Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a34a54ce-e4ab-3677-b3fa-e052a590d350.roa
File: a34a54ce-e4ab-3677-b3fa-e052a590d350.roa (raw, json)
Hash identifier: V9DDHXDV25qBVphVgfrpMZfZVfP2dQKr5LGxZ/LLoy0=
Subject key identifier: DA:66:F8:A5:06:D5:C1:0D:70:91:49:7F:6A:10:59:7A:BA:41:EA:D9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DCC429E824E0707E6B4776900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a34a54ce-e4ab-3677-b3fa-e052a590d350.roa
Signing time: Wed 04 May 2022 12:00:00 +0000
ROA not before: Wed 04 May 2022 12:00:00 +0000
ROA not after: Thu 09 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.198.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cc:42:9e:82:4e:07:07:e6:b4:77:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 4 12:00:00 2022 GMT
Not After : Jun 9 04:00:00 2022 GMT
Subject: CN=4d6b1db4-9120-41ee-84b3-4cfb39122f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:1b:eb:e1:ee:07:7c:d0:fe:66:d3:87:dc:
35:f2:df:8a:3c:41:c8:52:d8:cb:ca:9f:f5:bc:e5:
cb:24:32:ca:c8:3f:66:f5:3f:92:a9:f5:a7:49:56:
f0:9e:98:d1:b1:bd:32:8c:f9:6f:9b:3f:dd:8b:40:
99:8e:db:2e:4b:b8:7e:77:04:b1:6a:ec:9d:5d:29:
81:de:93:71:30:2f:e7:63:e4:5e:6e:6f:19:8f:99:
63:fc:90:09:6b:7d:3e:c2:86:b5:03:74:80:37:1f:
59:07:ff:75:40:44:04:46:22:29:84:ef:8b:fe:5f:
21:e9:59:18:24:b7:95:66:64:ef:02:eb:b1:20:4d:
37:9c:75:44:f3:ff:b5:f3:ff:dc:37:c2:b1:d2:24:
2c:ef:0a:b2:65:8a:63:57:03:67:aa:95:b6:b9:da:
bc:2e:8c:b0:92:0b:7d:3c:7f:3c:ac:b6:36:d6:e7:
cd:a6:7d:03:86:36:6b:e5:96:4b:42:45:65:20:b9:
f9:a6:57:c7:25:d3:18:29:c8:fc:c7:90:0b:01:b8:
8d:56:21:b0:72:82:e7:3d:ed:af:21:09:e4:66:97:
d5:94:bd:e6:8e:39:0f:75:09:da:1a:7c:cb:03:32:
a1:23:17:53:59:aa:1f:ea:ad:86:d8:fa:60:d4:83:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:66:F8:A5:06:D5:C1:0D:70:91:49:7F:6A:10:59:7A:BA:41:EA:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a34a54ce-e4ab-3677-b3fa-e052a590d350.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.198.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:7d:4b:19:9b:6b:a6:ec:e6:a5:0c:fc:de:76:c4:90:14:a9:
ff:71:9d:b7:dd:37:44:ef:82:ca:6b:d7:27:21:d5:f0:c1:0e:
48:13:57:9e:54:dc:00:62:8b:69:c0:1d:1d:af:a4:88:5b:40:
db:db:d4:44:34:c0:27:9b:6c:53:2b:e2:14:b2:39:41:f1:36:
3e:ce:0d:3a:90:d6:a2:44:aa:36:7b:b1:94:b8:f4:bd:de:88:
58:79:94:b9:f4:54:74:ab:30:e8:b3:d2:2b:b3:2a:21:d2:25:
56:db:2b:21:d5:27:84:4c:72:df:38:89:43:8f:45:17:26:be:
cb:75:21:bf:3c:a4:64:83:5a:d5:f2:9f:74:9b:8b:e0:82:c7:
b5:e1:00:87:59:4f:9b:e8:01:dc:90:69:4b:31:5c:d9:00:f6:
58:fc:cb:1c:16:64:d1:ff:f3:96:6d:2f:f0:df:cd:ed:ef:bf:
c1:94:32:9f:92:30:e5:59:fb:f2:97:ce:a8:bf:1e:c9:6b:0c:
36:df:a3:62:a1:b6:c3:a9:88:10:d4:4a:f4:15:c3:25:f4:b2:
13:b8:e8:ae:4a:30:3c:44:db:eb:6b:e1:1a:ab:38:1c:45:14:
7f:4c:32:d5:fe:73:20:13:86:c1:ec:a4:55:35:5d:84:65:ee:
dc:23:85:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:03:25 2025 by rpki-client