:70:4b:96:65:11:6a:3e:04:19:ab:
53:6f:f2:73:ce:5a:c1:60:51:84:b4:96:46:49:f5:
53:ed:42:33:3d:ea:86:23:21:48:d9:60:5b:79:09:
d8:69:1b:b3:ac:cb:9c:5d:e4:e6:ea:c1:0f:89:ad:
dd:85:62:9b:4c:7a:8f:92:02:36:55:dd:2e:b8:5e:
a7:56:19:d2:47:4a:df:10:28:f4:d5:cd:da:75:ea:
58:76:d2:5e:7c:fa:c8:d1:33:63:33:72:10:b9:14:
aa:88:e6:5a:ae:9f:be:9f:31:a6:6e:c1:02:91:f3:
b3:95:b4:a2:96:a0:64:92:ef:c2:67:c7:ee:94:e9:
95:9c:47:01:55:92:96:40:2e:98:3b:ad:a9:6a:f2:
da:00:9c:aa:67:a7:a2:12:dd:8c:27:05:61:b2:5c:
51:27:19:74:c9:9d:34:75:9c:a6:30:63:91:fb:65:
f6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E0:B8:9E:F3:68:67:24:35:4F:F9:D1:34:B9:99:C7:6D:2B:4A:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49abe733-7432-31b2-8c62-9cee5529c65c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.236.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:37:fc:35:60:f4:83:f9:09:fd:d2:62:7d:b8:bc:54:f0:99:
75:a7:88:12:11:5f:1b:aa:41:d1:8d:1c:0b:e6:be:1d:91:af:
01:2f:44:85:70:77:ce:a6:2f:1f:08:b3:74:d8:ed:0b:ad:1a:
a5:67:fb:fa:b1:f2:11:73:f5:d3:8d:ad:6b:fe:51:e9:5a:1c:
ba:52:db:c6:e7:78:e2:35:e4:56:c5:1a:b0:81:43:5c:fa:a1:
76:50:51:e2:22:cf:30:50:61:23:f2:9e:6a:bf:28:1c:43:07:
26:fc:06:10:1f:23:fe:ae:53:8e:74:6b:ad:b6:9f:43:9a:35:
8f:fb:a4:12:bc:ec:cf:fa:13:d9:d2:96:96:02:06:12:1c:00:
a7:16:93:fb:9c:7d:6a:3b:6e:5c:07:95:67:4a:ed:8f:a8:b4:
6c:a7:d4:a4:52:17:eb:4b:da:9e:13:96:48:8f:4e:ac:10:50:
72:43:9f:29:ba:6c:32:dd:0a:64:e5:de:9b:6e:b0:ce:8e:85:
97:da:c4:bc:19:d0:f4:d6:c2:a9:f7:3e:2c:82:52:5f:fc:da:
7c:ed:e3:10:b7:71:6d:ef:7d:12:9f:50:57:71:47:f9:07:f4:
78:73:28:66:cc:b9:f5:f1:f3:68:57:25:e2:f9:60:c6:7b:30:
fa:f6:03:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:20:16 2025 by rpki-client