Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/779a15d6-f88f-35cc-be3d-0b358c3214b5.roa
File: 779a15d6-f88f-35cc-be3d-0b358c3214b5.roa (raw, json)
Hash identifier: Fatq1pmX21OKTdlC758vhq+31LEYuEl6cb48Bf5yxXk=
Subject key identifier: 51:53:74:7F:FE:FC:AF:88:28:0E:7F:6F:AF:57:63:21:2F:8C:43:59
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F2C5E531C3A54C4C77E09DCC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/779a15d6-f88f-35cc-be3d-0b358c3214b5.roa
Signing time: Wed 07 Sep 2022 12:00:00 +0000
ROA not before: Wed 07 Sep 2022 12:00:00 +0000
ROA not after: Thu 13 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.172.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2c:5e:53:1c:3a:54:c4:c7:7e:09:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 7 12:00:00 2022 GMT
Not After : Oct 13 04:00:00 2022 GMT
Subject: CN=000c9951-99e2-46f3-93fa-df10d4ff9f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:36:da:a9:d6:66:11:32:79:05:23:52:43:73:
1f:20:db:6a:e5:a1:5e:79:5a:68:7e:49:f7:55:f7:
4e:fd:a2:95:bf:d2:0f:12:ea:a0:bf:3e:9c:60:f2:
4d:15:5b:5e:f5:aa:81:65:30:c9:ce:7b:ac:07:9f:
bb:23:7e:0c:ff:f8:01:a8:32:8c:b2:d9:99:01:df:
d3:15:3c:7e:0b:bf:8d:14:49:0b:58:36:b6:eb:bd:
7e:ac:3b:75:7c:a9:40:b6:fa:b6:74:ee:27:78:79:
53:03:76:3e:fb:cd:71:ce:7e:88:43:39:86:ad:c7:
bd:1e:c8:f9:a7:88:fb:c0:30:20:26:7c:bf:d0:17:
4f:11:85:c7:94:ef:26:a6:9a:5a:e0:7a:f1:a4:28:
0b:61:c3:11:a2:97:b1:d2:a3:3e:2f:92:91:00:0c:
2a:37:ad:4d:09:5d:b7:3d:06:6d:22:10:cd:bb:f6:
e8:11:9a:3d:fe:09:de:a6:a4:a2:5d:47:02:58:e1:
30:b7:77:f4:c8:4b:ae:74:95:d3:be:c2:dc:45:0d:
15:f2:db:a1:b6:b6:87:43:b0:21:43:87:67:99:94:
26:26:5f:af:ba:3f:c4:37:72:e7:6f:0c:ff:23:bc:
8b:05:d8:34:32:57:24:31:ad:ab:ed:e7:45:9b:e6:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:53:74:7F:FE:FC:AF:88:28:0E:7F:6F:AF:57:63:21:2F:8C:43:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/779a15d6-f88f-35cc-be3d-0b358c3214b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.172.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:1d:13:62:ff:c3:29:f6:5d:bd:66:ce:82:aa:a0:04:22:81:
75:77:13:a4:a8:99:fa:1b:fe:74:d2:9c:ee:60:5f:47:0f:eb:
ea:49:76:53:9f:62:7a:ea:91:d7:21:58:5c:1d:5e:20:61:f1:
96:3c:b8:b8:c6:f0:9d:41:22:22:14:24:ed:aa:b3:9d:d7:b1:
54:64:52:b4:66:da:04:96:93:2f:41:94:ec:e9:5f:e7:24:c3:
1b:97:d1:f5:b9:07:b4:1b:c7:8e:72:60:73:1c:ed:ab:51:3a:
d4:27:29:0f:9f:52:3d:d5:13:d9:b5:f0:e7:4d:df:9a:92:0f:
71:7a:20:27:fb:f7:99:e4:8f:fc:58:96:d2:9d:77:35:7c:55:
ad:18:7e:cb:cc:68:6f:55:90:af:d2:4e:7b:59:93:5a:57:95:
f2:03:4a:83:f2:81:62:fe:a2:fe:28:b5:c4:17:c3:29:31:33:
11:80:b5:96:2f:d5:69:94:6c:93:e7:3a:22:e2:b1:5d:bd:c5:
6e:2a:19:ed:0f:e5:8e:fe:75:75:40:34:dc:b6:53:59:18:6f:
83:be:68:db:2d:7e:5f:c8:be:24:4f:52:5c:8f:4d:8b:67:25:
4d:a8:b1:33:7c:b5:32:01:d6:37:b9:ce:37:95:4c:64:a9:cd:
83:7b:db:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:02 2025 by rpki-client