Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8c857549-540c-320a-8058-3ae34293481b.roa
File: 8c857549-540c-320a-8058-3ae34293481b.roa (raw, json)
Hash identifier: T7M7RzLdVJMY1Oql28YebvVhGv4evE6XygV+asRe2bc=
Subject key identifier: BE:C8:49:B4:BB:81:D1:16:65:79:69:BF:18:66:2A:C7:D7:1D:FD:3C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404EADD2153EA2D193097FC620
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8c857549-540c-320a-8058-3ae34293481b.roa
Signing time: Tue 20 Dec 2022 12:00:00 +0000
ROA not before: Tue 20 Dec 2022 12:00:00 +0000
ROA not after: Wed 25 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.199.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4e:ad:d2:15:3e:a2:d1:93:09:7f:c6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 20 12:00:00 2022 GMT
Not After : Jan 25 05:00:00 2023 GMT
Subject: CN=851f5c4f-7891-4867-8a51-ad837bdf6022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:75:f2:cd:a7:c2:1e:8f:19:28:74:f5:40:
60:3b:e0:16:ac:56:dd:06:30:bc:40:cf:03:ca:e4:
4c:bb:b8:e2:83:84:68:e9:52:ce:33:e2:88:b3:4c:
54:d6:b1:9a:fe:5b:83:3e:45:05:7e:b3:83:49:fa:
37:ee:25:9f:34:91:9d:d2:b3:49:92:a7:f0:76:c2:
37:03:59:e3:03:2a:16:0b:e7:02:fd:86:6c:e8:f9:
ab:68:cf:1c:9c:9d:f7:c9:66:e7:1d:ec:ea:08:ef:
c1:1a:bc:f4:4c:1b:86:36:05:cf:6e:31:f1:99:65:
e4:5d:83:3e:f8:76:9f:95:9c:dd:b8:6b:65:90:0d:
d7:08:b9:b6:f6:9d:df:91:3b:88:89:19:f8:96:f3:
68:36:67:2f:7b:6a:46:90:dc:79:88:ad:5d:a7:7b:
4a:51:ef:6e:a8:a9:b8:a6:a7:d6:de:84:60:8d:2a:
ca:23:47:c5:96:e0:02:08:f2:3a:a4:aa:9c:fd:6a:
33:b5:e5:fd:94:ec:4b:7f:83:a8:dd:a4:9b:fc:63:
a4:98:be:3b:40:6e:8c:13:ae:a6:d3:e3:b7:34:46:
64:10:4d:5b:0e:ec:d8:7a:44:67:ce:e6:9b:3f:23:
e5:ea:ca:08:73:04:1a:a0:fb:d3:f6:58:10:07:74:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C8:49:B4:BB:81:D1:16:65:79:69:BF:18:66:2A:C7:D7:1D:FD:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8c857549-540c-320a-8058-3ae34293481b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.199.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:1c:61:05:87:7d:11:da:7f:cf:02:e5:af:3e:c3:cc:f1:d1:
05:70:2a:0c:0d:35:ae:3a:6b:bc:33:89:bf:e3:47:92:41:f7:
44:67:7c:33:ee:f4:0b:28:1f:a3:c8:00:15:d6:03:38:b4:57:
20:54:d4:5c:6c:53:d9:eb:f3:be:6e:cd:c7:05:84:44:e1:7b:
58:00:93:16:68:29:ab:2a:8a:06:fd:12:24:09:80:96:a8:94:
25:6b:a9:0b:d0:83:33:6f:e0:95:8f:3a:c0:ad:87:40:35:73:
37:65:d5:85:1b:19:20:3e:58:51:a9:b6:76:87:73:63:71:bc:
1c:25:e7:24:62:f4:30:54:a5:77:7f:58:c2:d6:98:6e:e2:d8:
d8:e0:fc:4f:8e:47:8a:c2:54:fc:95:b3:ab:ce:7d:f2:d0:b9:
ab:f1:a4:90:18:e0:13:62:99:f4:89:4a:f8:32:2a:bc:df:dc:
1c:3e:de:10:fb:eb:93:e0:60:b6:a5:ec:2d:41:a7:50:30:51:
e0:21:8a:14:4b:d9:10:c3:ed:ff:46:62:10:43:1b:9d:43:ae:
df:ea:f3:43:86:46:04:51:dd:ac:3d:04:f0:bb:e6:06:de:c1:
0e:0b:dd:24:9b:04:2e:99:b1:b4:d2:aa:81:e2:3a:e0:16:1d:
4b:0d:9f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:52:28 2025 by rpki-client