Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/948636b9-d381-3a4a-b0a4-682aa62beb1f.roa
File: 948636b9-d381-3a4a-b0a4-682aa62beb1f.roa (raw, json)
Hash identifier: ZvRkT61y/uzkA/3FEwbgkFNyDE/L+oRwWp4X6ZCL4Ek=
Subject key identifier: B4:93:02:9F:B7:4F:9A:DB:6D:5C:1F:BB:24:11:D5:8F:48:90:95:9A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F66D1CA84D671B0267F237840
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/948636b9-d381-3a4a-b0a4-682aa62beb1f.roa
Signing time: Wed 28 Sep 2022 12:00:00 +0000
ROA not before: Wed 28 Sep 2022 12:00:00 +0000
ROA not after: Thu 03 Nov 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.150.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:66:d1:ca:84:d6:71:b0:26:7f:23:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 28 12:00:00 2022 GMT
Not After : Nov 3 04:00:00 2022 GMT
Subject: CN=04fbecbc-2874-42c2-a60a-7d26d804e003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3e:2d:e4:ee:fc:9e:e7:7c:d1:19:6a:45:ac:
4a:ca:5b:eb:30:b4:14:59:7e:e9:59:63:82:49:c3:
19:17:73:15:5e:60:7e:fa:53:77:d6:fc:be:0f:24:
15:e1:51:a3:8d:11:18:5c:47:2f:6d:92:f6:b1:be:
df:42:01:bc:b8:33:a3:c2:70:9d:e4:03:12:9a:c4:
a5:5c:07:c6:6e:84:00:9e:98:16:4c:42:36:38:6a:
ec:5d:f3:24:4a:94:07:7b:2a:fd:b1:99:2c:7d:5c:
8e:42:23:dd:c4:80:4f:1e:a7:56:40:59:45:d2:4a:
0c:9d:a1:15:9d:26:42:c1:6d:98:d8:54:62:a3:cc:
ce:2e:2c:c8:3b:cc:ed:b9:aa:9c:a7:e6:0e:3a:38:
d5:81:09:4e:dd:a3:0b:7f:48:c3:82:0b:53:5b:00:
3c:93:f7:ed:9e:fe:e2:98:b2:ba:3b:5e:7c:ee:60:
8d:29:53:89:c9:64:b8:12:80:df:72:60:dd:d6:be:
56:dd:8a:5c:02:4f:bd:3a:22:e9:a7:a4:bd:b4:3a:
85:64:17:e1:ec:cf:19:ec:96:11:7c:e6:59:56:6c:
95:ff:94:d5:8d:26:97:55:2f:23:0e:d2:73:1a:5f:
62:d6:c4:2b:e5:29:a7:32:3f:12:8f:0c:26:0e:d3:
e6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:93:02:9F:B7:4F:9A:DB:6D:5C:1F:BB:24:11:D5:8F:48:90:95:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/948636b9-d381-3a4a-b0a4-682aa62beb1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.150.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:4b:69:f2:7d:74:f3:f9:2c:90:18:0b:6f:90:78:f6:cc:5c:
6d:c2:37:b3:7c:12:bd:81:58:8f:cd:28:2f:9e:47:82:12:86:
58:23:2b:22:60:65:80:b5:ed:bc:01:57:43:d0:96:14:4b:29:
e9:7e:2b:34:db:31:90:83:1e:29:52:3f:2c:b4:ee:7a:0c:cf:
e4:1f:42:0c:74:33:e6:df:37:97:50:cb:23:ff:88:c1:78:d0:
06:07:90:ef:03:7f:ae:e2:4b:4a:66:ff:42:08:33:46:77:29:
28:25:85:5c:7a:3f:24:fa:ab:33:e1:c9:16:bb:e8:2d:d2:5c:
c2:bf:7c:f2:05:53:94:06:b7:76:f5:bb:2a:42:27:1a:58:03:
b7:4e:e7:34:28:0e:c3:23:db:9d:6c:fd:86:8b:e7:36:23:79:
68:bc:41:4f:aa:b1:b8:1f:cd:30:16:aa:71:44:32:0b:f2:9b:
23:0c:93:7e:9a:8c:97:66:25:46:78:ac:7f:50:30:fb:92:97:
5b:87:fd:97:aa:37:3d:50:68:d0:05:49:b8:67:2f:a6:8a:84:
61:cc:a6:a0:66:40:3c:8f:79:96:67:fc:0b:0e:e9:f7:ec:4b:
1b:93:dd:6d:0a:52:55:18:d2:01:a3:24:f1:5b:e9:9e:01:8b:
76:d4:38:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:13:40 2025 by rpki-client