Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/afece112-571a-3f61-9c99-f458e311c4ff.roa
File: afece112-571a-3f61-9c99-f458e311c4ff.roa (raw, json)
Hash identifier: pWJ6cLxsg1cOBevdj8xFchHsPNQqXLCQK8idFlH7NDc=
Subject key identifier: BD:02:7F:BC:EE:57:34:65:BC:62:F8:47:3D:8A:4F:B1:85:1F:15:2F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBBCE7FAEC0092684A1EFA600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/afece112-571a-3f61-9c99-f458e311c4ff.roa
Signing time: Thu 27 Jan 2022 05:00:00 +0000
ROA not before: Thu 27 Jan 2022 05:00:00 +0000
ROA not after: Thu 03 Mar 2022 05:00:00 +0000
asID: 3209
IP address blocks: 15.145.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bb:ce:7f:ae:c0:09:26:84:a1:ef:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 05:00:00 2022 GMT
Not After : Mar 3 05:00:00 2022 GMT
Subject: CN=b89ac258-301f-4a6d-adea-f591d1bf7d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:11:07:37:d2:ce:49:3d:96:3b:f2:2d:d6:
3f:96:02:1c:27:2a:2e:ae:9e:98:e2:64:f2:70:1f:
8a:a7:f6:7e:ed:54:f4:e4:c7:fd:fa:b1:ca:bb:30:
b6:61:1a:b6:57:cf:8c:67:b0:2e:0a:39:fa:eb:90:
ea:4d:8d:9f:77:fa:2a:83:06:4f:53:46:06:a5:61:
a8:25:69:5a:2b:7f:35:9c:4f:d3:3d:e9:b6:df:a8:
25:59:d3:07:17:15:27:45:ca:f8:e1:f3:64:d5:62:
12:13:ee:ad:d8:10:27:ce:f7:27:67:47:27:07:25:
38:a9:08:af:01:9f:cc:d6:4b:ac:80:58:e8:19:44:
36:10:54:cc:85:f3:b6:57:b1:fe:9a:b9:cf:49:6f:
1a:d7:17:64:22:ec:20:c4:74:11:f5:b5:89:91:66:
ab:f9:86:d7:27:8d:e2:ca:36:3f:e6:c7:70:4c:80:
33:e7:71:b9:ca:32:54:84:93:e0:9c:81:13:a7:a7:
95:c7:45:cb:ac:f2:5d:12:c8:d9:09:81:28:30:ed:
52:a7:b1:ce:59:0c:6f:37:f8:fa:90:4c:8d:f6:3f:
94:8b:f7:5d:43:96:2f:16:ce:48:24:21:07:c8:20:
52:2a:01:e4:9d:92:d4:99:81:c4:58:e4:fe:f4:82:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:02:7F:BC:EE:57:34:65:BC:62:F8:47:3D:8A:4F:B1:85:1F:15:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/afece112-571a-3f61-9c99-f458e311c4ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.145.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:9c:f1:5c:40:2e:85:8f:23:0b:93:43:f6:4a:7b:a2:65:6c:
06:aa:b9:10:11:84:89:42:2e:2e:72:d3:22:2d:37:f3:10:65:
69:8c:95:0b:32:e0:99:e1:49:25:4d:2d:2b:ce:73:b5:b8:00:
ed:3b:8c:e1:61:bd:0e:84:9e:5b:7b:c4:d0:e2:92:54:35:e3:
ae:9e:b2:be:21:f6:83:e7:ec:f4:12:3a:e8:d7:8e:ea:7a:73:
3e:71:3b:21:5e:35:4b:b0:22:b3:fa:44:d3:38:a8:17:12:e7:
50:19:40:6c:ae:09:22:ff:e0:67:23:05:b8:4c:b4:63:cd:4a:
75:3d:87:39:84:28:17:94:55:e7:8e:f2:cf:26:7b:83:99:02:
13:b5:12:1d:dd:64:aa:7b:f4:cd:d0:bf:2f:15:c3:86:3c:e5:
d6:75:bd:60:ae:69:82:f7:ba:11:d6:c1:11:79:fd:a3:28:c7:
da:b1:f2:9a:97:5e:63:e7:fc:a5:16:07:f4:86:d9:5e:a8:33:
c3:98:fa:7e:4f:3c:a6:f1:05:41:2d:16:98:a1:65:77:02:fd:
c2:a1:d8:44:b3:c6:66:ee:e3:3a:91:c3:0c:21:1e:20:42:14:
4a:18:0c:db:b2:25:83:0a:0f:ba:a8:35:ef:d1:4a:df:f7:b7:
83:b4:7b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:56 2025 by rpki-client