Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5266ca2c-7535-3773-9ac1-0138abfcdddd.roa
File: 5266ca2c-7535-3773-9ac1-0138abfcdddd.roa (raw, json)
Hash identifier: gqmlrHaNFv2+eSMFJUhFSO7OxmXsb9wkleVUvIoKZTU=
Subject key identifier: FE:DE:EA:95:DE:5B:97:5E:B2:28:54:24:B8:15:22:5B:7D:67:11:8B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584051D211FEFF012D728ED1CE58
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5266ca2c-7535-3773-9ac1-0138abfcdddd.roa
Signing time: Wed 21 Dec 2022 12:00:00 +0000
ROA not before: Wed 21 Dec 2022 12:00:00 +0000
ROA not after: Thu 26 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.215.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:51:d2:11:fe:ff:01:2d:72:8e:d1:ce:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 21 12:00:00 2022 GMT
Not After : Jan 26 05:00:00 2023 GMT
Subject: CN=522b69fb-f19c-47b2-bfa0-0a5da78d3486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:81:8e:5c:0e:c7:da:10:c1:2b:28:8a:35:84:
be:e2:49:e7:d3:86:75:c7:17:fc:d1:d9:c1:21:84:
7f:3d:51:d1:13:0a:b5:ae:34:f0:d0:d8:dd:ce:ef:
24:ff:89:f9:a3:a6:da:45:28:86:8f:a0:e3:48:c9:
b4:84:a6:42:36:31:45:ee:3d:a2:5d:45:6f:6e:c8:
9c:b2:73:d2:50:47:b8:79:9d:c6:d1:b2:1f:6a:f4:
0c:5d:43:a2:36:77:45:1c:37:88:ed:4e:d6:28:d1:
bb:11:e7:bf:ed:56:82:4a:a8:4d:72:d6:46:8b:aa:
45:52:e3:03:27:96:15:e6:47:d6:73:3d:7a:fc:cb:
ca:fc:2a:32:ca:46:a6:e9:35:c3:eb:86:44:3f:8b:
67:80:92:20:59:ce:7f:1b:45:e7:5e:b2:3e:b9:cf:
bb:4d:ff:5a:9a:52:25:af:86:67:b2:bc:90:89:db:
b5:33:30:92:89:47:be:5f:51:42:2d:e1:f7:32:c5:
24:49:f6:39:e9:05:e1:db:0a:e8:dc:44:4f:b9:e1:
ac:77:c1:94:bf:36:a7:94:ae:da:87:89:c3:e9:6a:
77:2c:73:e6:b7:52:ce:5f:ad:96:96:16:61:17:51:
9f:88:c5:d9:20:05:0f:41:99:1b:64:03:9a:b5:d4:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DE:EA:95:DE:5B:97:5E:B2:28:54:24:B8:15:22:5B:7D:67:11:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5266ca2c-7535-3773-9ac1-0138abfcdddd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.215.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:cb:b2:9e:a0:c8:be:1a:ed:18:e2:02:cd:bc:c6:4d:9f:85:
38:20:01:d1:06:5a:90:f0:90:6a:7f:e8:70:8b:29:c9:bb:81:
94:a3:5a:9c:e7:7d:41:53:16:e1:fe:b2:b3:df:cd:3b:47:b0:
80:0d:d5:3e:16:e5:3b:ca:25:28:a2:d0:38:c9:a9:bf:5f:8d:
0b:51:ef:41:57:90:69:11:a7:93:2d:cb:f1:2a:42:e4:c1:fd:
89:50:4b:22:cf:b1:ee:26:51:0d:85:5a:98:06:3c:ef:28:a6:
b4:4a:b2:2c:d3:b4:e8:9d:5c:71:c4:46:c4:b6:3a:21:00:82:
0d:b9:e0:c5:fc:10:3d:84:76:72:47:b1:0d:2b:28:e9:5a:5b:
df:04:e6:d0:fc:20:7f:23:af:b9:65:81:56:73:21:60:44:c3:
ec:69:30:56:de:55:9b:6f:f5:f3:ca:cc:c2:8f:16:fe:39:36:
df:3b:ce:66:37:f4:4f:c8:8b:f7:f4:f5:8b:ac:af:35:c0:73:
a0:bc:d3:8c:f7:c5:d7:57:13:bc:22:aa:70:0c:0c:32:0d:ef:
b3:3d:03:b0:3a:24:35:6b:8b:c2:b9:f7:7e:13:8f:b5:c3:18:
34:77:f1:b7:bd:77:49:0b:71:be:8d:5a:ab:08:80:e7:fc:76:
e6:a4:72:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:52:36 2025 by rpki-client