Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a38d1e9a-afd2-3f06-b72e-e68d9528fc12.roa
File: a38d1e9a-afd2-3f06-b72e-e68d9528fc12.roa (raw, json)
Hash identifier: usldRhlKdRWemIFLu6EY1uqorrzuVsBK82JMzl3YMMw=
Subject key identifier: A7:AE:95:CC:6B:0E:2B:AA:BE:61:4D:1D:FA:75:9B:82:1C:90:B7:4D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F8AFF2F1FC3EFE20312721780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a38d1e9a-afd2-3f06-b72e-e68d9528fc12.roa
Signing time: Tue 11 Oct 2022 12:00:00 +0000
ROA not before: Tue 11 Oct 2022 12:00:00 +0000
ROA not after: Wed 16 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.250.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8a:ff:2f:1f:c3:ef:e2:03:12:72:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 11 12:00:00 2022 GMT
Not After : Nov 16 05:00:00 2022 GMT
Subject: CN=ecd04474-c3e4-466f-a5a3-bdf791ef6c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:fc:0b:48:af:9b:22:85:c6:18:38:7a:4f:
c4:b3:b0:62:36:50:12:cb:c6:3c:0c:1f:c4:70:fb:
78:03:09:32:71:a3:e2:6d:4f:59:75:05:bf:22:36:
87:96:af:f5:40:fa:30:33:2f:54:af:8e:51:0a:79:
a9:b1:cf:4d:85:01:44:5a:2c:de:c2:09:fd:6f:e8:
54:9b:b5:bf:43:41:36:41:2b:80:70:68:50:38:56:
d8:4b:aa:4c:e5:57:6c:6a:aa:c1:e2:66:77:7d:23:
34:9a:86:92:d1:6c:dc:2e:72:e9:ac:18:ab:ec:b8:
18:5b:8b:0a:51:88:23:4d:76:bd:79:16:09:df:d8:
60:22:e3:98:1c:43:e2:a8:7e:de:5e:d8:d4:ca:16:
cb:25:23:16:2a:4a:85:3b:48:d3:aa:c5:29:84:71:
2b:f9:bb:54:fe:90:16:6c:81:4b:c9:08:2a:79:2d:
dd:a2:a6:69:43:4e:15:c0:40:8c:f5:c8:21:10:47:
b7:a7:ba:da:b1:91:7e:5b:57:17:70:fa:eb:52:33:
a8:6e:65:6a:12:08:40:dc:93:36:06:8a:a4:9b:9d:
b9:0e:18:6e:1e:ad:d8:14:7f:28:1d:49:97:3e:40:
71:74:3d:d5:9a:f8:5b:2a:f9:aa:e5:b8:a9:9e:f1:
c2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AE:95:CC:6B:0E:2B:AA:BE:61:4D:1D:FA:75:9B:82:1C:90:B7:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a38d1e9a-afd2-3f06-b72e-e68d9528fc12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.250.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:db:c9:9f:9d:71:6c:90:7f:b6:5d:92:a8:8c:43:92:fa:c0:
42:9d:c5:83:e6:dc:01:65:86:af:d5:49:47:de:45:3d:a5:6a:
4c:91:52:a7:02:aa:e0:98:c3:21:c8:b1:a4:f8:3b:95:26:a1:
4d:65:e8:0a:3b:18:e1:f1:8d:36:d8:7a:73:a6:3c:c2:20:a9:
2d:36:d3:be:16:53:16:c5:3a:be:82:5a:d2:d8:37:af:5c:73:
2a:f5:5e:d9:7e:00:c4:75:1e:fc:b0:ef:03:64:06:08:b3:ac:
62:0a:6c:ad:88:da:7b:b9:b9:e9:5b:09:c8:83:df:59:af:a2:
55:fd:24:89:74:4e:b6:15:b7:52:6e:28:e3:ce:06:ec:ec:4c:
21:11:57:32:e3:e8:c1:51:cf:a6:0b:93:bc:37:fa:2c:2a:64:
4e:f0:db:1f:cf:4b:06:2f:ae:1a:a0:a1:08:a9:28:c5:48:b1:
bf:ab:a1:37:ec:47:5d:69:a5:ea:60:85:62:99:60:83:7d:a7:
20:6c:cb:8a:05:1c:be:c7:7b:16:42:79:48:0d:63:4a:14:53:
ad:5f:c3:46:03:eb:15:67:08:a0:33:79:aa:e8:75:9a:03:94:
82:08:1b:8a:6b:a6:dd:a8:1d:76:80:98:c3:7c:80:e9:0e:16:
7a:ec:cb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:36:49 2025 by rpki-client