Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2c8124f-99e9-332a-9731-d5e9644d539e.roa
File: d2c8124f-99e9-332a-9731-d5e9644d539e.roa (raw, json)
Hash identifier: gkdZlK/Sw4WoLUKma2RbywVECtP3IsFc5ryTNv3P968=
Subject key identifier: D9:53:4E:D9:04:0B:D1:1E:C0:53:D7:A9:8E:86:B9:98:B2:31:11:41
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7A6BCF40D5952FD52E4C7B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2c8124f-99e9-332a-9731-d5e9644d539e.roa
Signing time: Wed 05 Oct 2022 12:00:00 +0000
ROA not before: Wed 05 Oct 2022 12:00:00 +0000
ROA not after: Thu 10 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.253.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7a:6b:cf:40:d5:95:2f:d5:2e:4c:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 5 12:00:00 2022 GMT
Not After : Nov 10 05:00:00 2022 GMT
Subject: CN=90a8a0fa-62d9-44ee-8a26-694890bdc251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c0:56:64:97:ef:02:f4:50:c7:36:83:ac:9b:
ff:7b:b2:83:d8:33:c3:f6:01:2d:46:48:e4:02:da:
40:ff:08:f7:db:90:0a:09:72:17:88:b2:b4:5f:9d:
da:ed:aa:5b:c9:f6:c9:91:15:0d:8e:dd:b0:1a:55:
e8:84:b4:be:b3:c0:e0:b4:90:03:ea:7a:a2:9d:63:
70:f1:7c:88:9e:74:bf:52:ed:a8:23:36:fb:b4:10:
6c:fa:54:16:aa:5f:b4:1d:69:d1:0d:d4:a1:2d:96:
ae:3c:27:fd:52:e3:74:d2:d2:34:c7:8f:2d:a1:09:
be:9b:be:dc:18:36:e1:41:32:a0:5e:b1:e5:cc:ef:
f8:32:a9:1d:73:36:cd:e9:2a:6d:ba:6f:ac:bc:8a:
56:ea:51:24:6e:d2:41:c0:d2:7e:8b:1c:da:31:0f:
e7:eb:4e:03:be:4c:74:e5:26:1d:56:bb:fe:9c:a9:
06:6c:8c:59:4d:66:55:b9:2a:48:e9:93:58:70:97:
64:73:08:f1:a4:f2:7e:28:a7:16:72:e0:16:3a:28:
3e:49:c8:93:d7:50:14:a4:77:e8:f6:d7:0e:0f:06:
8b:25:f7:28:56:85:79:33:84:d7:21:d1:4d:da:44:
ed:b7:f1:21:51:6a:f3:cf:83:24:bc:eb:6e:0a:0e:
03:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:53:4E:D9:04:0B:D1:1E:C0:53:D7:A9:8E:86:B9:98:B2:31:11:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2c8124f-99e9-332a-9731-d5e9644d539e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:3d:31:e5:18:a4:81:f2:51:bc:d6:12:67:99:88:e8:47:36:
72:73:82:84:30:67:f2:db:ce:bf:84:78:c7:f3:99:62:91:f5:
af:fd:1b:1a:5a:a6:fb:50:dd:5b:9d:ee:97:76:e5:e4:ba:86:
51:1b:a2:e7:07:61:20:f5:33:d4:4b:34:b7:86:8c:6f:df:a1:
f7:d5:ee:27:2b:e2:aa:df:e6:c2:dc:d3:fb:62:77:c5:75:9d:
a2:99:1e:ea:68:9e:7e:c1:56:6f:27:2a:b9:4e:a2:19:02:2b:
d6:f8:e3:4d:ca:9e:b0:05:8c:bc:0d:59:54:03:ae:3d:6c:97:
d2:22:0b:f2:7b:f4:f3:84:af:d1:2d:7c:17:9e:92:a6:3a:e6:
69:b7:c0:a6:b1:c1:1d:9e:c2:77:89:52:f4:d8:b1:59:94:9e:
76:6e:b0:3d:c4:8f:0a:94:e8:36:22:f5:94:87:92:5b:c3:f1:
59:ea:08:a4:62:fe:3b:dd:11:a7:a1:83:39:9d:24:bf:0d:80:
2c:b5:53:d2:80:7a:cd:cc:76:56:7a:7f:08:6f:31:4a:07:fa:
78:87:ee:d8:8d:32:10:73:67:6f:e6:d7:dc:10:fe:64:01:f4:
c2:e4:5a:8c:04:8f:c9:21:ce:c8:bd:f7:4b:e7:0f:6b:10:b9:
ef:ec:fa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:59:42 2025 by rpki-client