Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/579e0914-d469-3317-976a-ab8b19c58e3a.roa
File: 579e0914-d469-3317-976a-ab8b19c58e3a.roa (raw, json)
Hash identifier: QdD6nMYLWxVhB4hXEm5pROxCoBVNrgY0gdxAOzXXHzo=
Subject key identifier: 6D:8A:D5:F4:B7:F0:48:05:27:CB:01:F6:C2:88:76:81:68:01:9D:DA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404E193547D462711825973800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/579e0914-d469-3317-976a-ab8b19c58e3a.roa
Signing time: Tue 20 Dec 2022 12:00:00 +0000
ROA not before: Tue 20 Dec 2022 12:00:00 +0000
ROA not after: Wed 25 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.245.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4e:19:35:47:d4:62:71:18:25:97:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 20 12:00:00 2022 GMT
Not After : Jan 25 05:00:00 2023 GMT
Subject: CN=c4e48e2e-fe96-44c1-99c9-6c57a4f7c072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:95:67:4b:d6:b0:d6:e3:27:e5:74:0c:e0:
a9:24:9a:f4:5c:8d:1b:35:3b:3f:48:d5:a1:3c:1a:
7d:50:1a:b8:87:5e:77:81:31:ec:49:22:ed:7e:0f:
10:32:23:28:18:df:29:be:1e:7c:72:d3:19:ca:22:
69:e3:6f:09:b2:c3:88:d1:1d:cb:92:2c:8b:6a:2a:
56:d2:d8:65:3c:77:9c:c6:1b:1b:8a:85:d3:f6:b9:
80:e7:69:eb:48:4e:41:e8:c0:18:35:f0:1b:0d:81:
91:21:2f:14:0d:af:77:c3:ba:91:3a:fa:12:cf:4d:
7d:8a:fa:37:6a:6b:92:8b:d6:13:7d:09:08:13:79:
53:27:12:ad:b3:91:d9:c3:bd:d3:d2:5e:c8:f8:95:
68:b5:2d:2f:e9:30:cf:5d:60:85:d7:aa:58:7b:36:
3f:9f:56:0a:10:60:a2:d4:81:5b:93:a5:4a:09:a5:
44:f2:f0:27:4b:32:3d:59:d6:e9:ba:f6:80:36:0f:
00:1d:e3:2e:0e:10:81:85:0a:a5:af:9d:14:b6:bd:
ce:43:b2:3e:dd:93:fc:f5:92:69:f7:76:dd:b8:71:
66:6d:9b:d5:72:4d:84:c9:f1:24:a4:7c:80:d1:2c:
19:29:a5:0b:7f:f8:13:d9:19:f3:2a:f6:28:0c:94:
94:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8A:D5:F4:B7:F0:48:05:27:CB:01:F6:C2:88:76:81:68:01:9D:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/579e0914-d469-3317-976a-ab8b19c58e3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.245.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:88:41:60:81:68:30:3f:03:20:dc:70:fe:b8:db:a1:61:b6:
1e:ea:37:61:ab:65:f1:cf:88:86:11:74:f6:8d:c7:e3:62:8c:
a6:4a:67:f4:9e:17:69:ce:54:c2:97:6e:03:33:26:ec:01:1e:
24:74:86:9a:0b:67:4b:0c:de:87:ed:65:93:63:e7:45:62:e1:
50:20:03:e9:f6:e1:64:90:80:fe:a7:ba:59:5f:fa:5f:3b:04:
cb:4c:33:ce:8e:e0:39:c0:35:e0:2f:ff:91:fd:98:37:ee:a9:
a9:28:d2:1f:8f:af:87:c3:7f:3c:8d:c8:9f:8c:83:9e:48:f9:
16:8c:9f:a0:28:4c:44:b3:b1:dc:59:6d:53:81:29:7e:f8:2a:
4f:0c:da:3d:9f:6d:fa:e2:ef:07:f7:03:5e:7d:fa:f3:06:56:
cf:73:5f:36:2d:b6:5d:1e:a0:f8:65:fb:e1:47:a9:4a:2e:ff:
5b:50:5e:d2:ec:00:3a:e5:2f:92:0f:b8:a8:47:58:f0:45:e2:
70:cb:f5:70:be:a7:bf:f8:31:0a:d1:c6:b3:32:da:01:9e:89:
dc:92:66:24:4c:a7:35:39:a3:b8:25:da:ed:ad:23:35:bd:eb:
5b:f5:a1:f8:7c:29:aa:18:1d:56:95:8d:e4:0d:89:ac:a7:b0:
54:b0:a9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:04:33 2025 by rpki-client