Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8a5992a-10ee-3f2a-9789-d7ddc5edff9a.roa
File: c8a5992a-10ee-3f2a-9789-d7ddc5edff9a.roa (raw, json)
Hash identifier: IrEyd5poTklBeQOV4NQgoTQzz7WWOqKfM66qrPHcu7c=
Subject key identifier: E3:21:2B:B8:D3:66:7B:89:6D:D2:96:7D:E7:B9:9A:22:61:96:9A:9A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858402A452070E1DBD214692702C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8a5992a-10ee-3f2a-9789-d7ddc5edff9a.roa
Signing time: Wed 07 Dec 2022 12:00:00 +0000
ROA not before: Wed 07 Dec 2022 12:00:00 +0000
ROA not after: Thu 12 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.242.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2a:45:20:70:e1:db:d2:14:69:27:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 7 12:00:00 2022 GMT
Not After : Jan 12 05:00:00 2023 GMT
Subject: CN=f32c9634-4b11-4566-aa5e-550e2f4c6877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9c:02:c6:4e:6c:2c:ea:ce:35:4a:78:b8:f4:
17:cd:c2:88:79:89:d3:ce:f1:90:63:7e:21:fa:1f:
3b:0e:bb:29:7f:56:90:8f:1b:6a:dd:a9:5a:7b:e6:
5f:78:96:0b:75:80:3c:62:67:96:c3:2e:8b:9f:9f:
fc:54:14:7b:76:b0:cc:76:a0:a2:94:f3:e6:51:e8:
8d:ed:9c:ed:76:6c:0e:b4:4f:40:ab:81:dc:6a:3e:
d1:6f:03:0d:5b:01:14:f2:5c:05:e0:fb:a8:87:25:
98:3e:00:4f:e1:bc:69:7d:64:4c:9c:9c:2f:9f:f8:
35:85:66:ae:db:f0:d6:f9:a0:4c:e0:7d:1f:0f:cb:
5f:e2:87:3a:71:60:ad:1e:30:65:39:27:4f:48:d3:
9b:c6:df:13:3b:22:62:ae:7d:1c:ca:e3:c6:38:d8:
cf:cc:c1:32:3f:f6:d0:8f:c9:bd:12:57:56:f7:34:
89:17:38:3d:f3:c2:e9:71:b7:46:20:cb:13:1e:e1:
ac:ab:a3:b4:e1:9f:11:3e:5d:aa:fd:00:c1:93:4a:
5b:25:1b:e0:70:f2:b0:77:6c:f8:13:22:be:b0:2c:
5d:04:31:d9:a5:6d:2f:4e:f3:ca:8e:f1:35:60:32:
fe:5c:b7:6d:82:c4:c8:74:5e:4d:cb:ec:ba:29:da:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:21:2B:B8:D3:66:7B:89:6D:D2:96:7D:E7:B9:9A:22:61:96:9A:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8a5992a-10ee-3f2a-9789-d7ddc5edff9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.242.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:48:b4:ab:0f:6a:b4:cf:07:8d:b5:4d:ff:b1:21:48:7b:10:
a1:f9:fb:a0:0c:f1:13:4d:78:12:cc:08:80:12:59:b2:19:1b:
89:64:9e:fe:d1:44:27:63:ad:08:9d:d6:df:af:b9:d4:1c:bc:
19:bb:9e:95:54:3e:36:77:1c:3a:76:75:74:1a:ba:a8:51:c5:
3b:e7:17:a8:d3:03:66:46:29:a8:cb:72:f7:84:f6:28:39:26:
29:61:94:6d:1c:89:a8:43:51:69:30:d0:ee:87:e5:15:0f:73:
59:c7:b9:29:bb:06:bd:1d:50:e0:67:06:e1:fa:ba:2e:0e:36:
f4:1c:4c:c5:3b:e7:1c:9b:6b:c8:8b:d1:41:d3:8f:80:5e:5a:
e5:32:87:c3:ad:cc:a8:3a:e4:c4:8f:f1:ab:2a:40:f6:7f:29:
8f:96:72:f6:da:2e:cf:85:39:43:75:c1:6d:c2:a8:01:62:b2:
46:b0:b9:e7:90:f4:a5:ed:04:b2:a0:a2:38:3a:07:8e:85:75:
9b:1e:10:96:08:92:51:fe:64:01:c1:ec:42:6f:88:51:ba:06:
f6:1c:49:22:ea:67:d5:c2:76:83:1d:6e:b2:ff:0e:98:80:87:
5b:56:03:e7:31:64:31:66:08:de:a1:ca:4f:45:3c:9a:96:15:
37:de:7a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:15:14 2025 by rpki-client