Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab77de3d-5294-36a2-86a9-d87e947fee25.roa
File: ab77de3d-5294-36a2-86a9-d87e947fee25.roa (raw, json)
Hash identifier: vTCjNeHSXEJLPqlM+neuGFTm36ayg29JwRZjwS5F7wg=
Subject key identifier: 54:C4:19:A3:00:81:A9:D8:13:F1:67:3C:29:C3:2F:AE:3D:40:28:64
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF37D96E967CE916C808F0020
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab77de3d-5294-36a2-86a9-d87e947fee25.roa
Signing time: Wed 18 May 2022 12:00:00 +0000
ROA not before: Wed 18 May 2022 12:00:00 +0000
ROA not after: Thu 23 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.184.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f3:7d:96:e9:67:ce:91:6c:80:8f:00:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 18 12:00:00 2022 GMT
Not After : Jun 23 04:00:00 2022 GMT
Subject: CN=2870c3ae-9430-4690-8981-87f8df7beb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9a:60:ab:16:79:c4:c4:8b:a3:b7:ad:67:6c:
73:52:a5:4d:84:98:df:c1:53:a6:d7:1a:d8:ed:d2:
9e:eb:ac:39:dd:3e:d9:88:d2:1d:94:bc:88:40:a9:
e3:a9:81:51:df:b1:66:1f:50:0d:58:18:8d:24:09:
75:de:5b:5e:97:18:4b:14:6e:ef:ff:b4:28:7c:f2:
17:de:e1:c6:af:45:8d:5d:2e:8b:8e:2c:89:65:5b:
96:5a:5c:a2:c5:a3:79:c7:b0:b5:b5:70:56:ea:7f:
6f:4a:eb:9d:f5:60:1e:b2:cb:75:61:95:4d:09:6d:
9e:e6:57:71:4d:9f:d4:ee:2c:88:81:78:5c:29:95:
ab:95:c3:62:70:64:ba:8f:78:ac:50:e4:1c:e9:7d:
1e:59:d0:4b:87:75:07:27:29:01:51:49:11:bc:25:
10:c8:b5:4f:aa:46:57:2a:64:ac:01:0d:b8:28:d3:
69:f1:96:24:4c:21:4a:5a:7c:f5:e2:fb:20:a2:08:
9f:2d:1a:84:22:13:da:09:fc:7a:3e:cd:77:40:1d:
14:71:31:49:d0:a3:8a:1f:3b:89:e7:62:d2:f5:79:
4f:6e:86:6f:d1:72:e0:18:fe:e6:22:0c:e5:f2:e8:
2d:8a:d4:38:6a:fa:4e:2a:03:0c:9a:66:bf:a7:b9:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C4:19:A3:00:81:A9:D8:13:F1:67:3C:29:C3:2F:AE:3D:40:28:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab77de3d-5294-36a2-86a9-d87e947fee25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.184.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:61:15:92:59:31:76:48:5e:b1:98:75:20:0f:75:7d:f7:2b:
1a:7f:6a:ce:55:37:7b:d0:18:68:83:63:4c:3e:ff:e1:b3:92:
95:e0:70:ae:43:7e:69:15:19:3b:42:fa:63:8c:9c:b1:a8:60:
af:a8:56:81:49:d2:3e:ae:ec:8e:ad:09:f8:62:ff:92:5a:32:
96:84:45:cd:04:41:01:d2:47:04:68:ab:7f:01:26:b1:fd:45:
02:07:a0:e1:e0:e0:50:be:f2:9d:c3:af:90:e7:33:c8:40:a6:
4c:dd:8b:3c:e7:9a:4e:91:c4:c2:d8:b3:5a:5d:2a:5b:65:21:
6a:f5:85:f3:51:77:73:b7:42:af:60:52:35:f9:be:e3:9f:95:
b2:eb:f4:50:e8:a2:f6:d6:12:ce:fc:31:0d:13:ba:1b:c9:9a:
d0:fa:8a:1b:5b:e6:a7:b1:be:12:c7:18:22:c6:43:f2:72:78:
05:fb:37:66:74:da:e9:15:2f:7c:71:c6:75:13:fd:67:08:0b:
a9:08:db:12:2b:76:ec:53:60:74:73:18:7f:d5:c9:c0:ad:1e:
cc:cf:a5:13:da:02:9b:b9:d4:08:14:d1:92:49:6b:b5:3d:73:
3f:89:28:d7:7c:79:cb:8a:a6:af:87:24:d5:f5:37:59:5d:44:
df:61:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:53:28 2025 by rpki-client