Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/995552c9-5996-3635-bbeb-a50ce7b7da25.roa
File: 995552c9-5996-3635-bbeb-a50ce7b7da25.roa (raw, json)
Hash identifier: D3TuALzKz47bbX7OlcdsnXNGqsGhyLhFr9kXSoFmADo=
Subject key identifier: 8F:9E:2E:0E:B5:14:5D:C8:8C:6F:7D:0C:1D:8A:AB:B0:7D:8E:89:C1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CB9EAA661719E4EE4B2E170C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/995552c9-5996-3635-bbeb-a50ce7b7da25.roa
Signing time: Thu 27 Jan 2022 05:00:00 +0000
ROA not before: Thu 27 Jan 2022 05:00:00 +0000
ROA not after: Thu 03 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.188.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:b9:ea:a6:61:71:9e:4e:e4:b2:e1:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 05:00:00 2022 GMT
Not After : Mar 3 05:00:00 2022 GMT
Subject: CN=78ba1271-0aba-4651-a987-b99eb07df254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f1:cc:a7:f0:b8:2a:58:ca:40:4f:a3:8e:92:
d4:e9:c3:97:67:e6:48:37:41:9e:f8:9b:9c:6e:f1:
fc:9a:51:74:5c:64:e0:dc:7d:19:d1:43:b3:ae:bd:
90:ea:cf:43:76:e1:86:99:12:ed:3a:39:66:dc:67:
90:bd:36:a7:e9:07:ff:6c:72:c6:33:95:6e:b7:96:
f6:74:67:86:c5:83:a5:da:d4:cc:6a:3e:ce:ec:67:
b9:0a:f9:29:b8:4b:b1:ba:11:fd:36:b8:23:4c:f5:
c6:99:ea:af:bd:22:d9:bb:be:60:fe:c6:cb:c9:f3:
31:85:d6:fb:c4:e1:45:d6:30:74:7f:fc:f4:54:5e:
85:85:00:74:4f:f4:9f:d1:75:4b:d6:8a:55:3c:1c:
b6:08:27:ce:66:cc:eb:c5:51:f8:de:b5:80:88:a8:
e8:6c:41:d8:d9:46:c2:51:e0:6a:8e:a9:5b:4b:96:
fa:ca:dd:a8:80:f5:8c:1b:18:75:22:c9:22:32:7c:
0c:bc:41:fd:78:11:0f:ac:12:72:90:e2:15:50:fc:
1d:82:2c:14:84:03:eb:9c:ad:d6:08:d3:80:96:0b:
a1:a7:7e:2e:ad:f3:5c:10:b4:02:e0:2e:b7:2d:a9:
9e:1c:b1:fa:0b:90:34:ca:77:9f:2a:22:b6:ec:4b:
8a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9E:2E:0E:B5:14:5D:C8:8C:6F:7D:0C:1D:8A:AB:B0:7D:8E:89:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/995552c9-5996-3635-bbeb-a50ce7b7da25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:cb:b5:7a:34:90:d6:35:9f:f3:82:17:41:f6:06:e1:76:39:
8c:99:0a:fb:f3:20:d7:cf:4c:7f:08:bc:44:88:7d:96:c0:c0:
24:d7:19:50:ef:1c:d1:88:4a:ce:4f:5a:a6:07:e5:ed:05:eb:
8a:e4:ef:92:7b:d9:ee:46:cc:1d:f3:0f:79:5f:2e:12:7e:fc:
24:d7:e6:9b:e4:3e:d7:d2:e5:00:fe:c7:e1:58:09:e0:e2:f7:
80:4b:20:5f:eb:57:9d:28:95:fc:65:0c:e0:a3:3a:f5:18:37:
d9:66:cd:cb:3a:aa:1a:49:88:5e:ee:6f:4d:89:fb:63:e6:e5:
40:24:aa:8a:5b:35:1e:d7:a3:a1:43:92:86:c2:4c:ad:0a:51:
57:54:f0:f4:8f:0e:f8:bb:29:61:ae:0f:fc:9b:c7:73:a2:46:
c7:3a:5c:c8:cd:ae:07:4b:ad:41:d2:f6:79:31:18:33:b2:91:
eb:fe:35:5f:bc:01:8b:eb:7a:83:7c:21:bc:4e:6a:69:dc:f4:
96:d0:eb:89:fa:75:12:36:ba:46:b8:23:8c:c8:38:25:94:f2:
91:03:8e:a7:09:23:ce:be:ba:ea:ec:eb:4c:78:1d:03:54:09:
67:90:bb:f8:dc:15:10:fc:f9:48:aa:74:dd:42:b9:6f:15:be:
b7:fd:2d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:58:55 2025 by rpki-client