Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ea910cb-f596-370d-a16f-0a7f179c1988.roa
File: 4ea910cb-f596-370d-a16f-0a7f179c1988.roa (raw, json)
Hash identifier: FX1sJooQrPlVtuDgxns8pCq4RrOy3XSn/3eMu0eqDq0=
Subject key identifier: C8:01:B2:E4:4E:33:8C:75:7D:98:41:FB:07:72:EB:D9:AA:2D:C3:93
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F04AC698996AB849E2B1ED480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ea910cb-f596-370d-a16f-0a7f179c1988.roa
Signing time: Wed 24 Aug 2022 12:00:00 +0000
ROA not before: Wed 24 Aug 2022 12:00:00 +0000
ROA not after: Thu 29 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.253.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:04:ac:69:89:96:ab:84:9e:2b:1e:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 24 12:00:00 2022 GMT
Not After : Sep 29 04:00:00 2022 GMT
Subject: CN=c2ea1d32-122a-4951-84c0-5854fecd761e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:6e:d9:21:7b:69:06:90:e1:b9:b0:f2:4b:
44:e7:8d:95:ac:d9:be:18:e8:79:72:33:76:47:20:
e2:87:5f:15:be:94:13:79:87:85:fe:42:20:9a:ab:
b9:af:63:8e:7d:d3:9d:28:7f:71:e4:f8:38:3b:a1:
eb:15:b1:d1:68:96:18:d5:09:87:cd:b5:8c:98:43:
04:ad:8e:77:61:36:63:d1:4a:ee:0c:f3:6b:b5:4d:
31:ac:d3:87:f1:eb:7f:f4:11:6b:1f:dc:db:3d:0e:
ce:55:55:f1:8d:cd:00:22:65:e5:a5:67:0d:83:9f:
cd:77:36:e3:e6:9e:e3:50:7a:e8:bd:48:1d:f2:55:
b8:35:4c:eb:60:17:46:f8:70:af:e1:2f:62:db:8a:
ce:c5:eb:6c:5a:2d:09:bc:a3:a3:15:91:63:40:5a:
c5:78:5c:48:55:c7:64:21:21:b3:d6:e9:8c:30:f3:
45:f8:6c:fa:83:15:3f:cf:be:33:45:a1:e5:c2:49:
b8:43:a3:89:f6:67:ac:d6:00:f3:59:91:df:fd:f0:
1e:b2:3d:d5:7f:dc:f7:44:cc:50:1a:5c:d0:39:6a:
bc:3f:09:ab:a0:c7:cf:6a:9f:7b:df:3d:c9:34:81:
c0:f3:48:d5:58:1b:5e:ae:db:0f:57:75:b0:80:03:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:01:B2:E4:4E:33:8C:75:7D:98:41:FB:07:72:EB:D9:AA:2D:C3:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ea910cb-f596-370d-a16f-0a7f179c1988.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:15:c1:45:c6:de:35:06:4d:18:c5:46:97:ce:61:48:3d:48:
23:0e:ee:46:01:29:76:9d:29:30:96:59:35:fd:b4:7f:ee:c6:
66:d6:d3:14:3c:82:4e:b9:9b:72:26:fe:aa:3b:21:73:a8:3e:
12:1d:95:2a:d7:7d:5e:5c:98:bf:52:19:b4:a7:fd:fb:cc:35:
34:64:1e:0b:56:00:d4:ef:4c:86:ff:12:25:69:b4:2d:9c:ee:
de:7c:d7:4c:7b:58:ff:e9:3d:94:ec:85:e6:73:96:c5:bf:65:
64:72:43:d8:b9:c5:88:0c:f9:6a:35:38:15:4a:2e:32:bd:1f:
d2:6f:47:47:ab:3e:03:b4:8f:ff:2e:82:a8:8b:c3:c0:c0:fd:
cb:28:8c:f5:99:08:b5:d6:7e:15:35:42:96:be:a2:b4:20:5d:
e6:8b:6d:0e:d1:54:fe:ec:ca:9c:52:81:89:84:61:16:fb:06:
7e:4f:c3:da:7d:61:43:92:fa:34:3a:34:b3:8c:89:c4:88:55:
08:20:b7:e5:6b:c3:cc:41:e7:c0:3b:e5:74:09:dc:f7:67:3a:
da:59:0d:ae:64:15:6c:34:e1:5f:4e:aa:0b:57:49:90:c0:80:
c9:51:19:91:e4:3a:dc:29:7b:be:e0:0b:0d:af:aa:14:dc:7f:
54:e6:5f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:12:31 2025 by rpki-client