Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9c982934-f026-3d46-af08-0c9dfb52283d.roa
File: 9c982934-f026-3d46-af08-0c9dfb52283d.roa (raw, json)
Hash identifier: nqCh+whh8v3LSkEQ5f16YU5h26Sb7cTCnLZGTYJ1yLI=
Subject key identifier: 50:A8:8F:3C:61:A9:D7:3F:C5:EE:0A:BB:DA:0F:A4:EC:33:07:70:F9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DA6A176A4B9256B6272BE2380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9c982934-f026-3d46-af08-0c9dfb52283d.roa
Signing time: Wed 20 Apr 2022 12:00:00 +0000
ROA not before: Wed 20 Apr 2022 12:00:00 +0000
ROA not after: Thu 26 May 2022 04:00:00 +0000
asID: 3209
IP address blocks: 15.145.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a6:a1:76:a4:b9:25:6b:62:72:be:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 20 12:00:00 2022 GMT
Not After : May 26 04:00:00 2022 GMT
Subject: CN=7e5721bd-095a-425f-8552-fcdaafa56b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:72:6c:ba:a7:68:7b:15:8f:15:e9:71:e6:83:
5a:42:f7:67:2b:0a:fc:f1:4e:83:df:b8:5e:86:06:
4f:5e:3c:3c:32:4e:1e:e0:5c:b8:50:fd:a1:e1:09:
83:45:aa:28:36:1c:f0:8d:f5:95:73:00:06:e6:26:
73:fd:c9:0b:ba:85:f2:22:ff:9b:ea:99:45:06:e8:
c6:a1:88:28:9a:27:77:3d:5a:81:28:9b:20:7b:eb:
d7:88:4f:d0:b8:af:12:75:52:f1:80:0a:84:4d:fb:
ca:e7:51:55:0b:a7:e5:fb:cc:89:6b:79:10:be:9b:
f8:c0:ab:4a:f0:05:fd:23:e5:f3:4a:eb:9f:a0:14:
1a:2e:c1:47:e4:7b:62:9f:d1:39:1f:55:7b:d1:ac:
33:8b:ea:85:6c:07:4a:09:c0:92:f6:b5:c7:3a:c1:
34:d1:66:9e:de:df:ce:48:34:00:56:8c:64:05:f6:
33:8c:ca:1a:a2:97:de:8a:1c:91:5f:dd:52:27:c4:
aa:65:05:93:83:8c:d6:1d:c6:f9:fa:52:e2:bd:b0:
67:d4:fb:5d:d5:35:72:27:ab:21:c4:83:ae:27:44:
b3:3e:21:79:e3:bb:07:6c:0a:fa:d0:eb:92:31:0f:
b0:6f:9d:2f:ff:13:d8:94:4f:68:34:df:de:ef:d2:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A8:8F:3C:61:A9:D7:3F:C5:EE:0A:BB:DA:0F:A4:EC:33:07:70:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9c982934-f026-3d46-af08-0c9dfb52283d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.145.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:37:20:22:bb:48:19:56:08:56:11:27:cf:ec:6a:66:23:e2:
68:a5:71:9e:3b:10:f3:d2:91:ee:d7:c7:aa:a0:7a:e9:c8:94:
df:46:1a:10:91:19:93:cf:2e:1d:45:51:54:a7:ad:59:7c:fb:
5c:8f:fb:ae:25:6f:04:56:3e:c0:23:9f:f9:17:24:54:83:fa:
64:01:68:82:c5:82:e2:05:2e:81:68:f2:f7:d8:50:a0:13:d6:
8f:f4:ea:1a:43:84:ba:ae:49:c1:9a:a5:f6:d5:b3:46:19:95:
1f:cb:be:3e:6f:86:b9:d0:3c:f0:e8:4a:51:53:b4:0a:8d:1c:
ff:ff:b8:45:6e:bc:df:ef:bf:5d:e7:76:35:ec:e7:69:c3:68:
ef:4e:32:c5:c2:75:4c:7e:0e:a9:17:99:d3:54:c5:b6:be:b0:
ab:b7:03:60:0f:df:85:88:ac:eb:15:f3:cd:a4:56:2e:7e:a2:
fb:fd:b1:d0:3f:54:47:ea:02:c8:ad:1c:19:e5:36:5f:41:34:
ce:76:53:f0:bd:02:ff:0e:48:1c:6e:8a:67:cd:a3:64:11:51:
20:ea:fc:2a:27:17:c5:8c:c7:90:f5:a8:f3:6c:e9:ee:93:66:
1c:25:04:fd:e9:51:0e:ec:5d:c6:fa:c0:da:ee:26:3a:15:3a:
3d:e6:91:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:36:44 2025 by rpki-client