Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a51abb20-59f8-35fb-a95a-9f1b859f41ec.roa
File: a51abb20-59f8-35fb-a95a-9f1b859f41ec.roa (raw, json)
Hash identifier: FZihSrLDiE+aiDZcz1GsLE6alyE6vdqy6YCRi7BtTPI=
Subject key identifier: 70:15:EC:70:B0:E0:A0:21:7F:C4:36:A5:63:E8:70:6C:38:05:9A:01
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840172A5C7076570A092EFB1080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a51abb20-59f8-35fb-a95a-9f1b859f41ec.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.206.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:17:2a:5c:70:76:57:0a:09:2e:fb:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=02df7845-4c23-427e-b047-f577493ab9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c0:45:8c:ca:43:bc:51:b8:98:1b:32:e7:3d:
13:6f:e3:cc:0d:63:14:4f:96:eb:b8:87:e5:56:7d:
49:1b:2d:06:0e:49:86:7d:e9:78:a7:43:d7:66:16:
0c:63:82:da:49:e9:f0:4b:d5:a7:1c:4d:e4:cb:27:
0c:47:83:45:9d:da:62:09:b9:c6:2f:f6:a5:5e:72:
a3:31:62:ee:a7:4d:b9:a4:6d:bd:5a:75:82:66:3d:
a6:bd:68:3d:23:c0:86:87:c0:7c:64:f3:98:d8:82:
08:86:b2:47:ec:af:cf:32:9c:5b:6c:e2:b7:3d:b9:
72:6b:03:d1:5e:f6:3e:d4:06:95:ff:69:08:45:3a:
2b:90:df:80:54:5e:5f:84:30:e5:e4:db:d5:1d:9c:
2e:16:90:b2:ba:ed:97:1b:62:3a:5b:56:91:a7:8c:
69:66:6f:0b:a1:a3:80:04:38:03:09:16:2a:51:be:
15:ce:85:d1:b9:11:a3:0a:f4:a8:84:b6:32:41:d1:
ce:30:46:57:67:6d:13:e3:38:89:50:45:42:67:74:
db:3b:06:0f:8d:d4:a7:44:5d:0e:3e:5c:78:4f:8f:
55:62:95:00:47:4b:6a:9c:78:d5:a2:c7:c1:c0:30:
a2:f7:e8:b1:7b:d0:e3:1f:d6:71:4b:9c:7a:be:d8:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:15:EC:70:B0:E0:A0:21:7F:C4:36:A5:63:E8:70:6C:38:05:9A:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a51abb20-59f8-35fb-a95a-9f1b859f41ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.206.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:44:37:49:c3:c9:a8:05:41:59:ef:19:cf:ca:ab:d1:2f:56:
5b:0e:51:08:0c:fe:93:f9:21:6c:c0:bb:5f:4d:60:28:5f:a7:
c0:d9:ca:3f:b8:a2:80:f8:3d:5b:6a:34:dc:4b:3c:32:c6:18:
69:8b:24:ea:1d:c5:58:6e:1b:ea:f5:ea:8c:59:87:16:7c:4a:
2d:54:db:82:ab:69:1b:80:e3:f5:77:20:1c:2d:e9:ff:21:67:
e7:b6:ad:6a:f6:a2:04:8e:38:15:72:32:f9:08:14:c9:b8:a5:
de:e2:53:e0:61:68:87:07:8e:72:33:a8:f5:a0:9f:47:e8:fd:
10:07:6e:87:d5:d9:60:70:d3:59:0e:8b:65:40:d7:d2:81:2e:
94:ed:6c:6a:8a:a4:bc:1f:b0:9c:08:11:d2:fb:a0:36:26:e1:
e7:22:8f:e3:26:d0:4e:68:fa:5d:4f:85:61:aa:03:fd:07:9f:
27:25:64:cc:67:a8:a2:95:5a:3a:a7:27:f6:13:da:55:9d:92:
64:2e:6f:3d:f5:3a:ce:db:93:c6:15:41:40:17:eb:c8:7d:f4:
14:56:24:ca:94:7f:5e:ae:d3:7e:0b:87:20:4f:4b:ef:78:24:
3c:95:3b:b7:81:9e:c8:0f:4d:6e:ec:ca:d7:98:c0:db:72:09:
0d:c1:ab:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:05:19 2025 by rpki-client