Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7ab89789-f6ed-3cef-9624-f95a93faf41d.roa
File: 7ab89789-f6ed-3cef-9624-f95a93faf41d.roa (raw, json)
Hash identifier: X+0Cn6wvTw4ek3RFFGn2N/aziN334Cwafc6BoNwfKtA=
Subject key identifier: 2E:9D:A9:AC:F7:B8:31:16:4C:B9:D5:34:93:B0:9F:D0:98:B7:32:C7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DA5009B5136CA53C60ECF7000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7ab89789-f6ed-3cef-9624-f95a93faf41d.roa
Signing time: Wed 20 Apr 2022 12:00:00 +0000
ROA not before: Wed 20 Apr 2022 12:00:00 +0000
ROA not after: Thu 26 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.254.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a5:00:9b:51:36:ca:53:c6:0e:cf:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 20 12:00:00 2022 GMT
Not After : May 26 04:00:00 2022 GMT
Subject: CN=d2514f65-a5c2-436b-97e8-0819b6af35a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:69:4a:b6:8e:76:e1:48:9e:83:26:12:76:1f:
a0:c7:8a:46:48:74:04:4c:12:d5:fd:57:da:69:19:
b1:ea:0d:5f:df:97:d1:86:e8:63:c1:bc:3a:4d:06:
47:a1:49:16:78:6e:d7:e6:4a:a6:60:ed:5a:66:3f:
a1:b0:10:08:7e:5b:ec:8e:03:30:ca:97:c7:74:53:
b3:71:33:e4:65:ab:01:65:7c:7e:a7:93:d1:f3:aa:
e0:8e:1f:8a:b1:92:df:a0:52:e6:e8:cb:e8:5f:32:
62:a2:e9:9d:19:10:5a:43:8c:2c:2b:df:64:cd:0f:
22:1f:74:80:10:f0:91:7d:4a:b7:a3:8d:78:26:ef:
8b:a7:80:5d:b0:ef:9f:06:bb:26:94:46:28:c7:03:
7d:d1:ec:fa:bf:07:c5:79:f5:5d:35:82:21:90:4e:
f1:98:2b:12:af:f4:37:d4:12:1d:d3:c1:00:d2:a8:
98:3b:44:d7:6b:89:73:cc:19:cf:62:98:95:24:6c:
d5:e0:ab:3b:0d:7c:51:6d:a5:fe:60:3c:21:d3:ee:
47:f6:3d:ac:f8:eb:a7:fb:8f:35:b5:7e:bd:c4:b6:
91:09:db:9b:91:dc:af:b4:45:31:12:79:52:f0:e6:
b2:1d:aa:25:c5:98:74:c3:24:90:cd:79:61:ca:d3:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9D:A9:AC:F7:B8:31:16:4C:B9:D5:34:93:B0:9F:D0:98:B7:32:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7ab89789-f6ed-3cef-9624-f95a93faf41d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.254.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:08:c5:75:bd:c1:6a:dd:c1:35:b4:42:51:f1:7e:69:dc:35:
76:ec:71:f0:80:2c:ab:70:f0:45:84:b0:3a:a0:c9:a5:2e:f2:
32:bb:93:72:aa:4b:72:ff:c2:d3:3b:81:c2:5f:8d:61:f2:be:
59:a0:9e:5f:55:87:eb:93:2b:c6:0a:69:72:03:89:62:02:3e:
89:a6:8f:3a:f9:cb:58:1b:17:24:5b:c2:5e:d6:89:d7:53:ab:
77:33:b1:0a:c8:8c:29:0c:95:f6:a4:e3:53:33:01:29:af:93:
53:74:dc:88:54:a5:1c:d5:c4:99:00:04:36:f2:80:91:b1:fe:
b6:21:76:ca:1a:67:84:f9:c8:ea:a6:e3:ef:3f:54:99:00:5b:
3a:1e:00:31:0d:ef:7b:c4:cc:59:c7:9a:c2:f7:9e:13:4e:7f:
24:b0:12:d1:a4:dc:68:4d:2f:e2:c9:e6:b0:97:2c:d1:11:11:
5f:de:f0:f8:7e:74:b5:90:ce:6b:15:8e:a2:08:ec:cf:f4:8c:
1a:56:fb:ba:26:b4:b0:27:4b:ba:31:b7:94:25:c2:13:c3:98:
03:58:ea:e9:ed:3d:de:48:4a:3e:6a:ac:d8:c4:6c:e9:6a:d9:
9e:69:0b:e8:dd:9f:32:3a:2c:41:45:8b:c8:11:fe:02:1a:cc:
8a:5f:32:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:20:01 2025 by rpki-client