Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9468b10a-5545-3642-8265-52529fc168d9.roa
File: 9468b10a-5545-3642-8265-52529fc168d9.roa (raw, json)
Hash identifier: aoOwcbtn47vbeBL8W/2fKLLAlrXxbt4KHglb9d105g8=
Subject key identifier: 65:01:A1:C1:CA:9F:DF:87:4C:A3:96:95:CA:C0:28:7C:4D:2D:3A:D1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E2CE51C843EE68D80A807E800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9468b10a-5545-3642-8265-52529fc168d9.roa
Signing time: Tue 07 Jun 2022 12:00:00 +0000
ROA not before: Tue 07 Jun 2022 12:00:00 +0000
ROA not after: Wed 13 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.245.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:2c:e5:1c:84:3e:e6:8d:80:a8:07:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 7 12:00:00 2022 GMT
Not After : Jul 13 04:00:00 2022 GMT
Subject: CN=5ecffc1c-83fb-414c-8373-a96422b8c9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a6:cc:a5:c9:2e:79:61:72:e4:6e:45:81:29:
1b:d9:e9:d6:b8:57:9f:96:ef:8f:e9:11:56:b5:e1:
99:e3:66:c6:5d:84:92:e0:8a:a7:fa:96:73:72:bd:
29:35:b2:51:8e:c5:1a:b1:b1:5a:17:d2:42:73:2a:
e3:0a:e4:43:aa:c3:f9:85:fe:5c:37:fa:d5:87:16:
b4:b2:70:23:11:0a:7d:db:8f:76:f0:96:51:d6:46:
c2:d6:e9:87:55:9a:d2:48:ba:f4:9b:ce:26:45:d4:
06:00:99:97:64:48:17:0b:2d:9e:e3:32:67:5e:c9:
6c:52:51:53:1f:6d:a2:39:65:c2:97:90:a5:30:33:
00:2f:9e:b8:85:c0:99:fe:e6:8e:56:03:46:f8:ae:
f9:09:61:00:de:26:b4:e2:9d:8f:d0:87:97:d7:86:
19:e1:c1:15:de:fd:b2:69:41:23:ce:c4:29:ab:81:
87:ff:8c:39:1b:90:66:3d:ff:bf:ab:ad:8c:73:07:
a6:46:50:5f:92:86:da:67:9d:c9:3d:92:b0:d7:b5:
80:11:0c:2e:cb:ee:33:fa:f1:0e:63:ef:a8:7a:14:
84:1f:38:a3:98:5e:ee:b2:d2:7c:e6:17:60:0f:45:
b9:fe:0c:26:e0:60:c7:e6:1e:4f:31:27:b2:0f:9f:
ec:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:01:A1:C1:CA:9F:DF:87:4C:A3:96:95:CA:C0:28:7C:4D:2D:3A:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9468b10a-5545-3642-8265-52529fc168d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.245.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:c5:89:4e:da:be:31:f9:a2:97:b1:8f:b0:33:e5:43:c7:79:
eb:6e:59:1d:14:b8:cc:ff:01:3e:0c:61:03:69:16:4c:e4:33:
0c:32:7f:59:5d:7f:bf:32:be:8b:91:33:14:d2:28:02:b2:59:
e1:ab:00:54:36:88:ed:a1:5d:1c:c0:34:b4:f8:2c:58:7f:dd:
3b:f9:5a:8d:c7:9f:27:ea:f9:41:e1:2b:b9:89:31:3d:7b:0c:
c0:c1:0e:f1:ef:19:04:4d:a3:23:22:72:ff:46:89:5b:72:62:
87:de:e9:82:e3:c0:05:c1:10:75:72:86:08:34:31:72:56:25:
24:a0:71:f1:c4:81:29:04:5a:13:a9:43:45:14:9d:d4:03:9f:
f8:05:31:91:e4:b1:53:1d:8b:31:22:d6:83:b5:51:6b:81:dd:
e6:db:99:07:ef:45:19:e4:d2:c3:7f:ee:21:12:57:8e:8b:71:
ab:85:d2:c6:9e:45:a7:cf:cb:8a:6f:a0:22:8d:8d:16:be:91:
3a:c0:15:58:7d:e2:43:57:3b:e8:c6:f9:1d:c1:48:84:9b:66:
59:d7:c3:e6:b4:85:3c:4e:e6:0a:38:04:3e:a6:4d:12:d3:41:
92:ad:e4:bb:9d:d2:68:c2:74:a2:28:b1:68:3a:39:8c:3a:85:
43:cb:6b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:06:09 2025 by rpki-client