Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b7b728aa-7274-3971-8f50-e935758945fc.roa
File: b7b728aa-7274-3971-8f50-e935758945fc.roa (raw, json)
Hash identifier: t/Fjy6aktpWemzaZX1rHPMnla0Vz8hZtAQ1TAg632PM=
Subject key identifier: 6C:C9:E0:DC:FC:C4:DF:36:A2:64:12:B0:D2:EB:E0:BA:C7:85:B6:E5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FDC89A3A2360AAFC1544A2E54
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b7b728aa-7274-3971-8f50-e935758945fc.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:dc:89:a3:a2:36:0a:af:c1:54:4a:2e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=c8ceb67e-7810-4a36-b4dd-40fd7de8570a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:bb:a7:ce:06:fe:0c:f3:8c:0a:d5:93:1a:
aa:24:b2:ea:7a:e5:3c:e8:76:17:b7:af:d1:62:dd:
ff:01:d5:bb:31:06:32:89:af:30:97:a2:cf:1e:36:
11:31:7f:f6:55:fe:e3:77:65:b4:2d:58:5e:5a:a2:
ca:82:1d:e5:52:64:2b:04:3f:a7:25:b3:ba:5e:4e:
bb:15:71:cf:65:3e:6e:ed:64:e2:71:8c:93:79:ef:
b2:60:16:02:59:93:6c:05:17:47:23:6f:53:ea:77:
8e:36:49:e4:93:17:6b:fe:34:16:a2:93:20:b7:9f:
79:a3:3a:1f:b8:cd:73:f2:f7:25:01:e1:69:fa:20:
a6:3e:77:cb:38:4b:95:09:76:21:75:32:64:ab:ef:
e5:57:f4:ca:1e:d3:62:41:aa:7a:53:66:88:31:7d:
67:92:89:4f:7c:1a:40:ff:86:67:b7:ba:a2:85:e6:
68:16:32:a1:fd:aa:68:ac:ac:69:74:5f:ce:4e:17:
9c:b6:9a:32:7b:36:72:d7:17:de:b2:33:7c:37:cb:
de:17:c1:ab:69:40:97:b0:13:1d:79:f4:35:a8:4f:
12:04:07:ba:9d:3e:c3:10:17:b5:3a:1a:eb:8b:d4:
c2:63:b1:e6:92:52:f2:b8:20:14:39:93:4e:e5:36:
32:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C9:E0:DC:FC:C4:DF:36:A2:64:12:B0:D2:EB:E0:BA:C7:85:B6:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b7b728aa-7274-3971-8f50-e935758945fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:a9:4f:01:4f:51:7d:fe:86:55:3b:33:dc:9b:52:00:c0:d7:
5c:4a:5f:f0:77:41:cf:70:67:e9:49:7f:c3:22:48:f2:02:f6:
03:18:6c:d2:6c:a7:be:9d:00:f1:85:b3:4f:82:e3:d7:46:70:
be:a0:71:4c:a8:2c:0e:cc:e2:5b:9f:6a:98:dd:8c:9c:d0:22:
63:ca:16:c1:dd:58:ee:62:69:f1:c7:c4:d2:ae:9c:e3:ad:bb:
4d:cf:3b:63:02:87:20:33:b1:5f:fc:fe:9b:7f:c9:87:57:b2:
fd:1d:21:8d:32:74:fd:da:f8:bb:86:f6:39:9f:61:19:4a:58:
00:0e:93:3d:3e:8c:37:30:26:3d:b3:26:d9:bd:90:17:29:96:
d0:91:b9:38:72:b6:07:57:d9:47:c9:86:66:70:26:ae:3c:95:
52:6b:2d:f6:99:75:da:bb:20:0f:1f:49:c9:0f:de:ac:1c:9d:
2b:b1:ea:65:21:22:95:94:68:fc:3d:4c:be:db:bc:4f:4e:a0:
7a:52:73:3c:db:7e:31:08:1a:72:b4:b0:61:73:6e:08:df:c8:
38:c8:1f:e3:df:8b:e4:1e:15:4a:07:fa:ec:1f:d9:97:db:e9:
77:54:9a:c9:dc:d0:59:9b:6c:2e:36:a4:40:18:67:9f:a8:20:
bf:e2:59:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:28:38 2025 by rpki-client