Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/62982765-4c53-31b4-b3e4-8e17d24d92a4.roa
File: 62982765-4c53-31b4-b3e4-8e17d24d92a4.roa (raw, json)
Hash identifier: y+1g9jrwBm2I9v94CZz7yaLuzJ8pHpv6GnAs5Ws0NUA=
Subject key identifier: EA:86:47:1B:62:6B:68:EA:DF:CA:7C:ED:48:99:25:05:5F:49:CD:BE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F66625E93932855FAE2E5BA80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/62982765-4c53-31b4-b3e4-8e17d24d92a4.roa
Signing time: Wed 28 Sep 2022 12:00:00 +0000
ROA not before: Wed 28 Sep 2022 12:00:00 +0000
ROA not after: Thu 03 Nov 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.154.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:66:62:5e:93:93:28:55:fa:e2:e5:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 28 12:00:00 2022 GMT
Not After : Nov 3 04:00:00 2022 GMT
Subject: CN=de16a614-6d43-42be-abe0-36413fe3888e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8a:25:ab:4e:2c:94:78:ff:25:e2:6a:cc:97:
ba:17:bf:ee:8d:b6:4c:5b:18:0c:02:b1:be:d2:92:
21:16:3a:81:97:59:b3:ec:05:2d:d1:1e:8c:81:ad:
1d:fe:02:b3:d1:c6:e9:a5:18:2a:1b:58:64:44:24:
e4:d1:09:d5:61:25:1a:c4:ce:fe:1d:52:fd:9f:bf:
db:7b:71:8c:91:fa:b7:ec:11:97:28:f3:66:69:87:
fa:ea:06:b4:76:22:e4:8b:14:71:e1:19:3f:05:c4:
2a:ad:54:e1:f0:c6:64:fe:e1:76:24:94:63:9f:52:
ab:9a:53:8d:d9:ab:82:69:e3:4c:1c:b0:8f:1b:79:
29:20:fe:7d:56:1f:2d:9e:d8:f6:62:a4:93:68:59:
a7:e5:5b:73:6d:e0:b4:b4:a4:78:76:ba:04:e6:78:
ec:64:a3:e3:4a:ba:e6:29:88:63:27:f7:4f:d6:3e:
d8:01:04:fc:b7:c5:07:48:9b:82:7b:2d:62:87:a1:
88:9d:55:9b:4c:48:d8:a9:a2:c8:28:0c:00:c8:35:
ef:a5:4a:91:ac:c9:a0:3b:26:87:52:4e:be:f4:0b:
3d:32:b8:4c:6a:11:7c:83:f7:f7:79:1d:d7:ee:36:
96:8b:22:be:7e:cc:a0:39:0e:4f:1f:21:b8:2a:1b:
fb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:86:47:1B:62:6B:68:EA:DF:CA:7C:ED:48:99:25:05:5F:49:CD:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/62982765-4c53-31b4-b3e4-8e17d24d92a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.154.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:36:91:1f:91:78:d3:53:b3:59:9b:d3:81:b7:05:5e:06:c2:
a8:87:f2:a4:83:e3:64:03:51:7a:b9:c2:f2:43:cb:da:74:75:
c2:2a:64:3d:55:fd:0f:56:20:e7:f1:e0:12:69:5f:00:62:6a:
7f:76:61:aa:3a:2a:56:d0:55:b0:49:8a:49:98:2f:da:1c:e6:
66:07:d5:57:0c:bc:71:6f:52:9c:99:a4:b4:28:82:f6:79:f1:
ee:e3:4f:1d:fb:d6:a6:66:02:a2:20:03:bb:ca:da:22:08:41:
ed:4b:01:bc:8f:7a:be:75:72:55:96:f9:a4:86:3e:88:dc:dd:
2a:71:00:2f:1d:c6:c4:37:2e:cc:3b:63:ef:2a:07:ea:80:da:
a9:1e:bf:39:16:e0:18:b1:0f:75:ea:55:7a:4d:4f:dd:6d:37:
c6:e3:06:40:25:99:63:73:89:c2:c3:f8:ce:ec:17:0d:b7:63:
00:6f:ee:3e:04:82:df:a2:11:02:a2:83:85:92:e9:a0:fd:27:
c1:56:39:34:56:1b:d5:29:3d:0e:57:43:05:76:ff:76:60:9f:
67:0e:71:93:f4:ee:0f:c2:f2:86:bf:8a:a0:b7:36:96:b6:67:
99:d1:4a:0c:e1:b5:b5:28:cf:c5:4f:61:6b:fc:16:39:e8:6d:
30:a4:ae:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:46 2025 by rpki-client