Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf3e5ee8-275f-3774-aea4-5d50f351cc70.roa
File: bf3e5ee8-275f-3774-aea4-5d50f351cc70.roa (raw, json)
Hash identifier: vrTFVBPpnvcp0IyBwX0DxOr0pX8FTjCsgYaE1SnEFG8=
Subject key identifier: 4F:9C:D5:88:FC:71:F2:9F:3B:FE:A1:C3:A2:8F:91:43:E0:CD:78:92
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840036B7AA0033759895B044000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf3e5ee8-275f-3774-aea4-5d50f351cc70.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 15.150.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:03:6b:7a:a0:03:37:59:89:5b:04:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=90c305e7-d9b7-48df-b997-1d35e2fdc0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:80:30:fa:67:6e:f5:b8:13:00:39:35:41:
aa:64:21:d5:31:98:a5:80:ee:e6:03:9b:21:25:20:
c9:14:5c:86:03:d2:5c:a3:4e:2d:78:5d:c3:f7:96:
9b:7b:3f:93:b3:b3:96:90:f5:0e:f4:a2:ed:ee:4e:
86:d2:94:7f:79:bb:2f:7f:45:a1:06:a7:85:41:9a:
f3:a4:5f:b1:63:06:f1:36:d2:60:d5:85:5f:85:8d:
be:e7:30:e5:89:5a:c1:fc:de:af:b8:57:38:3f:13:
27:f1:ee:c2:51:8d:e5:66:50:8f:df:85:c5:bb:6f:
e3:69:73:c9:0a:af:9a:fe:30:03:54:fc:49:8f:c2:
fe:e7:e7:ce:c9:d0:a8:78:d3:f4:a3:45:08:3e:57:
fc:2a:c7:f0:76:14:86:41:a7:31:3c:13:37:24:47:
a1:c0:db:d1:8c:0c:16:19:5d:30:df:fc:44:38:ae:
d2:6f:c2:ab:11:1f:6f:14:c5:35:5e:71:e9:e5:3d:
d4:6e:8a:51:03:d3:fb:b2:3e:3a:6c:60:7e:fb:fa:
95:c1:8c:03:74:4f:ee:f9:89:f5:ca:05:cb:51:7a:
4a:4f:66:ee:4c:21:c2:ae:ea:f6:d8:b6:ad:c4:bd:
7f:e3:be:e7:b5:0b:fd:30:cd:a3:9b:33:a7:ad:d9:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9C:D5:88:FC:71:F2:9F:3B:FE:A1:C3:A2:8F:91:43:E0:CD:78:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf3e5ee8-275f-3774-aea4-5d50f351cc70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.150.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:79:4f:f8:a7:12:ce:8d:1e:1b:50:56:e6:60:3b:37:7d:8b:
f0:3b:c4:92:de:a9:63:c4:af:93:dc:6a:56:79:25:08:7d:07:
25:ff:4c:59:52:5a:ba:76:15:36:94:4b:bb:69:0d:cf:9e:ab:
7f:90:17:d0:13:65:c1:fd:2d:02:30:03:16:7c:49:97:cf:6f:
af:c0:2a:ec:32:c0:a2:75:b5:11:cd:f0:cf:94:4b:58:13:35:
00:f7:cc:32:55:50:64:5c:cb:3a:d4:e7:17:4e:54:40:8c:89:
12:34:49:db:c8:31:e2:c3:a3:05:a6:ef:ef:f9:79:d4:16:cb:
73:13:32:51:73:04:aa:7e:a6:9e:4c:b1:64:54:37:a4:cf:cd:
89:a3:88:11:dd:d4:1a:45:fa:42:77:d4:ec:cd:3a:a0:08:14:
8b:95:7e:15:2b:c1:33:81:03:a2:1e:39:76:e6:27:44:e9:52:
1a:41:6a:bd:87:e0:30:ab:a5:06:8f:7f:f0:8b:13:07:43:2c:
52:90:d9:58:4d:d8:2f:7f:e5:db:39:fb:1a:ef:a0:f5:8e:33:
d1:7b:86:e2:6b:dc:02:5e:af:04:2a:bb:7b:0a:8a:05:5e:a5:
8d:ef:bb:10:73:0f:05:da:0c:07:86:43:78:97:18:c4:62:8e:
71:53:d8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:35:01 2025 by rpki-client