Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/98624e25-9deb-3630-8ce2-0dcce22c9a2b.roa
File: 98624e25-9deb-3630-8ce2-0dcce22c9a2b.roa (raw, json)
Hash identifier: sm3xm+GeTZxUOqeua2bKHN4r6lXTZ6qaC9pA1BI5WXw=
Subject key identifier: F0:AC:A0:37:BA:A3:CA:35:58:A5:DA:23:BE:3A:F2:91:02:D8:E0:A2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3F71CB4FA7A42E1E85B63CE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/98624e25-9deb-3630-8ce2-0dcce22c9a2b.roa
Signing time: Wed 14 Sep 2022 12:00:00 +0000
ROA not before: Wed 14 Sep 2022 12:00:00 +0000
ROA not after: Thu 20 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.196.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:3f:71:cb:4f:a7:a4:2e:1e:85:b6:3c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 14 12:00:00 2022 GMT
Not After : Oct 20 04:00:00 2022 GMT
Subject: CN=86f8f4ed-633e-465a-93ee-b28e77e4658b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:d2:81:94:a5:ff:b5:25:0e:3e:91:f1:4d:
f0:8b:15:e5:4d:f0:ec:ca:b8:89:63:0a:4a:3c:b2:
2d:be:96:02:4d:bd:39:8c:39:97:ee:d4:00:3b:a3:
d1:87:d3:0a:14:0b:06:54:4c:c0:12:05:4d:6c:e7:
6b:f5:d0:a6:e0:bb:e6:fe:06:d5:82:5c:8f:28:8c:
0a:29:e9:50:0d:8a:15:a8:14:c2:f6:21:a7:a8:23:
ba:14:b4:e0:d2:22:09:a8:7c:04:1e:be:d3:0c:f9:
48:5d:bd:05:bc:be:e0:bb:df:3e:a4:a3:93:63:40:
da:df:14:95:f9:a6:ea:dc:4b:7c:ae:b4:39:69:4a:
a6:23:85:fd:b0:fa:0d:1c:e8:d0:ab:4f:3e:24:33:
9b:b8:c6:fe:5e:54:01:e8:00:b1:74:7a:2a:86:63:
77:39:3a:81:d7:35:5f:a0:fa:cb:0d:71:a6:5e:48:
a9:0f:2c:7d:80:51:69:4a:b4:53:16:9c:63:c6:01:
7d:f9:c2:f9:61:76:eb:b2:44:c4:27:25:35:d4:24:
19:48:bd:9e:92:b1:aa:a8:5c:cc:69:b0:3b:73:fc:
38:60:13:d5:41:55:70:99:21:52:fb:11:ef:56:0a:
b2:b7:a9:a5:27:23:7e:ea:3a:4f:80:1c:17:3d:0d:
e2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AC:A0:37:BA:A3:CA:35:58:A5:DA:23:BE:3A:F2:91:02:D8:E0:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/98624e25-9deb-3630-8ce2-0dcce22c9a2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.196.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:8f:21:7e:38:75:23:68:a0:ce:b3:fd:86:63:5f:c7:82:31:
a1:d7:d5:1b:c9:3a:a1:64:48:24:4d:51:a7:b9:5d:b8:11:1c:
55:34:e9:b7:e2:42:c5:e7:4d:17:f7:64:c4:15:9e:8a:11:96:
a8:57:ba:46:1a:3f:c3:d6:cd:b3:e7:52:37:47:5c:88:7c:f4:
3d:b4:23:e8:c3:c7:2a:db:34:53:e7:f5:ad:04:a8:86:b1:f5:
7f:62:e5:15:11:70:45:a9:74:64:48:5e:19:52:80:a7:46:44:
af:73:22:15:cc:19:d9:15:fd:76:ad:87:c5:cc:e4:d5:c7:d5:
a5:bb:73:24:a8:89:98:94:36:44:48:52:48:af:a9:ea:99:22:
51:56:22:b1:31:a8:cc:75:a8:b6:7c:29:03:87:06:b5:33:f2:
0b:da:eb:67:fe:5f:0d:92:50:c7:27:af:cc:8e:ed:be:a3:e6:
a1:3b:8d:aa:e9:63:01:60:a9:98:32:95:f1:09:20:9d:94:a4:
03:42:60:26:6e:77:9b:00:e4:01:86:72:f6:02:c6:97:c5:d9:
ef:27:d0:e1:4d:39:29:24:89:df:52:38:16:32:6a:b0:4d:f4:
73:f2:2c:c5:07:58:2a:12:90:8d:3a:49:c4:5a:94:f7:d1:43:
b8:44:7e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:56:33 2025 by rpki-client