Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f8d7ebb-a1ab-31fd-85fe-1b7c436d099c.roa
File: 8f8d7ebb-a1ab-31fd-85fe-1b7c436d099c.roa (raw, json)
Hash identifier: UJCCMKn9pPeyPcrJwRZAIyuAIBwKPs8Q7huS7XWz3p8=
Subject key identifier: 65:4E:01:19:F5:A8:1A:9A:AF:47:95:F9:EF:D3:5A:9E:8B:2D:EC:B8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403D67DF793C47E73D34B27300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f8d7ebb-a1ab-31fd-85fe-1b7c436d099c.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.236.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3d:67:df:79:3c:47:e7:3d:34:b2:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=9f299b1a-757d-4aba-8236-be90f9c195ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:46:63:d8:be:66:a7:7a:f9:5f:89:6d:3a:73:
4e:d9:7f:a5:a6:33:d4:7a:d1:a7:ea:03:bf:31:e0:
49:e3:ab:bf:59:e0:15:f3:91:df:88:99:05:b1:0c:
b1:ef:f0:15:05:1c:e1:9f:76:ee:bb:04:98:9a:a4:
ee:1d:aa:4f:36:4c:e0:e3:df:4c:40:e6:00:47:30:
b2:48:b2:80:5c:02:3d:24:4e:0e:c4:a0:8b:39:c3:
9d:c2:d5:7c:43:1e:42:da:0c:d5:4d:63:06:3f:0d:
ff:7c:ee:b3:ef:50:96:3e:c8:05:a5:f9:3e:b2:8c:
87:d1:b6:0f:ca:79:3d:09:4f:e6:1b:bf:05:6d:7c:
b9:7a:c9:63:76:11:36:79:f1:50:1f:cb:bf:3b:e6:
58:c2:e7:f3:ca:4e:e0:18:80:8e:f0:ba:36:3e:5e:
e2:e6:89:43:e3:04:0e:89:bf:f1:9c:81:90:f0:38:
1b:9f:8c:3d:77:a1:b6:67:0a:c1:2d:6b:aa:88:5a:
e1:d5:45:a9:1e:3e:2e:03:cb:b5:ab:50:fb:77:ec:
c3:a9:6e:89:2f:a5:ac:8c:87:70:0f:b0:d0:cd:dc:
a2:8c:c0:29:45:5b:ed:68:d2:a3:eb:a4:36:c9:60:
a8:0b:f2:ad:b8:51:6c:64:5a:97:f5:c6:74:37:7b:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4E:01:19:F5:A8:1A:9A:AF:47:95:F9:EF:D3:5A:9E:8B:2D:EC:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f8d7ebb-a1ab-31fd-85fe-1b7c436d099c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.236.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:3c:01:62:4c:d9:71:32:d3:76:69:61:fb:a8:a2:52:05:38:
77:17:d7:e2:0e:cc:d4:26:db:a8:23:5e:33:b4:7f:37:cc:b5:
bc:44:4e:24:fe:33:ac:a7:d2:44:2b:65:40:86:d8:42:60:8c:
1f:4f:72:e9:0f:0e:37:bc:44:92:8e:c3:de:21:87:db:c4:51:
b8:3d:46:5f:2d:95:e8:d9:a9:3a:e1:06:dc:60:b3:7a:77:8d:
54:bc:6c:ca:0e:ac:d8:89:98:7e:ca:91:29:98:9f:d3:a2:ce:
c7:e6:a4:30:71:af:ee:e5:69:19:32:c2:9e:14:64:b8:87:99:
81:fe:87:0e:4b:a2:1f:f3:be:54:cb:d4:f7:50:ea:a1:68:1b:
e4:6e:2e:13:bd:1b:a4:c3:c0:e2:60:ad:d9:ee:5a:e4:0e:dc:
20:2c:ed:c3:a0:dd:1d:ca:59:e4:0f:0b:74:8d:87:8e:ba:ca:
77:a2:97:e6:18:a0:5d:70:19:ca:f1:a0:1e:4b:5e:20:da:5c:
9d:ec:35:74:c4:54:8f:75:57:62:87:55:80:94:ad:7b:9a:3a:
4b:bc:4b:64:1b:cb:c1:16:3d:4b:2a:6c:37:31:26:e6:d3:00:
22:1e:a8:2d:e0:95:2e:de:d2:77:2e:2a:52:e0:58:d7:57:e6:
e5:b3:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:12:44 2025 by rpki-client