Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b5b33c37-7965-3b78-b23c-d18fb2a54cbf.roa
File: b5b33c37-7965-3b78-b23c-d18fb2a54cbf.roa (raw, json)
Hash identifier: jX3XqL/19ApPKRejnpUu6qJZyOpe60EBd2c/Ctspl1U=
Subject key identifier: CA:43:D5:06:10:D7:90:16:4F:AF:E8:1D:25:36:01:25:84:BD:89:7B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6BB1819CDB65459FE6165780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b5b33c37-7965-3b78-b23c-d18fb2a54cbf.roa
Signing time: Thu 30 Dec 2021 05:00:00 +0000
ROA not before: Thu 30 Dec 2021 05:00:00 +0000
ROA not after: Thu 03 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.221.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6b:b1:81:9c:db:65:45:9f:e6:16:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 05:00:00 2021 GMT
Not After : Feb 3 05:00:00 2022 GMT
Subject: CN=06d4d03b-0848-4ae2-8744-b17b57980f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:07:6d:78:90:6c:13:38:f3:3c:f8:fc:bb:
28:2d:59:16:1c:20:10:1e:55:8e:0d:09:93:fe:a6:
c2:3a:97:5a:f7:42:07:e3:36:bb:06:89:77:f1:25:
e1:b6:35:a1:7b:3a:82:73:1d:96:54:6f:72:d9:a5:
5b:d4:c3:c5:ea:9c:1d:4d:f8:b5:ed:c3:53:92:44:
4a:98:32:eb:7a:0a:6e:1d:b6:16:05:94:22:98:41:
3b:fa:14:16:11:ae:72:26:ee:2e:3d:9b:aa:fd:7b:
70:95:57:af:6b:12:f8:5a:3d:bc:05:63:0a:cc:a7:
85:13:26:4f:0b:66:7b:45:74:d0:01:88:22:67:aa:
eb:91:9a:bb:eb:db:3a:e6:05:3b:6f:be:5a:b5:1d:
fa:49:53:7e:bc:70:be:27:b2:8d:8a:97:8b:87:1d:
4e:4a:cf:74:bd:9d:92:1e:ef:6f:7e:99:66:56:34:
ec:4a:78:f7:ed:77:83:56:b5:ce:86:a2:92:2f:4c:
13:95:de:34:51:e2:e7:59:17:9f:95:d3:c5:46:6e:
0e:55:43:16:08:37:e4:2c:3b:68:a2:1a:90:76:28:
65:e0:5f:66:83:66:89:36:65:36:56:9f:ef:dd:b5:
64:f8:1b:95:d1:2e:6e:19:1c:a1:92:24:cb:26:d4:
ac:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:43:D5:06:10:D7:90:16:4F:AF:E8:1D:25:36:01:25:84:BD:89:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b5b33c37-7965-3b78-b23c-d18fb2a54cbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.221.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:a0:37:7f:d1:3a:31:20:f6:f1:bd:51:6a:b2:f0:32:6b:1f:
68:ea:a4:63:b2:52:35:d4:27:52:2a:5d:cd:75:fd:59:cb:df:
fc:69:8f:18:3e:13:db:1a:fb:3b:1f:06:4b:b4:9e:04:87:fa:
59:44:e7:a7:bf:8c:dd:84:b8:68:f4:dc:e7:6f:32:87:f9:ae:
2c:2f:3b:df:39:70:cb:a9:f9:9f:d8:eb:ea:63:3e:8d:21:34:
17:d0:40:45:de:2d:2f:77:ae:e4:c7:8f:ae:02:45:47:02:eb:
57:9b:cd:ca:28:28:5e:0b:43:0f:f4:7a:e4:f3:e2:fc:8a:12:
d0:d8:bb:b6:2c:71:9e:5a:8e:31:fa:06:e9:b2:d9:00:64:c4:
9f:88:ed:2f:9f:a2:52:ed:82:62:cd:c4:f5:ec:4c:28:a2:c0:
60:d6:32:df:8b:17:d3:0c:57:4e:fa:27:53:e2:ee:24:28:77:
f3:ea:fc:01:08:d9:f2:79:36:11:30:db:35:9c:6a:56:96:56:
95:92:a0:43:04:22:82:63:01:a6:84:e6:07:9c:14:96:62:ac:
f8:ee:aa:52:ed:65:76:02:bd:1f:eb:22:79:d0:ce:85:5a:92:
d1:28:93:b6:87:81:2f:e7:33:19:22:79:34:f7:dd:e7:f9:cc:
55:3e:09:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:45:43 2025 by rpki-client