Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9be99377-b97f-32f9-9044-36039dde0014.roa
File: 9be99377-b97f-32f9-9044-36039dde0014.roa (raw, json)
Hash identifier: nvwzAT3RNTLbgFm/gEGE7l5SDHL5IA9pSnzZIMU9ZhM=
Subject key identifier: 98:D2:2F:27:5C:36:AA:4E:DD:A0:81:71:3A:72:B5:1F:64:85:26:31
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F2C22E288B447699E5998E780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9be99377-b97f-32f9-9044-36039dde0014.roa
Signing time: Wed 07 Sep 2022 12:00:00 +0000
ROA not before: Wed 07 Sep 2022 12:00:00 +0000
ROA not after: Thu 13 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.254.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2c:22:e2:88:b4:47:69:9e:59:98:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 7 12:00:00 2022 GMT
Not After : Oct 13 04:00:00 2022 GMT
Subject: CN=7d092d16-287a-431c-b44b-73d5b1724ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:14:9a:62:a2:f6:87:f3:18:80:e9:c0:cb:81:
5b:68:32:3d:be:f2:a8:f9:77:ef:b8:a0:a9:8f:f2:
f6:52:cc:2d:a3:35:7f:1e:9a:f8:f2:91:fb:34:be:
15:b1:f5:32:cb:c6:62:3b:6f:03:9d:92:c8:43:90:
77:4b:db:09:fb:6a:72:fb:36:b8:ec:10:4f:57:af:
bb:e5:aa:a1:f1:3f:96:da:3f:d0:70:8e:f0:b3:7d:
8f:98:a6:55:5f:40:65:9b:ff:17:0b:5e:9a:e3:8c:
30:f8:a9:19:a4:54:05:e3:b4:b8:54:3a:00:3f:5d:
56:8a:e1:97:2b:56:4d:5d:cb:dd:4f:27:5e:ef:c2:
39:f2:64:aa:e5:5f:e2:16:02:1d:f6:1c:48:bd:9a:
21:8a:5a:0f:9c:51:45:f8:5a:24:ef:6a:df:0f:c2:
7f:9d:00:5a:21:1c:a3:c2:80:8b:8b:0d:9a:31:30:
ed:bd:d6:04:96:a1:4d:e6:1d:9d:6c:22:05:0b:64:
70:be:c5:47:29:78:88:89:fe:86:1d:40:46:45:1a:
e9:5d:57:86:cb:12:3d:bc:f5:5c:e1:cc:7a:09:50:
a3:ef:ca:16:28:d5:d1:f9:b2:aa:9e:15:38:1f:31:
34:7e:f6:a6:9d:6c:89:2e:f8:53:ef:05:fd:f8:ad:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D2:2F:27:5C:36:AA:4E:DD:A0:81:71:3A:72:B5:1F:64:85:26:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9be99377-b97f-32f9-9044-36039dde0014.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.254.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:e8:ca:76:4b:c5:3d:4f:16:94:54:8f:f8:9e:ff:22:b7:6b:
33:7e:19:9b:0c:60:b6:27:b6:d1:85:ba:dc:57:be:75:15:02:
a9:59:c9:7c:4f:3e:0d:be:b0:f9:3f:91:4e:8f:98:29:12:29:
57:e2:01:44:d0:13:b7:c6:1d:84:87:ee:de:c4:87:fa:04:36:
c3:fb:79:0a:4f:8c:24:20:6c:40:51:0d:63:fc:7e:c5:c0:57:
a2:81:cb:34:c0:32:47:43:0e:ef:53:d2:9b:76:ee:b0:7c:52:
0e:08:73:6c:b5:5b:09:10:11:41:1f:d8:f9:8d:94:f9:85:12:
3e:b8:ca:47:4e:e3:31:24:c7:94:8c:b3:10:5d:c3:3e:52:2d:
be:eb:27:24:1e:02:b9:a5:93:89:e3:a4:8a:45:c7:58:6b:7b:
67:5e:21:60:54:9b:8e:3b:f2:af:71:0e:8e:5e:d6:f8:5f:c5:
87:6b:21:fb:2c:87:07:e9:c3:8a:6c:a9:53:e5:7d:cb:4f:8b:
73:2e:99:28:56:b7:2d:8f:ec:5e:4e:c9:f9:1f:78:d5:76:1d:
03:11:a0:01:f3:57:37:00:df:23:f1:30:8d:0f:3e:a3:50:cc:
00:99:c8:4b:35:f2:d5:4e:e9:2b:52:94:6c:92:80:65:f5:9d:
ed:e1:89:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:52:11 2025 by rpki-client