Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bce109e4-d60b-3ab9-a568-8a51d2f6843c.roa
File: bce109e4-d60b-3ab9-a568-8a51d2f6843c.roa (raw, json)
Hash identifier: UVCqdzbxiXxXl/BlxCD06+pX19mYHBYTcrspPao9UNY=
Subject key identifier: 9E:E3:47:6A:C4:93:7F:BC:57:97:39:A8:73:B1:96:38:0F:C4:68:E9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403E98F7EDA6780CD53E117460
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bce109e4-d60b-3ab9-a568-8a51d2f6843c.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.238.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3e:98:f7:ed:a6:78:0c:d5:3e:11:74:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=b1b0f3b5-e521-44a3-974e-2e68b5f7fe5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:f8:b9:b5:1c:fa:a7:84:fa:be:fd:ec:6f:
d9:72:bf:25:0b:5f:4a:cf:00:96:11:5e:f5:fc:3c:
a5:bf:8c:8b:60:f9:4b:75:da:f7:98:46:24:e2:3a:
6f:ca:3e:2f:d3:8e:37:f7:dd:09:29:28:76:fb:34:
50:19:c0:fe:19:25:19:ee:bb:6e:85:3c:57:c8:f2:
c3:fc:b3:73:36:7b:aa:ac:aa:8c:2a:23:68:1e:f0:
0c:ce:a6:ee:79:f9:7d:04:a2:b5:9d:06:8a:93:82:
2b:b5:ab:1f:09:23:10:d8:b6:d5:1f:25:27:7d:af:
20:f2:20:cc:ea:57:65:b4:34:6c:96:72:34:3c:ce:
d1:5d:d8:c7:1c:fa:96:35:29:71:91:6c:93:a5:a7:
3c:24:13:01:62:59:8d:4c:83:b7:4c:8a:bc:4c:b6:
33:a3:fe:18:af:c8:1c:13:3c:7d:fd:2e:bf:1c:7c:
d5:a1:84:16:b3:e4:a0:6b:9d:d2:22:e6:bc:69:93:
d7:87:9e:ce:1f:ef:71:bb:9b:4f:0b:3b:3b:1c:6e:
09:5e:c5:7d:91:c9:83:f3:70:28:8a:7a:ed:68:4a:
47:8b:e1:97:c5:4b:e5:94:3a:2a:07:aa:52:09:5a:
49:4b:1c:45:82:e6:fa:b3:3c:f6:ca:ea:8e:62:65:
75:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E3:47:6A:C4:93:7F:BC:57:97:39:A8:73:B1:96:38:0F:C4:68:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bce109e4-d60b-3ab9-a568-8a51d2f6843c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.238.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:06:a7:93:7c:af:36:5f:85:69:4e:f5:5e:7f:00:66:0a:9c:
f0:d0:53:65:60:eb:b4:ac:f9:34:52:fd:f5:83:77:61:e3:c8:
8d:04:32:9b:94:3a:0b:da:2c:53:b8:59:31:5b:19:fa:3e:d1:
b7:da:d4:98:d6:83:ab:17:61:02:a7:c9:3f:56:f2:22:a5:b3:
f5:d6:51:3b:d8:fa:f3:88:d3:0f:0c:38:e9:98:31:ef:2d:e3:
73:be:67:4f:ef:f3:25:a8:45:e4:1b:2d:9b:6e:8f:43:b5:74:
16:b6:0e:b9:06:3b:72:bc:db:6a:22:ca:61:fa:a7:8b:64:62:
a5:11:c8:c7:c1:a4:ed:a1:0f:b0:8a:78:53:5c:f0:f8:e0:e0:
c6:dc:c9:99:37:e9:a8:ff:e3:87:b1:bd:bc:10:b1:b0:4e:3e:
9e:4b:5b:40:81:cc:cb:d1:53:5d:04:56:13:f3:11:8c:aa:59:
41:99:b2:fc:be:b8:39:2e:41:5d:26:f7:4a:40:84:c0:08:0f:
e7:1c:5a:9b:3c:d6:90:ca:d9:cd:87:ae:67:e9:4c:01:d8:24:
11:92:e3:67:b2:df:28:83:b0:59:ba:b2:44:87:39:e3:14:49:
c0:39:e8:ed:43:d7:f6:44:0a:a8:95:6d:f2:2a:de:b1:a0:77:
55:3e:36:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:19:19 2025 by rpki-client