Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca87ba2a-b65b-3e7b-ad5f-a1ad6bbc1efa.roa
File: ca87ba2a-b65b-3e7b-ad5f-a1ad6bbc1efa.roa (raw, json)
Hash identifier: pOUz15/4xXPeewhsVLiGPvVjl5mZ3adxteIwqSO3eK0=
Subject key identifier: 11:1E:B8:C2:E5:59:5D:0B:67:36:3B:1D:C4:27:44:5E:03:A6:CA:92
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1A57B02F4AD106A74F2AEF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca87ba2a-b65b-3e7b-ad5f-a1ad6bbc1efa.roa
Signing time: Wed 01 Jun 2022 12:00:00 +0000
ROA not before: Wed 01 Jun 2022 12:00:00 +0000
ROA not after: Thu 07 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.254.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1a:57:b0:2f:4a:d1:06:a7:4f:2a:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 1 12:00:00 2022 GMT
Not After : Jul 7 04:00:00 2022 GMT
Subject: CN=00d4c3e2-1061-4750-8243-e69e49c34681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:38:14:44:13:a7:d1:0a:3a:9a:34:39:7c:91:
ec:b2:de:16:15:4f:0e:ae:4f:e0:8b:ea:bb:49:0b:
02:1c:45:0a:51:78:a6:b9:57:b2:21:bc:b9:48:08:
57:59:ee:52:2a:7c:60:5a:ea:e9:a3:a4:b8:df:a1:
20:ef:f6:bf:42:ff:2d:64:51:69:3f:7e:ad:f4:82:
83:bc:8b:2b:cd:85:5d:28:c2:0e:9d:24:36:f7:bb:
d4:8a:a7:68:2b:d7:69:69:87:02:ca:51:67:93:63:
94:c1:97:6e:1b:94:03:38:25:b4:59:3a:c5:38:e6:
87:96:97:e9:bd:dd:d1:7d:40:81:83:84:4e:b1:fb:
48:c6:ad:61:d1:74:61:88:8e:cf:6a:e7:76:7c:f2:
bd:64:72:bd:15:e9:81:7a:40:f8:f3:21:23:59:2a:
6d:2c:9c:d0:19:f8:76:77:b3:34:a9:63:ce:3c:22:
e9:4e:18:d1:9e:ea:3e:32:16:ff:32:d4:1c:32:8d:
61:3f:58:23:42:fc:10:1c:53:a6:c4:65:97:84:fc:
42:db:f6:41:9c:f9:8c:6c:f6:66:af:b1:67:e9:73:
fb:47:d4:06:b8:16:4e:8e:fd:e8:d5:a3:8e:8a:2f:
86:4f:83:b7:31:a0:81:07:bc:5b:82:c6:57:ff:93:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1E:B8:C2:E5:59:5D:0B:67:36:3B:1D:C4:27:44:5E:03:A6:CA:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca87ba2a-b65b-3e7b-ad5f-a1ad6bbc1efa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.254.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:f8:c3:73:43:ce:22:d4:43:7e:73:6f:c7:a1:91:99:5e:1b:
72:08:cf:5d:a3:aa:9f:51:dd:e4:65:13:ac:42:ed:32:cf:44:
8c:25:d0:89:76:d2:f7:7e:f0:2a:f7:c2:3b:fc:ca:d2:60:82:
a3:a9:08:8e:0a:9f:36:8e:13:92:6b:5f:14:d2:5a:1f:e5:32:
07:71:6c:74:01:00:c0:48:0f:3c:ad:35:e4:95:4f:14:b4:46:
59:4f:ac:5c:4f:de:da:68:72:2c:8f:16:bc:8d:cc:69:6b:d4:
dd:d9:2c:8d:90:70:b4:60:ad:6d:e3:b5:df:dc:25:89:9e:c9:
a8:58:a6:d7:f1:02:d1:58:dd:ca:e7:9e:f8:87:34:b4:68:5a:
33:0a:77:56:13:ab:8f:b9:93:2f:09:5c:b4:b2:e7:4c:da:6f:
f9:e4:2f:80:64:aa:71:ad:d8:ed:75:27:e2:4d:6c:65:79:d0:
47:aa:d0:20:34:82:7d:e6:09:c9:64:de:9e:bb:b8:13:29:60:
79:5b:c6:85:dc:c4:ff:5d:5b:18:65:67:f5:3e:6b:bc:9c:b6:
97:0b:05:a6:81:3e:cd:79:43:55:0c:c9:e6:e4:50:cf:70:6f:
fa:ee:7a:76:20:31:3d:7e:0c:cd:74:3e:48:3a:de:e9:6d:62:
4a:3d:d9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:23:27 2025 by rpki-client