Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/90563cda-4f87-3c44-93de-cc5fe9a81c47.roa
File: 90563cda-4f87-3c44-93de-cc5fe9a81c47.roa (raw, json)
Hash identifier: MrLu5e+FNikg6y89T4BNTtFFNxI+xvc9/fnkRYcml3c=
Subject key identifier: 4D:B0:EC:04:C1:C7:24:B2:DD:4C:01:CA:AF:AD:2F:6E:1F:77:6C:FE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FC896CFC5D6AE67DAC7AEA980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/90563cda-4f87-3c44-93de-cc5fe9a81c47.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 15.253.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c8:96:cf:c5:d6:ae:67:da:c7:ae:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=37c8f961-a1bd-4c08-84d5-4fe03a36ef6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c8:6a:42:e4:e3:89:51:45:d4:44:a6:98:7b:
3d:45:e7:6d:df:b2:de:ad:3c:33:90:69:b9:d6:5e:
ea:8d:a8:2b:7a:7b:96:3d:83:fd:dc:38:22:4f:92:
fb:a3:55:d1:a6:14:8b:c9:35:45:ae:97:42:53:0d:
93:d1:5d:cb:1d:ba:66:e1:54:c7:a0:3b:20:46:d9:
4f:2c:73:9c:14:ff:a0:1b:9e:40:99:d3:ef:c9:13:
f5:45:2e:18:85:5d:a0:63:24:2a:30:83:94:42:f9:
10:ab:7e:86:62:4a:cd:ad:3c:eb:c5:61:ad:90:56:
b2:51:80:ad:64:d5:e8:53:81:54:5d:dc:8a:a8:28:
1c:e9:d1:16:a0:b7:16:15:d2:20:12:79:62:14:15:
cf:14:cd:32:2e:65:d8:ff:84:f5:4a:4f:4f:be:6e:
0b:55:f7:08:fc:11:ad:d8:8a:91:13:65:3f:7e:bd:
e1:e6:9f:ca:1f:e3:81:d7:59:7a:d5:67:82:56:3f:
c4:50:69:77:37:f1:8d:1e:14:52:06:08:b1:5e:98:
cf:ad:8f:a9:af:c1:35:16:96:73:99:d1:8b:1e:f0:
6e:3c:ec:04:04:37:af:49:e2:fa:fe:a8:e8:fb:be:
20:0b:f6:00:10:58:97:c2:d9:58:3b:08:30:ff:14:
d4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B0:EC:04:C1:C7:24:B2:DD:4C:01:CA:AF:AD:2F:6E:1F:77:6C:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/90563cda-4f87-3c44-93de-cc5fe9a81c47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:85:eb:19:ec:e6:80:1a:1c:2f:e3:89:49:c2:ac:67:14:1c:
d0:07:f7:9f:cb:13:dd:e2:99:a7:c9:4c:d8:22:13:98:e9:30:
4c:7f:1b:05:9a:ef:6e:5d:b5:3f:ff:59:93:db:69:98:9b:54:
7c:96:23:4c:a6:90:9e:9d:bd:03:33:63:00:6f:a0:54:44:28:
bd:a0:99:b6:ab:a9:f8:f3:c8:4e:07:2e:02:ca:2a:12:7a:da:
d8:a4:96:1b:de:3e:44:52:eb:39:d0:d8:70:78:84:63:a9:3f:
17:42:49:b8:06:02:23:b5:3a:a7:1e:1c:fe:15:59:f1:0c:72:
6e:5c:9e:cd:ca:0c:84:3f:f7:9f:39:ad:b7:c4:62:ab:f2:48:
63:ac:3a:d6:1b:84:6a:8d:aa:f6:9d:aa:ad:e3:4d:bc:24:cb:
95:e5:b3:54:f1:fb:51:f2:09:67:75:ea:17:db:c4:63:20:8e:
e7:31:f0:8d:7e:f9:04:ff:41:bb:af:a9:12:9a:71:08:8e:e5:
88:7a:e2:c8:33:32:16:7c:e9:6e:53:7e:3f:61:d4:ae:c7:57:
f1:da:9f:d7:93:d1:45:0f:db:47:00:dc:cf:de:0f:1d:3c:9f:
59:87:3b:0e:ff:5e:a3:16:6d:06:40:5d:4f:65:65:8f:e3:54:
e7:2f:b0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:19:20 2025 by rpki-client