Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b00e20ec-7546-3a42-a3d9-1e3141e0d6df.roa
File: b00e20ec-7546-3a42-a3d9-1e3141e0d6df.roa (raw, json)
Hash identifier: J5GYQRSF9bGf133E3WsBd0X8YP6s8+4YAO9XAQ/a2LQ=
Subject key identifier: 09:19:D0:61:03:3B:85:8B:5F:69:27:39:F3:77:CF:64:74:94:4C:FB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D5657437A444A346988FB4BC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b00e20ec-7546-3a42-a3d9-1e3141e0d6df.roa
Signing time: Thu 24 Mar 2022 04:00:00 +0000
ROA not before: Thu 24 Mar 2022 04:00:00 +0000
ROA not after: Thu 28 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.158.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:56:57:43:7a:44:4a:34:69:88:fb:4b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 24 04:00:00 2022 GMT
Not After : Apr 28 04:00:00 2022 GMT
Subject: CN=1b04cf81-408d-4217-8d87-736219614661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:a1:62:55:54:f4:08:e7:83:3d:bc:db:2a:
4b:2f:0f:3f:45:51:31:3c:ef:ec:11:b9:d1:5f:d3:
ec:68:5b:b7:39:15:a1:17:01:be:69:45:00:e7:54:
ba:39:15:3f:08:76:c2:3e:6e:02:d4:b9:75:0c:f4:
15:cb:92:9a:5c:b0:20:81:ed:6d:31:b8:51:b1:a2:
5e:0b:57:b2:91:d5:b0:e1:06:84:37:a1:73:4e:67:
f0:aa:f5:3d:ca:8a:d8:7e:2f:4e:e5:ad:d6:97:31:
15:61:2b:ae:7d:87:10:b9:c5:fa:40:23:f6:e9:2e:
2b:12:4c:e7:88:1a:bd:6a:ae:c3:cd:c5:51:75:2e:
63:60:01:4f:ac:65:39:f4:25:3c:49:16:2d:09:d4:
2f:e7:6c:90:c9:44:f0:9a:27:09:8a:d3:f5:3c:8d:
ce:ae:95:45:df:e5:d7:e1:d5:ee:72:47:3d:f7:b6:
c9:10:ef:7f:40:fe:91:f7:5e:ba:68:9a:83:1e:82:
68:a2:85:09:c6:40:ed:94:32:79:7f:5e:32:1a:0d:
82:86:ae:08:ec:79:27:f2:e7:37:ab:58:cf:f3:4b:
a0:8e:66:bc:97:4b:94:cf:96:ea:8b:bc:4e:6c:1a:
df:d4:f8:2c:ba:f7:25:ef:cf:1f:c1:0a:25:97:3c:
35:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:19:D0:61:03:3B:85:8B:5F:69:27:39:F3:77:CF:64:74:94:4C:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b00e20ec-7546-3a42-a3d9-1e3141e0d6df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.158.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:2c:51:10:81:19:31:6f:c6:80:0b:b9:d4:1c:ee:a5:f4:81:
fa:19:fb:28:41:a6:ea:2a:00:d0:ec:86:b3:20:f9:81:d6:4c:
4f:e0:2c:a9:b8:eb:31:ab:a1:d5:28:e9:fb:66:ed:72:10:89:
91:2a:f8:be:a4:21:13:25:6c:62:ff:b4:af:80:7f:c9:07:19:
ed:5d:3a:d9:bb:b9:2f:26:a3:76:03:23:3f:74:b9:ba:8d:a6:
68:ae:04:6f:c6:28:36:aa:62:35:c6:d9:d5:2d:d1:af:45:60:
2e:d0:f6:f8:fb:ff:20:e5:ca:1a:35:c9:2a:56:2e:5d:39:55:
aa:c7:ab:09:df:eb:e0:e6:14:b6:28:6b:80:65:c3:39:a5:44:
a3:60:1e:7d:cb:21:a7:fe:35:d0:49:54:b1:20:df:fc:7a:a9:
05:91:ad:18:88:69:b9:a7:1a:ca:c0:a1:4c:dd:a9:a1:32:43:
ea:7a:63:af:e3:13:dd:05:19:1f:39:b5:c0:a3:aa:6a:03:3f:
a8:f3:50:aa:70:0a:6c:14:19:5e:cd:0e:7a:e2:64:9f:de:bd:
86:2d:ee:e2:c1:bc:bd:d0:f5:c2:bc:b4:51:31:4f:c1:1e:c8:
ca:27:cf:66:d3:c8:ac:e1:3c:45:b1:94:a9:c2:89:da:a1:9d:
60:94:6f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:42:25 2025 by rpki-client