Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8652cc63-68a4-38af-9d5b-2bade9379f2f.roa
File: 8652cc63-68a4-38af-9d5b-2bade9379f2f.roa (raw, json)
Hash identifier: vH6FbIHQc80q6a+KQcF225olxmb4LI+XDsIMiRbgSH4=
Subject key identifier: 48:43:B2:A6:34:36:87:83:90:57:29:2E:FB:1E:EB:E1:B5:FE:56:A2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7A554ABC0A4045E71E4B4500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8652cc63-68a4-38af-9d5b-2bade9379f2f.roa
Signing time: Wed 05 Oct 2022 12:00:00 +0000
ROA not before: Wed 05 Oct 2022 12:00:00 +0000
ROA not after: Thu 10 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.200.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7a:55:4a:bc:0a:40:45:e7:1e:4b:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 5 12:00:00 2022 GMT
Not After : Nov 10 05:00:00 2022 GMT
Subject: CN=6d5c352f-b3d5-4284-810e-5a8772a90fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:03:4b:c8:ad:4a:cd:42:ea:18:c9:39:96:
dc:54:93:bc:b6:55:5e:f6:c0:8c:d6:5c:2e:8e:36:
49:d2:16:68:c4:06:3c:3c:21:c2:5f:84:11:63:a5:
73:a3:83:38:84:0c:d6:69:ee:95:fd:40:ae:57:4b:
a0:27:b1:99:dc:c4:5d:a3:82:1c:e5:8d:17:81:96:
4e:3a:0d:44:fb:52:cf:ee:b0:7d:0b:52:bd:6c:db:
61:fa:8b:e1:1d:d3:55:92:94:65:35:38:3a:3d:a0:
52:fc:ec:b1:87:7c:d6:03:9b:8d:02:82:99:14:21:
56:7b:5e:bb:79:2f:28:de:04:8a:58:9c:53:4a:4c:
cf:ae:c6:a6:b4:6d:86:cf:17:7b:32:75:28:69:15:
7d:8c:fa:42:11:aa:fd:62:11:62:aa:e8:e1:c6:80:
2b:d9:d7:36:4c:33:05:d0:00:12:51:41:1b:40:3f:
02:fc:c5:89:bd:c2:4f:47:41:a0:5e:15:d7:e0:5f:
34:71:09:68:a7:54:84:e2:eb:0a:01:a2:c0:43:93:
a1:a3:27:ff:00:86:38:96:5a:a9:c3:72:a8:10:0a:
74:d4:fd:0a:b6:a3:70:ed:09:a2:be:43:ec:fd:0f:
c7:84:0c:35:d5:67:61:93:11:86:be:15:57:04:4c:
da:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:43:B2:A6:34:36:87:83:90:57:29:2E:FB:1E:EB:E1:B5:FE:56:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8652cc63-68a4-38af-9d5b-2bade9379f2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.200.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:a5:ac:0c:d3:7a:a6:b3:13:d6:37:c4:5f:75:c2:7b:67:c6:
20:19:7e:f5:95:37:80:61:20:a1:e4:13:40:51:e5:13:db:83:
c2:df:3d:d9:27:c7:fe:19:9f:92:07:3f:a6:cf:86:c2:87:9d:
3f:0c:a0:89:76:8f:70:cb:5a:e0:24:a4:71:34:28:bd:c7:03:
7c:62:8a:da:10:1a:4d:65:63:63:54:70:be:3f:35:f1:53:b4:
72:1b:87:dd:c9:25:8c:a8:0e:98:3e:ac:56:ab:e8:05:47:9d:
37:23:89:ba:80:bd:7b:8b:65:7d:07:c4:d0:d0:54:5d:5a:75:
51:7d:e6:c9:7f:09:97:20:85:d5:ea:62:6a:87:66:d4:b9:97:
53:7f:28:4b:dc:c7:38:b6:aa:fb:33:4d:57:5e:24:b5:1a:6f:
ed:a3:00:f0:99:06:78:a0:93:f1:90:ef:f3:99:7e:54:c7:d0:
88:b9:f5:59:b0:ce:d6:f1:26:32:f7:91:8e:97:dd:ba:98:6d:
c3:48:c8:15:e7:a7:7a:d6:5b:da:db:ef:3b:4b:2e:1d:49:bc:
72:77:f1:ca:dd:e5:ee:7c:ec:2c:01:1e:8d:ee:1e:68:c8:80:
ee:9e:ba:77:76:7c:4d:c4:67:98:f9:bc:ce:c4:ae:15:51:59:
fd:b9:1b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:38:25 2025 by rpki-client