Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab9c0966-72ec-3546-8aca-440c2b77cd93.roa
File: ab9c0966-72ec-3546-8aca-440c2b77cd93.roa (raw, json)
Hash identifier: Q6HMWScFfsvtDSXkF/aD3/x5mht7N7oYyD0mhSdMTZE=
Subject key identifier: 9B:88:41:9B:D5:DE:A4:93:D6:B5:10:D4:EE:E0:BC:36:F5:F4:E5:1F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CB9EAD4A28F48737531B4BA80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab9c0966-72ec-3546-8aca-440c2b77cd93.roa
Signing time: Thu 27 Jan 2022 05:00:00 +0000
ROA not before: Thu 27 Jan 2022 05:00:00 +0000
ROA not after: Thu 03 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.198.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:b9:ea:d4:a2:8f:48:73:75:31:b4:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 05:00:00 2022 GMT
Not After : Mar 3 05:00:00 2022 GMT
Subject: CN=f41c25be-eb3b-4d6c-aa88-1fec9c24ebd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:3e:57:99:bd:f8:00:d2:0a:3c:c2:c5:9a:
c6:bf:ae:9a:7f:32:e2:d7:45:15:09:5f:48:cb:60:
30:9e:97:9f:01:42:a1:3f:d9:1c:f7:13:4d:19:f4:
6d:b9:0b:9c:2c:16:2e:01:61:82:d6:38:0e:ff:2e:
b3:b4:22:97:5a:85:32:e2:86:1f:21:fa:4e:8c:1b:
96:a0:f8:d2:bf:f1:c3:a0:4b:0f:50:e6:fc:59:5d:
bc:3e:e6:2f:ef:e8:60:64:89:fa:6b:7a:e5:c2:bd:
09:36:35:66:23:20:5e:e1:56:ad:91:a6:96:cf:d3:
45:51:61:a4:6d:82:5b:ab:10:4d:05:26:a2:d4:6a:
fb:0f:83:f7:87:30:93:cf:c1:c7:f5:ca:7a:37:32:
46:44:bd:ef:0d:74:bf:ba:db:bc:2d:35:0b:61:18:
95:f9:eb:36:a2:6f:3d:ab:f0:b6:db:e9:dc:cd:a0:
c5:04:a2:c9:e8:e5:27:05:7c:42:1e:9b:14:c8:3d:
e5:ed:2e:5c:1e:5c:dc:ff:00:8e:c9:54:c0:c3:20:
68:c7:04:c0:52:03:58:01:a1:5d:06:e3:c6:9a:63:
88:80:68:4b:ec:45:7f:e2:ce:6f:80:18:2f:13:72:
1e:5d:97:a4:04:c5:d3:5a:db:7f:db:3a:02:bb:f2:
ac:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:88:41:9B:D5:DE:A4:93:D6:B5:10:D4:EE:E0:BC:36:F5:F4:E5:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab9c0966-72ec-3546-8aca-440c2b77cd93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.198.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:0b:c0:60:32:6d:f9:c9:3b:25:49:7d:e0:eb:64:b7:55:1f:
7e:0f:1c:0a:74:4d:76:25:06:79:a7:d3:7c:4d:55:1f:b9:f0:
19:b8:57:09:8f:91:e8:da:26:e0:48:a9:ae:91:c7:b6:f9:72:
6a:17:78:74:54:0d:57:ad:5b:59:2e:0f:6a:ec:ec:15:fc:df:
48:46:97:80:34:f5:6e:6f:70:93:80:b5:28:2a:59:a7:e5:24:
66:e5:ab:92:87:d6:1d:b2:d8:7a:cf:47:49:ac:95:89:31:08:
6d:40:3d:42:d6:cb:c4:bd:dd:f2:46:21:dd:e5:57:bf:15:a9:
16:93:52:24:29:b7:de:ec:25:e3:b7:03:20:66:77:55:8f:44:
e6:81:71:35:52:0b:62:db:2b:ae:1f:49:1f:cd:4d:f0:34:c6:
30:aa:c0:36:83:3b:cd:a7:6a:70:13:4e:30:a9:a0:7d:73:c3:
44:a3:29:65:78:eb:c2:6b:af:80:55:0b:18:b2:23:da:1b:c9:
28:40:8f:44:37:52:54:c3:df:eb:64:14:5c:b8:97:ad:47:77:
72:08:7a:b8:37:a3:d9:6b:c9:69:d0:aa:2e:ab:9f:88:90:38:
2f:84:db:fe:9c:6b:55:a9:62:31:ae:29:a5:20:d6:95:7e:ab:
f7:b7:0a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:55:14 2025 by rpki-client