Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/afa26851-8aeb-3ffe-801c-aa3ea481cd66.roa
File: afa26851-8aeb-3ffe-801c-aa3ea481cd66.roa (raw, json)
Hash identifier: V8NDzy369xF/QMCLEtk4xm1nDtG+AyWu5wctOhGRn7U=
Subject key identifier: 81:C6:00:1A:82:98:60:E2:1B:2D:B6:24:95:08:B7:18:B3:79:23:3B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840033E7181490E1AF6E2980880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/afa26851-8aeb-3ffe-801c-aa3ea481cd66.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.212.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:03:3e:71:81:49:0e:1a:f6:e2:98:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=4103015a-dca1-4531-a868-37960104329a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4f:ea:e0:e1:d9:c0:18:45:e4:2d:13:5e:c6:
ba:96:c1:4a:6d:bf:fb:2d:47:e3:a8:e3:3f:60:7a:
25:f6:3c:61:ac:cf:cb:d2:fe:67:ce:2d:c4:ca:d8:
d5:77:34:2e:dd:bb:a9:1d:95:72:ba:12:98:37:05:
40:0b:8f:29:d5:14:ed:f6:7e:28:a2:96:a0:d4:dd:
c2:b8:30:99:60:90:71:2c:c2:0f:b4:f5:f6:77:70:
6b:af:cc:6f:95:96:92:ba:1f:47:42:55:cc:d5:ea:
2d:5a:72:2f:4a:90:e4:b5:1b:86:f0:3d:27:ec:d8:
f6:16:0f:c7:35:39:b0:4e:97:7e:b5:23:20:c8:7e:
04:11:35:ba:79:14:b6:7c:de:66:da:bd:68:0c:8a:
a1:6c:f2:da:00:b2:5b:1a:38:a8:09:10:a5:24:50:
2a:8c:c0:2c:9a:45:91:e8:de:c6:45:58:4b:30:76:
89:6c:d1:09:6b:8e:58:00:65:d0:0c:80:9b:56:fe:
a6:82:71:65:38:5b:89:7d:eb:6c:53:21:eb:94:c4:
1d:9f:ac:2a:2e:99:99:90:fd:3e:f4:7c:a3:16:7a:
13:f1:a1:1d:23:05:ec:6f:4f:01:29:0b:c7:c4:a9:
9e:e8:bf:91:48:ab:4f:a0:d5:29:b8:ba:d9:3f:fa:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C6:00:1A:82:98:60:E2:1B:2D:B6:24:95:08:B7:18:B3:79:23:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/afa26851-8aeb-3ffe-801c-aa3ea481cd66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.212.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:5c:66:b0:b6:26:56:4a:21:97:ae:c9:b2:29:c7:45:5d:47:
f1:23:3a:13:62:32:94:ee:95:9a:8b:49:db:65:eb:de:61:5a:
db:1c:4b:27:4f:28:fc:f0:3a:df:b5:00:be:06:e4:15:fa:83:
07:29:cb:cf:72:92:a9:92:2c:b9:c2:1a:7e:ca:71:76:ab:40:
a4:f1:dc:96:b7:2d:00:43:53:8e:5c:81:b9:6a:5c:89:63:cf:
1b:d3:ea:b5:5c:a1:56:86:7e:4a:fa:50:ad:de:f4:94:fa:16:
2c:bd:1d:68:7f:d0:80:5c:6a:1c:5d:0d:89:ff:52:3e:1a:6a:
35:b6:71:57:ab:07:74:ac:e3:43:09:55:2f:36:b3:62:f6:5a:
31:33:53:f1:8d:f3:32:58:70:03:1b:76:fb:3c:60:57:a4:24:
57:ba:81:23:08:06:8d:51:c0:32:9a:f4:fa:e6:71:01:82:0a:
d2:89:8a:4f:0d:1d:8a:0b:fa:86:0d:87:31:9f:a2:b9:3d:31:
c5:0f:48:41:65:dc:f7:4d:b6:28:a5:0d:d7:5b:65:4c:6f:93:
0a:f0:62:c8:f8:16:6a:33:9e:97:8e:c4:98:ea:5c:e8:64:3f:
ea:50:34:39:ac:e4:9b:0a:0a:76:b7:c2:f4:26:28:6a:48:49:
de:82:b8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:52:56 2025 by rpki-client