Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/884d26f5-f2ce-3111-b87f-11c6d3673425.roa
File: 884d26f5-f2ce-3111-b87f-11c6d3673425.roa (raw, json)
Hash identifier: qM0IanbB6VqeNBlPOfiEoyKzne9pXIP0RXn6REpFY5E=
Subject key identifier: A2:95:E9:C2:96:7E:4C:26:53:3F:B2:07:C3:C2:35:A4:EB:0F:E2:9B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3F3DAB066C2B958B4D08DF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/884d26f5-f2ce-3111-b87f-11c6d3673425.roa
Signing time: Wed 14 Sep 2022 12:00:00 +0000
ROA not before: Wed 14 Sep 2022 12:00:00 +0000
ROA not after: Thu 20 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.174.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:3f:3d:ab:06:6c:2b:95:8b:4d:08:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 14 12:00:00 2022 GMT
Not After : Oct 20 04:00:00 2022 GMT
Subject: CN=ba76003c-377c-4db7-a414-8b519509b2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:58:2b:79:2f:02:f7:0d:d5:2e:bc:c3:df:0a:
d8:03:dc:dd:32:e7:6a:a8:42:6f:cb:dd:f5:9f:8f:
d8:b2:28:5c:67:f4:2c:9b:4b:98:73:5b:52:13:dc:
9b:cc:a0:71:16:6a:52:ef:e1:37:cc:9e:f6:e1:e0:
70:40:9e:76:b8:ec:c0:bb:4a:0b:6d:fd:e8:b4:40:
e2:53:19:ef:2c:87:7e:59:dc:9c:33:6d:31:0d:78:
27:27:b7:86:e8:69:5a:fd:ae:5a:82:35:ca:11:b2:
e3:30:23:68:db:13:df:83:74:b1:b4:46:28:78:ab:
e1:3b:6b:fc:49:00:db:86:b1:7b:82:11:0d:fa:41:
f9:d7:ea:b0:f3:77:c8:e1:d0:4c:ca:8d:9e:c6:bf:
15:9e:87:ab:a2:83:f8:9f:78:40:20:83:e7:46:9d:
a5:99:a1:19:7d:1a:39:c8:ca:0c:52:82:65:f5:b8:
36:c1:f1:8f:31:da:20:e1:b0:84:fd:d7:82:b6:d4:
f4:9a:f5:09:f9:df:95:2d:9e:52:c0:02:e3:62:f4:
d3:2d:24:2d:04:c8:e3:28:b2:e3:16:c4:cc:c8:2c:
8b:56:25:2e:99:d5:25:12:e4:38:f8:09:44:07:85:
30:51:ec:04:17:60:cf:e7:b1:28:64:be:7c:00:14:
88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:95:E9:C2:96:7E:4C:26:53:3F:B2:07:C3:C2:35:A4:EB:0F:E2:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/884d26f5-f2ce-3111-b87f-11c6d3673425.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.174.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:58:09:7e:82:4a:5d:51:f7:07:ae:4f:52:81:c1:8c:8f:4b:
3e:27:14:5e:e5:e7:32:20:a5:c2:0e:5b:da:f0:c1:5a:41:c1:
b8:98:d9:c8:d8:0a:51:c9:81:06:62:52:14:e8:a2:00:5f:5b:
d8:9a:09:40:91:e3:2e:a0:4d:f3:df:7f:de:29:b4:2d:2c:66:
b0:24:b6:62:17:f3:9b:2b:19:bc:69:2c:75:af:3f:2c:83:26:
c0:ee:ac:fb:c2:25:7a:5a:50:b7:05:da:96:3e:09:0e:d1:da:
1e:01:83:b4:75:6d:be:ee:6d:07:b6:b6:1f:ee:50:99:17:b5:
6b:91:6a:ff:f5:f1:bd:02:b5:60:87:4f:0a:9f:20:43:7c:62:
2c:c7:c2:90:e0:d4:e7:83:e9:a0:d6:fd:97:23:ad:71:76:23:
69:81:5d:b2:b0:d2:fb:a1:03:90:a3:d9:0a:62:33:fd:ce:fa:
bb:69:58:0a:b9:7e:cb:3f:03:b0:86:8a:94:8b:ce:80:ed:84:
d6:48:07:49:cd:b4:e9:9a:7c:50:26:ad:b3:af:68:b3:a5:a4:
5e:28:4a:be:6b:ab:90:fa:9d:5b:18:26:7f:e4:3a:df:f4:e4:
d4:d2:94:79:3c:65:02:db:5b:f1:57:e1:83:e1:2b:a1:53:23:
1f:22:bf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:03:50 2025 by rpki-client