Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/71f49bf7-7b71-3c7f-be35-70706e1c5adb.roa
File: 71f49bf7-7b71-3c7f-be35-70706e1c5adb.roa (raw, json)
Hash identifier: TOVhLGfylWM5NiUDxHh45T17lCgDslfJ1rGuSsf9fe4=
Subject key identifier: E4:3D:19:9A:E4:8F:56:54:BD:BC:7C:DE:12:5F:45:41:0B:34:AB:4B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D2F41DBD681D9227BA2076400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/71f49bf7-7b71-3c7f-be35-70706e1c5adb.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:41:db:d6:81:d9:22:7b:a2:07:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=085603ce-d836-463c-8b10-f02491a46cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7c:6a:69:ae:a9:2b:f0:f5:8c:fe:da:29:e9:
d0:3b:b2:ee:81:f9:e0:58:21:28:2b:1f:fb:63:b6:
f4:21:22:10:d8:7e:e9:98:91:32:42:8c:d0:f9:2a:
89:61:c1:b3:ed:e2:65:e7:0a:77:03:ef:98:8f:60:
c3:96:af:5e:bb:43:69:dd:9e:ea:bd:ed:70:23:62:
88:c4:fd:5f:b4:a8:75:14:94:43:d3:84:ca:44:2c:
2c:e8:0d:dd:6a:f6:a7:b1:d1:70:71:19:b6:d2:09:
87:09:d4:d8:e5:61:85:95:9a:fa:83:3c:4a:17:4b:
fa:89:97:78:53:17:d3:7a:69:54:d3:13:d2:ff:94:
5a:15:79:d6:46:5a:1f:7f:af:f3:ce:1a:e1:64:e9:
d8:cd:6d:4c:81:c6:40:49:a8:90:b8:bd:62:50:e0:
95:ee:01:5a:6e:06:03:e5:bf:1d:8e:b5:29:ab:b7:
87:44:d7:35:f2:d9:58:a6:4e:90:4e:f3:90:7a:03:
32:71:2d:86:d6:d4:de:6e:c8:ba:48:9a:48:75:86:
42:86:43:ae:39:5d:a5:3e:69:3c:ac:f8:9a:9d:02:
72:d9:8a:fe:fe:18:dd:c2:1e:23:73:b6:7a:f7:f4:
b3:3f:4d:86:3d:27:b5:38:e9:47:a3:60:61:8d:7f:
09:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3D:19:9A:E4:8F:56:54:BD:BC:7C:DE:12:5F:45:41:0B:34:AB:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/71f49bf7-7b71-3c7f-be35-70706e1c5adb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:8e:c6:9d:59:79:12:98:d9:83:cf:92:c1:27:28:5a:70:09:
95:d8:bd:3e:7e:c1:b6:04:03:a0:72:2e:d5:e1:5b:30:4c:a4:
ae:44:57:0b:72:01:fa:99:93:e2:e8:6a:0f:97:de:db:00:a7:
a0:e1:60:09:fa:5a:26:0c:cc:4d:70:c2:0d:c3:24:20:33:f8:
41:46:dd:eb:9f:62:3b:20:39:11:1a:36:05:3b:0f:89:44:8f:
70:cd:c4:0f:ab:84:83:77:ba:00:64:c4:3e:7c:67:0d:9c:1c:
c0:5d:ca:c4:ab:a3:3f:d3:ec:32:e5:64:7f:4e:a7:e0:da:41:
67:d9:1f:8f:5e:e4:80:7c:09:5c:4a:45:c1:25:d9:f3:07:73:
b9:f3:4d:df:1e:16:c8:0d:c7:4d:ea:86:b3:3b:46:c3:b0:c6:
b0:3b:11:f3:f6:dd:f5:67:7c:03:d5:bc:83:b6:b1:09:e2:91:
ef:bb:7f:cf:6a:9f:f2:3e:13:58:f3:b4:a5:12:70:66:54:cf:
c6:86:82:37:d1:be:cd:8b:67:83:9c:65:48:48:4c:50:73:03:
45:50:12:18:4d:32:0f:d1:f8:5d:8c:36:f6:80:fe:5d:0b:c9:
c8:16:b8:99:40:cd:3b:74:2f:ab:f0:ba:08:8f:3b:0b:1b:17:
f2:f7:33:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:50 2025 by rpki-client