Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c5e6316f-2044-32e4-9a53-ea030154d002.roa
File: c5e6316f-2044-32e4-9a53-ea030154d002.roa (raw, json)
Hash identifier: hbHm9yQK/9LNyCDWT3mZJ0tHFXO83s4JKHN1k+IV2H4=
Subject key identifier: 66:86:25:03:34:0F:C4:24:CA:57:E3:F9:4A:31:60:53:D4:C2:F4:87
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE100E68DC6D45610C3B34500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c5e6316f-2044-32e4-9a53-ea030154d002.roa
Signing time: Thu 10 Feb 2022 05:00:00 +0000
ROA not before: Thu 10 Feb 2022 05:00:00 +0000
ROA not after: Thu 17 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.190.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e1:00:e6:8d:c6:d4:56:10:c3:b3:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 10 05:00:00 2022 GMT
Not After : Mar 17 04:00:00 2022 GMT
Subject: CN=b54a0503-5d6c-4cc2-a554-9b6bbe49398d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:30:36:4a:6c:b8:82:2a:26:f0:66:70:40:
e6:e7:c5:08:d4:dd:b1:56:54:7e:5c:a8:7a:40:08:
3f:9a:c0:8e:b2:0b:0e:3a:f6:2a:f0:11:aa:0b:38:
1f:ea:c1:a5:e8:33:d4:aa:0f:7f:1e:99:9f:e6:56:
4b:c2:d3:18:d8:18:9f:cb:29:5a:31:e1:3f:ea:06:
0a:94:bc:d6:36:a6:f7:60:86:f7:14:48:1e:ae:7f:
5b:da:7e:ef:2f:63:96:86:cb:fd:de:e7:ed:42:a7:
85:d0:f0:87:bb:d5:95:74:87:14:8c:fe:05:fd:ce:
9a:82:12:a6:66:62:e4:53:e7:d1:cc:82:89:1f:0f:
5e:02:3e:d6:78:af:95:d9:f2:ec:b5:f7:00:70:18:
a7:16:0a:37:54:9e:4e:dd:d1:92:42:2a:a0:1e:7d:
8b:05:64:5b:05:f4:4a:6f:df:bf:f5:53:16:e6:bd:
1e:ed:fa:63:01:9d:13:bf:49:93:56:9b:e6:5c:cf:
3d:58:56:81:03:af:0a:ca:0c:87:c9:8a:dc:d3:e8:
23:2d:77:eb:cd:c4:35:ca:12:aa:6f:a7:0b:87:f1:
dd:ad:e2:09:bf:57:7f:73:d0:1b:e9:19:a6:d2:39:
cd:9e:23:f0:1a:71:21:c3:41:0e:e4:5d:48:a9:96:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:86:25:03:34:0F:C4:24:CA:57:E3:F9:4A:31:60:53:D4:C2:F4:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c5e6316f-2044-32e4-9a53-ea030154d002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.190.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:77:39:7f:3c:fe:bd:b6:00:c0:3d:ee:dc:ff:fd:68:47:52:
0b:5c:fc:10:43:5c:5d:e7:ac:dd:f0:30:97:c2:68:e0:7a:6d:
a0:4b:5e:a9:84:ae:4e:fb:06:0d:05:ce:a9:dd:32:98:61:06:
b9:97:97:8a:71:db:2e:19:20:0c:b5:df:3a:4e:f1:2c:be:d5:
99:bc:cd:10:a0:7e:b9:57:b8:b7:3d:85:2b:50:45:12:d7:d9:
54:07:45:a1:b9:45:43:e0:82:a6:01:e0:0d:56:d3:c1:a3:09:
3e:20:e3:02:f2:33:ae:8e:ef:51:16:ce:d3:f3:53:52:4b:df:
e1:43:cd:07:b4:07:f8:fa:f8:7a:62:b1:2e:75:bd:e4:8f:76:
f3:d7:a5:72:b8:d8:86:0f:98:61:f1:1a:97:34:e7:34:e7:20:
97:9c:b9:0a:9b:ba:5a:98:c7:7e:91:54:43:d3:62:81:1a:3b:
af:e4:9a:8a:89:64:17:ca:f7:9f:7b:22:8c:05:cb:72:f0:58:
85:74:e8:ce:82:d4:76:b8:9e:b6:7e:60:33:b9:5c:8f:9f:c2:
9f:14:f1:ba:82:60:b5:6a:1e:09:b6:9f:bd:a3:d9:00:db:40:
14:ed:da:de:ed:1e:7d:2e:99:0a:e5:9a:c1:25:8b:e5:38:0b:
9b:24:bf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:56:27 2025 by rpki-client