Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a8b90677-10dc-345b-a7d9-47fa016cca44.roa
File: a8b90677-10dc-345b-a7d9-47fa016cca44.roa (raw, json)
Hash identifier: PtYs90/GKh0toUIrktoRZIDUKoMndLsFCy/KySyKngc=
Subject key identifier: 0C:E2:A0:A3:9C:BA:02:F4:78:D6:6F:78:8F:93:B0:39:BA:13:A5:98
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E41B77B4E6B3EBA40C2A81380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a8b90677-10dc-345b-a7d9-47fa016cca44.roa
Signing time: Wed 15 Jun 2022 12:00:00 +0000
ROA not before: Wed 15 Jun 2022 12:00:00 +0000
ROA not after: Thu 21 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.184.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:41:b7:7b:4e:6b:3e:ba:40:c2:a8:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 15 12:00:00 2022 GMT
Not After : Jul 21 04:00:00 2022 GMT
Subject: CN=3705c034-e116-4b59-bfc8-0163c7b1a057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9e:fa:7f:7b:58:e7:e6:56:ba:56:ec:a9:1a:
75:04:74:0b:11:97:fe:53:da:46:3b:91:a7:d6:a5:
5a:68:b7:68:3f:6c:4c:d9:81:8d:f9:13:c9:ba:74:
47:0a:7e:65:6c:2e:9c:88:46:d9:bd:be:8d:a5:50:
1f:90:ab:11:6e:52:00:0f:c6:af:6c:9d:ee:71:6d:
a7:50:6b:e7:06:0e:17:fe:11:b0:01:1d:ad:32:97:
0b:68:ca:3d:f5:4f:77:84:81:20:39:4a:7e:d9:ac:
42:86:ca:2c:77:0a:bc:8b:c0:02:0d:05:11:14:87:
4d:2a:73:6a:e9:97:a8:46:22:bc:7c:30:08:c1:0d:
de:2e:78:c2:98:40:87:55:17:3f:74:29:5c:27:1a:
5b:f2:d8:ad:b2:eb:1e:cb:f7:38:80:50:60:21:01:
0a:1b:31:65:d3:1e:08:6b:f7:ca:13:1c:24:19:e3:
94:94:4a:a6:b0:b3:c9:6f:0f:32:a7:58:35:9a:4d:
2d:29:48:b7:3a:b7:55:5e:1e:b6:9c:c2:45:b5:fe:
29:ee:af:be:0b:47:fc:67:62:78:43:06:7e:d7:95:
84:3f:8c:80:8f:a4:7e:20:95:cf:6f:22:9b:05:79:
7a:3f:ff:15:0c:d4:96:6a:a1:28:85:3b:f7:d8:79:
97:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E2:A0:A3:9C:BA:02:F4:78:D6:6F:78:8F:93:B0:39:BA:13:A5:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a8b90677-10dc-345b-a7d9-47fa016cca44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.184.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:1c:09:aa:d8:50:f2:11:34:97:80:0e:05:0d:59:de:5d:23:
54:ea:54:af:5e:9d:25:91:19:2b:2b:3f:15:44:f5:02:5e:27:
a2:aa:89:9b:05:3c:62:b8:7e:4e:6b:7a:d0:34:ce:de:88:7c:
f1:f2:63:47:80:36:ce:0b:53:a7:5a:7d:fe:09:96:97:8d:89:
22:24:0b:1c:4b:df:12:65:6c:da:79:02:a2:0e:76:99:53:b0:
78:d4:ec:26:b8:19:70:4e:cd:f9:ab:20:1b:b5:ef:24:e1:58:
34:16:b4:e1:7d:e8:66:eb:5d:3e:66:75:c0:3e:8a:22:76:3b:
8d:22:61:6e:b9:0f:c9:6b:0b:5b:47:7f:fa:be:6b:26:82:76:
1d:7f:83:4c:df:33:54:42:9a:8d:61:13:81:e1:6b:ea:21:da:
33:e3:09:87:b3:4c:60:2b:0d:45:b0:3e:7e:be:6c:b9:78:60:
d1:ea:44:08:50:0e:4b:97:99:ce:4b:1a:f4:b7:36:60:66:e2:
71:0f:0f:1d:01:eb:14:c0:28:51:34:8f:90:f0:58:d6:ff:4c:
e6:72:aa:c5:32:06:36:cc:a1:15:27:a4:06:63:56:01:9d:62:
b4:14:9b:8b:89:be:3c:ad:b7:d4:ab:fb:0b:45:ae:2f:9f:3a:
f3:a7:49:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:18:53 2025 by rpki-client