Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8e7e9d78-06ed-3fae-94e2-f83cdebc3fd2.roa
File: 8e7e9d78-06ed-3fae-94e2-f83cdebc3fd2.roa (raw, json)
Hash identifier: odOL756j/B+aTYtXhU38jRxtKF5TP/Gp57DDLTKyXns=
Subject key identifier: DE:32:D3:9A:D6:6A:AB:A4:28:E0:6A:27:94:5F:D6:E5:10:E5:18:E7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6BB7B1B88E585615F63FD640
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8e7e9d78-06ed-3fae-94e2-f83cdebc3fd2.roa
Signing time: Thu 30 Dec 2021 05:00:00 +0000
ROA not before: Thu 30 Dec 2021 05:00:00 +0000
ROA not after: Thu 03 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 15.236.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6b:b7:b1:b8:8e:58:56:15:f6:3f:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 05:00:00 2021 GMT
Not After : Feb 3 05:00:00 2022 GMT
Subject: CN=48a26204-15a3-4026-a057-fa721e680eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bd:5c:00:04:f4:b1:7d:b0:36:a5:83:58:13:
59:06:5b:51:69:8f:5e:cb:3a:0f:3b:93:31:7d:22:
12:77:05:2b:c8:d1:19:bf:2a:2f:ee:fc:36:65:2d:
9c:4a:3c:28:0c:22:54:f9:11:0b:7e:a9:bb:1b:c4:
20:ad:2e:7d:f0:b1:e7:85:9a:69:3b:cf:8c:32:74:
7d:f1:91:8e:0e:c8:d9:d9:1c:86:6f:ef:0f:a8:88:
bc:0d:09:a9:a1:1c:f5:3b:57:32:e2:e5:dc:c0:ce:
35:82:05:10:00:93:93:88:8a:36:40:fa:8f:56:f0:
2d:05:3f:f8:de:a1:0c:3e:f6:6a:30:15:c4:c9:75:
93:45:5b:47:e3:ce:50:4d:99:24:6f:e6:ab:82:8c:
1e:23:9f:43:e7:2b:c7:9a:f2:44:c2:1f:54:8e:a9:
c8:1f:a1:f6:b4:54:e7:6f:84:d6:dc:16:43:c1:fe:
6a:10:77:ff:39:51:b8:e9:50:df:f6:ba:2d:46:2a:
e0:3a:4b:98:be:60:42:1a:bc:5a:c5:b4:84:c6:e5:
ff:2a:d4:65:46:91:66:e7:b6:46:3d:c0:2c:85:91:
18:00:5a:7d:cc:a6:39:d3:b1:43:bb:cf:90:21:88:
21:e8:48:33:f0:23:2b:56:d9:cd:f7:25:fe:af:34:
fd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:32:D3:9A:D6:6A:AB:A4:28:E0:6A:27:94:5F:D6:E5:10:E5:18:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8e7e9d78-06ed-3fae-94e2-f83cdebc3fd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.236.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:3f:2a:b3:96:6b:9d:b0:e2:69:07:d8:fd:6c:54:7c:36:71:
45:10:26:b2:cc:51:2d:21:e8:62:00:b3:69:da:a0:25:f0:2a:
1e:c9:9f:0e:23:d8:82:7b:26:81:88:bc:56:3e:96:7a:5b:04:
46:88:24:23:eb:29:d9:6e:f2:80:4d:22:38:f9:42:17:37:cd:
88:d1:b1:d1:d6:2d:e0:b2:d2:dd:00:71:9b:06:5e:4c:c1:0a:
45:62:99:b6:71:19:56:80:66:30:e5:57:f5:89:28:1c:14:5f:
62:35:fe:91:ed:d7:3f:89:75:09:0a:83:c0:87:7f:24:9a:e4:
ee:7a:7b:36:99:3e:f5:0d:71:ce:b4:a7:39:9c:42:3d:51:b3:
85:dc:c2:fa:4c:cd:5b:c1:09:5c:c4:0b:22:ef:5b:03:b9:52:
fc:80:86:43:e1:58:7c:f4:ef:bc:b0:96:73:90:c3:b0:b8:17:
66:33:72:55:ef:1e:67:d6:6b:44:f9:a9:24:2f:0f:f9:f8:fa:
44:94:60:ca:4d:e0:fd:72:ff:57:2e:6f:e1:d4:df:c0:b7:fd:
90:87:77:0a:48:eb:d6:6f:3c:92:c2:28:0d:ac:37:26:1e:cc:
ef:da:00:69:b1:5a:d2:cd:ac:06:2b:d4:28:4f:f9:9b:92:e0:
99:74:12:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:46:33 2025 by rpki-client