Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b885d3de-9000-3713-acf7-d269db1543c0.roa
File: b885d3de-9000-3713-acf7-d269db1543c0.roa (raw, json)
Hash identifier: CISWppx/E2K4mJZFao/s2vqtvkLveIigFML0bL6Q/VU=
Subject key identifier: F6:4E:C8:8A:C5:36:EF:8C:C6:77:10:F1:D3:3A:73:73:0E:62:60:2A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FDC3F75DDD0D99530B6F521F4
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b885d3de-9000-3713-acf7-d269db1543c0.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 15.142.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:dc:3f:75:dd:d0:d9:95:30:b6:f5:21:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=64112cc7-49ba-4a64-8dc2-c77699c3595b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9a:69:97:7c:22:c1:7e:13:23:4b:a2:14:2e:
99:1c:48:20:9b:9d:f8:59:2f:1d:5c:2e:68:f9:34:
07:b7:81:bb:10:e0:d3:2e:ed:56:f4:0d:1c:d4:71:
da:d5:d7:1c:c7:2c:9f:06:7c:9c:44:3f:95:57:e9:
bf:3a:df:cb:9b:a7:46:21:19:99:9d:8e:12:66:00:
b8:3d:aa:7d:0e:1d:bc:a7:c7:21:eb:64:a8:c7:09:
1b:af:c5:91:f9:8c:d3:ae:ba:26:89:39:41:90:cc:
d7:11:8a:38:a5:92:09:92:9a:7d:46:16:96:4d:44:
83:73:62:a9:ef:ba:56:d2:a3:8c:22:5f:dc:d7:07:
6b:2a:fd:c1:5a:b3:a3:1c:03:c2:d9:ca:2d:00:56:
e5:34:81:5c:dc:25:25:80:ae:6f:ea:1f:23:38:e0:
1c:34:09:cc:ed:67:96:9a:82:79:97:98:ff:4f:a3:
22:d0:27:19:5c:17:af:2f:d1:01:7d:fb:01:9b:0b:
da:34:67:23:0c:7c:0c:2c:19:66:97:95:4d:77:4b:
4b:c1:55:ff:c5:8f:c5:9e:31:9c:38:d1:95:ae:96:
52:77:24:94:09:28:27:91:d4:a4:1f:6d:81:b9:c1:
17:66:8e:08:59:90:8e:3e:ba:40:84:d8:19:2b:f0:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4E:C8:8A:C5:36:EF:8C:C6:77:10:F1:D3:3A:73:73:0E:62:60:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b885d3de-9000-3713-acf7-d269db1543c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.142.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:58:6e:ff:70:f1:6b:51:f1:5c:20:b2:c1:6b:a7:70:0d:d2:
13:5a:cb:65:af:8b:52:7a:0b:5c:7f:ef:fc:41:05:ff:6d:ef:
84:6a:68:58:42:89:0c:1c:08:bd:0b:de:36:1b:54:ec:83:c1:
07:e9:c2:03:7f:0d:de:4a:98:68:96:b8:44:00:47:38:fa:5b:
31:9e:44:1b:2c:5c:34:79:f6:55:58:bf:43:fc:74:86:6a:dd:
95:d8:36:10:6e:1f:84:6c:11:c4:00:65:a8:00:1f:1e:c2:d5:
d9:a1:d7:e5:34:70:c0:af:8d:a6:e9:74:8f:fd:00:41:ce:38:
77:28:f9:45:c7:86:f9:ab:38:8c:e4:8d:ff:ed:7f:e5:69:cc:
a7:2c:1b:a7:ab:5a:b7:93:d0:34:99:65:4b:f4:8c:0d:56:91:
3a:29:0f:53:4b:37:f9:87:62:ef:da:7a:55:f8:95:44:96:ea:
d4:98:0e:98:35:93:9b:11:53:49:cf:6c:1f:ce:60:5f:28:35:
7c:86:38:fc:1f:a0:f9:3e:99:b6:2a:5a:fe:69:cb:ff:1d:7f:
17:76:06:52:cb:6a:4e:fd:d8:ff:ef:0a:37:3b:49:42:5a:7a:
c7:bb:24:bb:db:c2:91:ca:72:bd:b1:f2:75:ae:dc:0e:12:2b:
f8:c0:62:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:17:41 2025 by rpki-client