Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b5cf9218-85bd-3572-8f6a-5c58474ea55b.roa
File: b5cf9218-85bd-3572-8f6a-5c58474ea55b.roa (raw, json)
Hash identifier: L2diNut7W+uyqvWfGTcGu0EU6sBnIvKmtETFxl+vs00=
Subject key identifier: A2:79:CF:63:93:45:62:1A:C8:D8:2B:66:E6:62:D8:D0:5C:C1:37:8E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E41B02CD99B677AE172DFB880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b5cf9218-85bd-3572-8f6a-5c58474ea55b.roa
Signing time: Wed 15 Jun 2022 12:00:00 +0000
ROA not before: Wed 15 Jun 2022 12:00:00 +0000
ROA not after: Thu 21 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.172.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:41:b0:2c:d9:9b:67:7a:e1:72:df:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 15 12:00:00 2022 GMT
Not After : Jul 21 04:00:00 2022 GMT
Subject: CN=a498a126-dec6-4b1a-b174-f653bced7728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:d5:c9:e9:49:9d:39:bb:07:a5:12:75:fc:
4d:35:08:49:f7:56:68:73:08:bc:1f:d1:6a:36:4c:
37:46:6a:a6:03:2a:b3:7f:d1:8d:ef:7f:fb:24:68:
6b:03:28:26:b4:ed:54:f6:c9:67:12:c5:36:16:1a:
8d:17:42:1e:6b:35:89:95:35:bd:64:ba:40:07:14:
8c:2c:5c:f1:79:be:8e:c5:3e:c2:1f:67:0b:9e:c1:
22:91:43:1a:70:d4:29:3a:a9:fa:70:06:84:bc:00:
4b:ca:01:4b:c3:b2:f5:54:e3:1e:2f:ff:98:8e:8b:
9d:fd:db:2a:18:61:e6:83:69:6f:b2:c6:61:4f:25:
62:99:10:f0:08:be:20:69:54:f5:56:40:ab:b2:c7:
ab:31:ea:61:76:e3:f7:a8:2c:0a:bf:7d:f6:7f:19:
bc:14:65:e5:65:7a:e2:df:f7:f6:bf:c9:cc:35:f7:
7d:17:01:ec:a0:3c:a0:05:45:fd:ab:0e:a9:20:24:
64:66:2c:03:23:1b:65:56:9a:fc:9c:6d:f4:ad:d3:
cd:e9:06:8c:79:58:e6:2a:17:6a:11:ba:3d:c8:2f:
07:aa:48:79:2a:c0:88:a0:da:2b:ab:79:41:4c:0d:
1e:81:42:6b:b2:a3:4c:b3:b0:63:1b:c2:91:03:fa:
98:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:79:CF:63:93:45:62:1A:C8:D8:2B:66:E6:62:D8:D0:5C:C1:37:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b5cf9218-85bd-3572-8f6a-5c58474ea55b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.172.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:2e:5b:90:74:18:0b:43:ad:d7:44:78:ad:bb:1e:89:3b:01:
bc:4e:11:0c:0d:c9:67:56:7c:0a:65:a6:25:a3:c8:24:14:0f:
3f:42:4b:00:a1:f9:eb:7b:c9:e7:80:37:71:00:0c:00:12:1b:
33:a5:36:0c:e7:35:f7:42:d8:9a:c2:4f:19:39:25:7d:c8:43:
76:8c:10:87:b4:c3:0e:ad:ef:f5:8e:02:13:a6:f2:23:4a:28:
ca:88:22:39:4b:97:d7:63:00:80:c9:aa:b2:02:78:d3:2a:05:
21:61:d1:2a:ee:5b:c5:ff:dc:66:79:d6:df:8f:4b:96:f0:f2:
3d:ec:c6:81:04:18:97:51:48:f7:01:fc:9c:b3:89:9a:f2:36:
2c:2c:36:1a:2a:57:c4:4c:a9:92:21:84:77:82:f2:22:28:cb:
09:48:6e:b5:b1:90:ac:03:3a:66:46:a9:b6:f2:89:ad:80:68:
31:8e:a5:c0:8c:a5:19:3f:8e:a1:3c:66:e2:57:91:a6:28:ad:
2d:af:15:db:ff:52:82:da:a5:12:24:de:41:e1:ff:21:df:87:
b4:f3:3e:6e:7c:50:47:22:9c:de:53:e7:58:42:05:69:ae:21:
c1:c1:6b:02:fc:2a:e6:be:dd:b4:e1:17:92:23:b3:3d:d1:bd:
67:cd:13:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:51:37 2025 by rpki-client