Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51aaebde-bc78-3b18-a3d5-b340235d6ab0.roa
File: 51aaebde-bc78-3b18-a3d5-b340235d6ab0.roa (raw, json)
Hash identifier: PbJrper7+3Us0Gd+p+FheBK929FGHf2/Tr9g5qJbjjg=
Subject key identifier: 83:AF:92:05:8E:7B:08:39:88:99:74:2E:4C:1F:DB:89:55:30:24:BA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF2D9DAD9E7EE1D10621B5480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51aaebde-bc78-3b18-a3d5-b340235d6ab0.roa
Signing time: Wed 18 May 2022 12:00:00 +0000
ROA not before: Wed 18 May 2022 12:00:00 +0000
ROA not after: Thu 23 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.236.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f2:d9:da:d9:e7:ee:1d:10:62:1b:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 18 12:00:00 2022 GMT
Not After : Jun 23 04:00:00 2022 GMT
Subject: CN=9e198805-5a36-4792-9fcb-e6e5485aac62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:61:8c:20:82:73:ea:e2:c1:e7:4b:9c:64:19:
a5:c1:37:c6:82:66:dd:a7:fd:8e:99:6f:2b:07:30:
fc:4f:65:5b:3d:f2:6a:c8:72:2c:9b:c8:bc:66:5a:
4c:b4:fc:a2:64:95:07:2c:60:e6:3a:ee:b6:05:5e:
d0:42:e9:48:3c:dc:b4:da:97:1d:0e:be:2d:73:56:
0c:71:0d:b7:4b:94:03:08:16:f9:fb:5b:59:06:60:
73:aa:18:a0:d3:3b:da:a1:ec:d5:03:e6:49:67:e1:
0f:d0:ee:4c:6f:92:29:bf:50:da:cc:a7:ed:7b:0d:
24:55:79:9e:be:2f:c9:a8:67:77:28:d3:0d:a5:30:
d2:b3:1e:48:5f:0e:b3:0b:36:3f:36:f6:c4:95:72:
35:f7:8a:44:60:09:be:6c:4a:5e:a6:1c:73:b2:ea:
e6:f1:e4:fa:d7:2c:1a:7e:b3:a3:fe:37:e7:35:3b:
eb:db:a5:3e:c8:99:44:65:3f:36:9b:57:1f:09:05:
fb:9b:3f:c0:35:02:0b:71:96:4c:87:7c:ad:51:fc:
1a:7d:4f:7c:27:58:75:05:a7:28:9e:08:ea:b8:42:
46:5b:f1:e0:16:f0:53:5f:b2:cf:a4:2e:62:3b:e5:
94:20:66:16:7c:74:6b:c8:01:5f:5f:fc:4f:c7:df:
db:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AF:92:05:8E:7B:08:39:88:99:74:2E:4C:1F:DB:89:55:30:24:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51aaebde-bc78-3b18-a3d5-b340235d6ab0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.236.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:1e:f5:ec:2a:ce:8d:a7:4b:9f:8a:24:84:20:ef:74:3a:5e:
33:cf:d9:71:b6:1b:95:96:85:b5:a6:83:ae:14:8c:7f:86:88:
1e:11:b0:a6:34:28:c2:20:fa:0e:ed:4f:39:bf:89:e3:74:93:
d7:d8:cb:0d:a1:ba:e4:2a:df:18:e6:8a:4e:53:9e:6b:ed:0d:
74:05:1f:b2:49:ab:af:c1:18:50:09:2c:67:f5:06:a7:04:b8:
61:8b:30:dd:36:53:8a:0a:7e:dd:01:23:fc:50:d4:f8:e0:26:
06:88:3e:43:41:2d:8b:e1:6d:2e:fb:ac:f1:76:64:d8:50:c4:
28:60:bc:55:07:5d:88:f6:f1:60:ec:d2:cc:2d:26:66:31:4c:
62:36:40:8a:63:51:a0:66:4e:19:bd:53:f3:3b:8f:ed:dd:b2:
25:5d:44:cd:82:84:e5:98:23:f4:65:04:b6:15:99:54:de:ee:
da:87:0f:e8:40:15:7d:08:28:c5:3b:4a:57:86:29:02:58:9c:
d4:37:ed:b5:01:62:c2:8b:5a:9b:bd:67:e1:d7:98:cc:05:02:
20:c6:9b:1b:d2:90:02:e7:e2:e9:06:90:6b:d7:fe:a6:26:66:
4d:da:4b:0a:2f:ec:57:26:c4:d5:c2:c8:82:0d:6b:4a:9e:28:
b2:f3:5e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:02:29 2025 by rpki-client