Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cefe6d77-5e6c-3238-9b11-962a0673c8d1.roa
File: cefe6d77-5e6c-3238-9b11-962a0673c8d1.roa (raw, json)
Hash identifier: nNyh4Ph3I1eIia42sueYfTin9bsAigF8jsUOh3l48BI=
Subject key identifier: 0E:52:7F:05:0F:E9:25:54:A5:EB:C6:92:8B:D8:01:4C:9E:28:22:E4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F53561B582D92AD9272753000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cefe6d77-5e6c-3238-9b11-962a0673c8d1.roa
Signing time: Wed 21 Sep 2022 12:00:00 +0000
ROA not before: Wed 21 Sep 2022 12:00:00 +0000
ROA not after: Thu 27 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.253.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:53:56:1b:58:2d:92:ad:92:72:75:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 21 12:00:00 2022 GMT
Not After : Oct 27 04:00:00 2022 GMT
Subject: CN=51ef01be-ec35-42ad-8ff1-d480c765f264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:1b:cd:e0:d2:a4:cf:32:ca:17:00:1f:e1:
73:11:4d:c7:6d:97:77:b3:24:9c:f1:db:0b:9d:74:
72:92:1a:e1:83:fb:59:19:3a:c8:7b:67:00:91:bf:
f9:8d:9e:63:ec:f7:a1:ff:00:22:d6:41:97:a8:5a:
fc:14:94:5f:a8:89:25:10:75:22:e3:14:ab:85:5f:
37:cd:0b:d5:13:10:0b:6c:c1:8f:0e:21:56:0f:d3:
b1:cb:5e:44:18:c9:15:d5:21:f5:c6:2a:42:13:b6:
2c:f2:d8:28:cc:25:3d:c7:e9:82:33:3d:d5:4b:2c:
43:6d:62:93:dc:ab:06:16:3a:29:b7:52:3b:da:66:
42:fa:25:b9:b7:ff:29:54:1a:2f:cf:aa:7a:ad:62:
e2:94:9f:2f:cd:58:c4:08:b0:35:75:7a:74:0b:6c:
cb:2e:ef:db:cf:00:0a:36:16:ae:24:62:0b:18:db:
be:15:59:c6:89:ef:ee:ae:d8:9b:34:5d:b6:01:81:
e8:c8:02:b0:1f:3f:bc:59:13:e9:37:e4:8a:15:b2:
9a:5e:f0:9a:a7:fc:62:01:f7:15:8b:9c:41:5f:9a:
b2:e4:d6:b5:d8:b8:9e:25:6a:67:19:54:69:4d:22:
77:43:30:d0:40:e7:a5:a8:f7:de:62:a5:a6:ce:76:
72:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:52:7F:05:0F:E9:25:54:A5:EB:C6:92:8B:D8:01:4C:9E:28:22:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cefe6d77-5e6c-3238-9b11-962a0673c8d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:e0:71:b8:b1:55:1a:2f:c5:c3:93:10:7d:d3:4b:c2:82:d0:
37:90:35:32:7f:b5:92:02:05:e0:3c:5e:8d:6a:be:8b:00:5e:
08:d1:aa:77:9d:e3:80:3b:ae:e3:0c:43:df:a9:d8:82:89:89:
fa:08:25:92:02:a4:89:91:3f:ac:04:2b:0c:15:24:88:6d:e3:
87:22:88:57:aa:a3:90:8c:25:64:fe:e3:f2:69:04:8e:80:88:
f6:cb:57:63:d4:7f:b9:cb:4b:59:b4:4c:a6:b9:ba:4d:96:ee:
c1:96:72:3d:07:73:93:32:48:ad:17:b1:0b:68:88:2a:88:80:
d1:6c:5a:04:c1:e4:46:20:76:6d:c9:92:26:35:6d:30:31:cc:
51:5f:fd:92:75:9d:b4:2a:1f:fe:b6:c5:bc:11:28:53:62:54:
db:bf:75:4b:03:c6:32:9a:ff:bd:3d:e8:e1:94:87:9a:8a:b5:
09:9a:73:ce:49:aa:e6:af:98:2b:ac:1b:ac:7f:c9:10:40:b2:
c9:e2:26:8a:92:aa:ed:84:3b:2c:c3:3a:b2:08:0f:55:48:3a:
8d:9c:c8:f6:1b:d3:2c:64:20:b3:46:56:29:05:53:57:58:bf:
85:5f:c0:9e:25:ca:1a:0d:fe:cb:d8:70:00:27:23:a0:ad:7b:
1f:12:f1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:45 2025 by rpki-client