Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/59badf50-4bd1-380c-8473-3c9c7f199cfd.roa
File: 59badf50-4bd1-380c-8473-3c9c7f199cfd.roa (raw, json)
Hash identifier: 4yA1G7sWV2ERy7PlEY8CzQYHID6hDsV/3yuUhBRR4Gs=
Subject key identifier: 84:20:20:F0:3A:0A:6D:FD:91:BB:D9:B0:02:17:81:E8:9F:3C:14:0A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E68293BA56AEACD1FEB3ACE00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/59badf50-4bd1-380c-8473-3c9c7f199cfd.roa
Signing time: Wed 29 Jun 2022 12:00:00 +0000
ROA not before: Wed 29 Jun 2022 12:00:00 +0000
ROA not after: Thu 04 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:68:29:3b:a5:6a:ea:cd:1f:eb:3a:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 29 12:00:00 2022 GMT
Not After : Aug 4 04:00:00 2022 GMT
Subject: CN=51579dc9-1f2e-4115-9f2c-800d88d048fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:3e:89:e3:60:48:46:c6:3d:3f:26:22:aa:
73:78:e2:2a:1e:76:ef:a9:78:20:53:38:86:13:29:
76:55:6d:65:81:2f:ba:e0:60:5a:cc:bd:e9:31:ed:
84:79:79:a7:1c:bb:16:3b:c5:ca:c1:78:e7:c3:7a:
80:33:ba:1b:38:ac:a4:a7:93:d1:7d:0d:e1:4b:ae:
53:c6:d3:58:a3:0e:ae:40:5a:a1:8e:83:2d:98:09:
cf:5b:93:17:bd:46:16:17:40:52:fd:a1:5d:87:b3:
a1:5b:7a:5a:ba:d1:92:d2:70:58:8e:7d:e5:b1:d4:
9b:08:d4:23:d7:b2:f0:a7:b1:39:0c:03:c5:35:48:
d4:d4:8c:23:f7:19:be:a1:23:c0:f1:6a:41:1b:e0:
ed:96:9c:a4:37:1d:d7:ce:62:27:b5:86:fd:90:81:
65:03:ef:73:3b:60:a1:3d:6b:08:8d:b5:69:95:de:
a8:05:be:3e:e2:0f:21:77:5d:e7:38:89:0a:74:9b:
47:c3:4d:c9:76:e4:5b:3d:f9:8a:96:09:5d:ae:d4:
5a:1c:5c:0c:0f:11:86:e6:0d:d6:e6:5e:22:bd:29:
ec:dc:51:ce:4d:10:72:d6:0a:d1:3b:47:59:26:8e:
fd:45:83:eb:f5:11:a2:69:9b:51:65:dd:bd:93:9c:
87:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:20:20:F0:3A:0A:6D:FD:91:BB:D9:B0:02:17:81:E8:9F:3C:14:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/59badf50-4bd1-380c-8473-3c9c7f199cfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:cf:c2:6d:50:90:ac:e3:4e:cf:7c:05:1d:49:96:30:71:f7:
bf:ea:05:86:94:3a:71:f6:2f:28:92:2e:35:18:20:dd:12:46:
89:47:df:c5:45:2f:3a:7e:8d:a6:ac:9b:35:7f:30:70:3c:10:
27:88:30:c5:fa:9d:77:1c:07:50:2b:90:fb:08:1a:65:70:9d:
08:7c:05:94:0b:03:71:61:e3:9f:1a:f3:8d:24:2a:72:74:b1:
b2:f7:37:df:1c:1c:c1:50:ac:ca:64:ed:7d:2e:88:c7:38:ca:
4c:02:c1:a7:00:37:1a:c1:7e:3f:30:af:02:bb:ed:43:a5:a8:
c9:2f:d6:67:3e:82:5e:19:1f:de:b9:cc:9e:1a:cb:80:62:31:
11:7a:f1:d1:a0:c0:45:f1:48:a6:7f:bb:7f:9a:84:73:68:fe:
0f:a5:0e:5f:3b:d6:bf:2f:0f:09:a2:cc:57:b5:a7:7d:56:da:
92:b2:8b:03:c5:46:b1:77:6d:f1:86:d3:b1:00:03:19:ff:5d:
e8:53:e7:40:77:83:38:fc:99:5a:47:37:52:61:c4:54:9e:a0:
bb:b5:d6:73:d8:5c:fb:8b:f0:59:5d:cb:57:74:a4:2f:b8:7c:
f3:26:0e:9f:78:cb:b8:b7:0a:c1:f0:02:93:44:9b:f0:99:b3:
ad:83:b4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:15:12 2025 by rpki-client