Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5796ad38-d0a4-352d-9f70-d163c685d63c.roa
File: 5796ad38-d0a4-352d-9f70-d163c685d63c.roa (raw, json)
Hash identifier: VVerjxDBNAEfxcmyVF3tqf55YHxHY/yehNPl+BAISxI=
Subject key identifier: 46:68:3A:02:8A:E0:C1:B5:E1:F7:8D:63:53:D4:DE:C0:F3:A4:4E:42
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DA525D3F83F32A2DB7F79C040
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5796ad38-d0a4-352d-9f70-d163c685d63c.roa
Signing time: Wed 20 Apr 2022 12:00:00 +0000
ROA not before: Wed 20 Apr 2022 12:00:00 +0000
ROA not after: Thu 26 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.205.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a5:25:d3:f8:3f:32:a2:db:7f:79:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 20 12:00:00 2022 GMT
Not After : May 26 04:00:00 2022 GMT
Subject: CN=42fd0146-8544-4b01-8bea-37df720512d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3a:9c:60:57:85:53:cc:82:d3:32:52:b6:0c:
02:ac:0d:fa:e3:3a:d7:d2:52:a7:ee:74:c0:be:98:
93:25:a4:1e:30:67:3b:73:9a:f7:96:25:d3:3e:17:
f3:56:db:6b:6a:c4:ae:bb:53:59:03:b4:32:53:bb:
5d:18:25:d8:9f:d2:55:0f:5e:09:ec:15:dc:ca:f1:
3e:b2:67:33:13:5f:bc:25:01:3b:a9:06:1c:97:b2:
01:e7:42:1d:22:88:04:0a:f1:fb:fd:48:7e:e7:3b:
49:3c:31:d6:9d:de:bb:ef:55:07:b3:c1:5b:2b:04:
05:25:5c:73:21:dd:08:9c:fd:20:dd:a2:51:0d:e2:
4f:56:10:40:90:c9:c4:e0:5e:e5:cc:27:c2:57:d6:
4e:a7:de:97:1d:8c:c1:32:e8:92:6c:75:b5:cd:5d:
f5:90:f5:e8:83:5e:7e:7e:45:16:6e:59:c7:3d:17:
90:18:6f:8c:2d:e8:c2:db:1e:ba:d4:1f:e3:94:77:
15:15:03:ec:48:9b:11:e6:f6:7d:10:2d:30:5b:a9:
9e:ef:a0:31:7f:ba:21:d0:43:28:37:2b:c7:77:a0:
fe:1c:23:76:86:d8:6e:04:19:52:10:05:4d:53:a8:
97:e5:fe:a5:d8:64:7a:5e:22:c5:ff:b2:e7:a3:df:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:68:3A:02:8A:E0:C1:B5:E1:F7:8D:63:53:D4:DE:C0:F3:A4:4E:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5796ad38-d0a4-352d-9f70-d163c685d63c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.205.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:12:08:09:9d:3e:ed:a9:05:d9:f4:4c:e1:8b:6d:ec:de:8a:
f8:1e:3a:1b:bf:d0:28:f8:76:6a:ff:68:ea:bf:6f:04:92:95:
b4:ce:c3:80:bb:04:12:5d:76:6a:fe:3f:90:de:e3:47:fe:ec:
a5:65:89:3e:bd:26:33:c1:90:c9:7d:7a:ad:fd:0a:bd:29:f9:
fe:3d:ae:20:0b:b0:3a:74:0f:5f:72:3f:ce:62:df:cc:d4:74:
b7:df:c4:ff:7c:28:fc:13:58:79:78:a8:5d:ac:c9:cd:64:57:
7b:21:7f:6e:fc:0f:3d:ee:a6:28:86:56:67:14:b6:bd:7e:cf:
05:f2:55:fb:29:46:a9:9c:25:6f:76:a7:b6:60:52:bc:07:e5:
1f:af:b6:9b:3a:cd:3c:87:a7:9a:64:e8:ea:9f:76:3f:92:26:
7b:eb:58:53:99:f3:96:98:28:56:3f:9a:fc:08:f2:79:ff:49:
33:cd:60:f0:71:e7:b1:50:86:66:4d:3a:c1:6c:ab:04:6a:38:
c9:dc:06:63:51:aa:1c:d6:b6:e4:9c:7e:5a:8c:39:b6:1b:a7:
bc:aa:8c:9e:a1:36:a3:c2:4e:8d:e0:50:6a:2c:ca:9e:0a:c2:
6a:44:47:85:a7:fe:af:9d:aa:69:b5:2d:3f:b6:9f:91:e0:ea:
d8:eb:13:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:36:48 2025 by rpki-client