Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b27c552e-7311-3ef1-8a57-071f9c42d2b1.roa
File: b27c552e-7311-3ef1-8a57-071f9c42d2b1.roa (raw, json)
Hash identifier: 10BcdEbrjfaq6nUK95IgfwHpw4+miXP1WKdbyXP7Vmo=
Subject key identifier: 79:6B:97:CD:9F:60:FF:05:15:80:EE:D2:CB:D3:8F:16:84:DE:B6:E7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C92D5451AB00144D7F40F50C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b27c552e-7311-3ef1-8a57-071f9c42d2b1.roa
Signing time: Thu 13 Jan 2022 05:00:00 +0000
ROA not before: Thu 13 Jan 2022 05:00:00 +0000
ROA not after: Thu 17 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 15.254.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:92:d5:45:1a:b0:01:44:d7:f4:0f:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 13 05:00:00 2022 GMT
Not After : Feb 17 05:00:00 2022 GMT
Subject: CN=c558edba-e63e-4325-b4a5-5502d2870787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:99:8a:e2:19:78:6d:3b:21:d2:15:1d:0d:
8b:24:55:df:98:92:ae:02:82:2d:57:da:f4:19:1e:
05:2b:fe:90:a1:c3:d8:6c:a0:b2:32:79:a4:83:c5:
ba:62:d7:35:78:73:d6:85:be:0a:96:62:f7:b1:f0:
02:27:6d:e9:24:67:e9:27:f4:bc:21:c9:65:5f:c1:
36:b4:5f:3e:e5:4c:08:ee:29:50:64:85:85:72:fb:
60:fc:28:d1:33:01:47:5e:8d:d0:ab:ad:4c:12:7b:
be:fc:d1:8d:e5:77:87:cb:00:a7:ab:8a:70:5d:91:
7c:21:45:4f:94:1f:7f:db:b5:b7:68:c4:ae:7f:4b:
4a:33:95:0d:cd:46:77:ef:e6:8e:ed:8d:3b:b0:80:
ab:40:af:6b:94:56:5a:87:08:71:04:5e:54:50:4e:
c2:f2:df:1c:04:81:e8:b4:48:0d:32:69:c5:c3:10:
e0:e2:91:66:52:7a:cd:81:fd:b1:77:5f:a6:e9:41:
a4:f6:75:bc:c8:b3:40:89:8f:c8:fc:09:d4:5c:c1:
31:c5:31:e6:df:ac:27:24:96:f7:50:67:9c:69:06:
cb:85:ac:c0:90:65:80:cf:9e:72:82:fb:ed:19:7f:
70:92:02:df:7f:25:3c:42:c0:61:32:06:21:fa:99:
c8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6B:97:CD:9F:60:FF:05:15:80:EE:D2:CB:D3:8F:16:84:DE:B6:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b27c552e-7311-3ef1-8a57-071f9c42d2b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.254.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:cc:29:46:d1:15:e9:5d:77:58:ad:9b:6d:30:55:9f:f8:de:
77:8e:37:87:ad:49:58:3c:b3:76:14:39:91:03:c6:a8:ea:c3:
48:53:4c:e0:8e:32:f4:3c:08:7c:d3:aa:9a:d1:da:ce:39:62:
92:45:6d:94:4f:fd:77:32:66:44:32:4e:31:f1:4b:ed:bb:e6:
da:c0:ac:ca:34:ce:20:b3:b5:f4:d0:68:dc:f6:28:ee:02:5b:
94:84:11:72:5c:0e:3c:5e:4d:99:d8:aa:36:b3:c6:0d:81:e3:
f9:dd:59:4b:b2:8f:3c:2a:31:44:33:5b:8e:5a:05:5f:49:44:
4a:f0:d5:bb:ca:bf:4b:9e:ec:e8:e4:db:51:83:fb:76:b8:23:
68:39:fd:86:98:ba:76:0d:71:b8:49:15:dc:3d:0c:2e:44:64:
d1:fc:e5:de:df:26:c8:7a:55:e6:8a:3a:a0:4e:59:64:0d:d8:
11:78:dd:16:89:2b:ab:ca:32:b7:87:b6:03:41:20:05:2c:a1:
49:62:0e:bd:71:36:2a:51:fb:14:4b:af:22:0c:89:92:f1:5d:
bd:a1:c9:c5:18:93:ee:7a:19:e7:fa:81:02:24:82:5a:1f:61:
6f:c4:e3:0d:57:d4:e5:3f:8e:19:6f:35:4e:9f:09:8b:f9:d9:
8d:c3:42:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:07 2025 by rpki-client