Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64a17459-dbbc-369a-afa3-c368801ea083.roa
File: 64a17459-dbbc-369a-afa3-c368801ea083.roa (raw, json)
Hash identifier: h0s1odn0mTyd/LghZLKW95zS1r+KJsJYue0xNlEG5PI=
Subject key identifier: E3:17:7B:79:E8:A3:F0:A9:BB:AF:C7:A0:92:EE:E2:90:25:08:45:7B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EC93B97286E58B9CCE40FBB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64a17459-dbbc-369a-afa3-c368801ea083.roa
Signing time: Tue 02 Aug 2022 12:00:00 +0000
ROA not before: Tue 02 Aug 2022 12:00:00 +0000
ROA not after: Wed 07 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.250.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:c9:3b:97:28:6e:58:b9:cc:e4:0f:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 2 12:00:00 2022 GMT
Not After : Sep 7 04:00:00 2022 GMT
Subject: CN=823cccf0-ce8e-4e69-bdf9-1d28938b2d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:11:dc:94:ed:25:65:eb:0d:bc:0f:b1:1e:
df:7d:22:f5:5b:92:3a:38:41:85:be:d5:28:a6:14:
e4:a1:2a:77:1c:ac:eb:df:3b:ef:ba:17:26:b4:52:
c5:ff:d3:0d:ab:73:96:2b:c7:10:19:a9:04:68:cb:
c3:23:09:ea:98:03:b6:b3:d8:ce:45:79:28:af:86:
8e:44:27:5a:22:8a:05:f7:15:5c:c7:79:c1:d4:c2:
62:cd:93:fe:47:7b:a3:db:d6:d3:8f:b2:23:62:34:
a8:b0:09:72:50:04:07:f5:a4:05:29:b5:77:33:64:
28:49:ad:a8:26:26:ed:7f:e8:b6:32:f8:7b:32:d3:
51:a1:f7:d4:7f:9c:d4:19:40:9f:f8:4c:fe:8a:ca:
2c:70:c5:0e:35:a7:66:21:ee:47:37:bf:88:6c:d6:
c7:fa:49:5a:ee:0a:a4:4f:89:14:1f:56:46:cb:ca:
39:4a:8c:27:20:63:b6:1c:4b:03:a2:18:d0:a4:41:
eb:54:b6:4b:80:7b:48:f3:96:c4:13:e9:c6:52:3b:
f1:f9:7e:db:2b:35:07:f5:69:39:be:46:b5:e4:54:
fa:c6:05:28:18:d4:12:49:27:44:7d:02:c4:da:a3:
8c:fb:b2:a0:0c:6b:35:28:9e:7d:4c:d8:5f:58:b7:
34:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:17:7B:79:E8:A3:F0:A9:BB:AF:C7:A0:92:EE:E2:90:25:08:45:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64a17459-dbbc-369a-afa3-c368801ea083.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.250.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:a3:a4:7c:bb:36:58:6a:0a:25:20:89:d0:a2:e3:7f:64:de:
97:f0:8d:86:29:b2:92:00:87:e0:62:b4:50:9e:8b:bd:93:a5:
21:45:08:c8:5c:2c:b0:69:06:2c:ea:8d:c4:b4:bd:8b:bd:9e:
42:e4:cd:8f:53:d9:d8:55:6f:89:9a:91:60:fc:e2:d7:32:58:
62:b3:ac:28:9a:91:da:45:13:49:b5:56:61:af:2e:aa:db:65:
9a:3c:7c:df:e6:3f:da:07:9c:d7:f6:3a:e8:01:6c:80:bf:bb:
86:26:51:e3:56:47:bd:b0:0a:1d:c6:75:06:e9:c2:b6:fd:9c:
56:ec:3c:94:b3:ad:3c:5e:cb:d0:e8:8e:ce:02:2c:9b:0a:7f:
72:12:d1:be:a8:2c:96:d0:08:6a:99:2f:7c:c3:64:2f:19:1b:
8d:ce:fe:5b:a2:eb:1f:eb:3b:f9:b0:f8:a9:d7:46:16:61:63:
cc:1a:51:07:22:ab:5f:6b:c3:df:de:35:78:d7:cd:3e:11:36:
f4:07:30:ba:99:ed:05:9a:17:89:24:9d:d4:e9:47:5e:7d:33:
9a:2d:94:64:90:dc:78:9e:c9:5a:d1:d7:9c:98:4b:c0:8a:97:
bf:34:db:a6:1b:31:cf:b3:f2:9c:29:06:f0:27:18:33:2e:1d:
cb:ee:8f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:07:23 2025 by rpki-client