Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/950e889d-19a7-37d0-8be9-2cf81d891735.roa
File: 950e889d-19a7-37d0-8be9-2cf81d891735.roa (raw, json)
Hash identifier: GuiAQnMm+3LWZYnskcUu0/agM40BpyprWMhoxingN28=
Subject key identifier: 1F:37:5E:F3:9A:F2:68:CF:0C:D8:16:67:76:EE:5D:E2:7D:A7:EF:B2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FC8CAF6D6E38960A7F9742B60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/950e889d-19a7-37d0-8be9-2cf81d891735.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.205.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c8:ca:f6:d6:e3:89:60:a7:f9:74:2b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=a89dba3a-75b3-4d3e-bfef-1dea413047a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f7:5b:e2:58:0f:7c:5e:24:9c:f4:b1:52:cc:
ea:14:bd:81:91:05:be:03:94:fa:25:de:3c:43:e9:
8f:37:bf:cc:41:3c:44:ef:04:49:4f:55:1d:75:a4:
e1:28:02:09:19:a8:5c:86:08:c9:60:71:a5:3c:30:
eb:10:c3:15:96:e2:15:a9:3f:50:99:19:04:a8:04:
f2:d2:07:0a:e7:51:ea:bf:4d:53:35:8e:40:69:ec:
6b:01:4e:30:ee:6e:cf:bf:97:63:44:a4:11:c0:66:
ba:9c:2f:81:2c:18:45:7a:bf:d0:50:3b:68:49:57:
1d:f6:4c:90:01:db:ba:bb:08:2b:d7:f9:f4:05:27:
c8:be:bf:03:7f:72:d1:9a:cb:d1:30:36:da:7e:64:
14:82:7b:0f:f2:d8:f7:6e:9d:0f:78:61:eb:3d:81:
22:0a:9f:d7:a0:7b:a5:03:75:c6:8e:d9:85:5b:c8:
8a:aa:bd:3e:6e:2e:8b:fe:6e:5d:de:52:17:12:88:
2b:82:79:cb:4b:50:87:94:bc:8b:88:37:ee:be:61:
bb:d4:74:86:c0:3e:54:27:eb:5a:64:0c:4c:dc:58:
84:ff:34:71:69:75:31:e4:ba:c9:88:39:b6:5a:d4:
98:ac:7e:40:cb:14:b6:56:74:a3:d2:eb:6f:eb:c9:
3a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:37:5E:F3:9A:F2:68:CF:0C:D8:16:67:76:EE:5D:E2:7D:A7:EF:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/950e889d-19a7-37d0-8be9-2cf81d891735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.205.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:b6:9a:19:36:00:da:6b:83:ad:cc:5b:6d:61:93:2e:ee:27:
33:44:6f:05:d9:ee:24:4b:ea:9b:51:90:3e:e4:94:34:84:4a:
37:34:67:43:ab:75:0b:a9:87:f9:6e:0a:62:0f:5b:2a:90:55:
93:c7:5c:4c:6a:c0:2f:1f:c2:85:2c:78:03:96:bc:c6:81:9b:
28:1c:ae:1a:8e:d5:44:00:2b:7d:ca:ac:9f:a2:19:e1:0f:e1:
f7:06:c0:59:64:29:7f:a5:6d:f9:fc:69:67:e4:55:2a:45:b2:
5b:06:c2:2f:af:2c:03:f0:30:68:5d:8f:90:c9:ab:45:11:da:
97:47:ec:d2:94:90:05:47:f4:e9:7e:5b:4d:2a:e7:f0:c8:89:
12:cf:eb:d8:17:da:cc:f1:66:98:df:e3:9f:e3:6e:7b:08:94:
f7:05:aa:f3:04:a3:b3:54:db:da:b5:16:af:bd:ca:5d:39:6a:
c3:49:c2:56:c8:15:b8:4e:ae:84:1f:04:51:c0:0c:5d:92:95:
e2:aa:e8:54:b0:12:64:ac:bf:47:a0:aa:b3:c3:a7:a8:f9:c5:
fb:0c:b0:f9:28:4a:70:f9:3c:eb:8f:7e:35:b1:01:cd:20:fa:
6f:75:74:b4:83:5a:94:62:28:ac:e0:59:22:a0:f1:66:e0:7e:
9d:87:d6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:23 2025 by rpki-client