Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d37fbb27-d716-3ed7-8a2b-c2491b5f253b.roa
File: d37fbb27-d716-3ed7-8a2b-c2491b5f253b.roa (raw, json)
Hash identifier: oIpj//VRX1H1TRSVONAVJiXJBJYS754yk7K+XbMy8/U=
Subject key identifier: 7E:8E:28:1D:21:47:B0:1C:04:F4:69:2D:DB:23:B3:E9:64:93:9F:EA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E2CC01E0BF6E3080E03027F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d37fbb27-d716-3ed7-8a2b-c2491b5f253b.roa
Signing time: Tue 07 Jun 2022 12:00:00 +0000
ROA not before: Tue 07 Jun 2022 12:00:00 +0000
ROA not after: Wed 13 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.199.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:2c:c0:1e:0b:f6:e3:08:0e:03:02:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 7 12:00:00 2022 GMT
Not After : Jul 13 04:00:00 2022 GMT
Subject: CN=308b37bd-a405-4651-a2a5-5a3371ab1c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:2c:95:d6:f0:60:81:f7:cd:ef:39:f1:3f:
38:72:2c:6d:53:5a:25:30:2b:ca:ff:68:6d:84:44:
da:f1:6d:46:ca:50:a1:03:56:1b:f7:57:a1:71:af:
a7:b8:8c:00:b2:c8:d9:af:04:31:c4:40:3c:ed:43:
6d:d3:97:a6:8f:5d:9f:d4:6b:03:30:44:c9:13:80:
d9:2c:ca:a2:6e:bf:00:1d:30:a9:f3:40:ac:9a:59:
c4:1d:08:21:a1:31:a6:b7:23:11:bf:b6:ff:8e:5c:
d4:6a:65:ff:ed:d9:54:68:92:63:da:d2:06:0f:7b:
13:89:e9:82:f3:d5:82:5b:dd:88:9a:36:29:d6:b1:
dd:97:e8:e0:be:5b:19:ed:1b:2d:9c:38:9e:ef:3a:
7c:9c:c6:b5:44:a4:02:4b:0f:fa:ff:a8:bb:35:b2:
fd:27:cd:2b:df:d9:df:fe:2a:37:19:d9:5c:61:b1:
ef:18:b5:72:1e:1b:94:04:dc:02:59:33:f2:c5:fd:
88:06:55:64:10:89:62:94:a8:4a:61:db:5a:d3:a3:
01:e1:5c:4e:31:68:97:b0:92:77:c5:1c:0c:7c:d3:
c3:9e:05:2d:24:a5:b6:db:0e:e1:92:f4:9b:2e:21:
4f:85:c8:05:fb:77:b1:d8:b9:5e:6e:51:25:e2:13:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8E:28:1D:21:47:B0:1C:04:F4:69:2D:DB:23:B3:E9:64:93:9F:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d37fbb27-d716-3ed7-8a2b-c2491b5f253b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.199.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:44:e9:bd:ff:b8:60:f0:98:f7:d3:43:b4:d3:4b:4c:12:fe:
7c:47:2c:79:5b:25:a9:6a:06:46:59:58:6d:cf:d8:df:43:f9:
83:9e:09:f3:98:64:77:64:b5:e9:3f:c6:90:26:3e:cb:f9:cb:
47:fd:a0:75:99:bb:5d:26:79:c6:e3:06:a1:4e:c4:f8:d8:ef:
d6:0c:39:6f:a1:06:bd:eb:10:50:75:35:10:24:69:e4:b6:1c:
7f:ce:ff:61:75:5b:5f:53:31:7c:54:67:79:55:cd:51:83:95:
28:4d:dc:0e:7f:3d:8c:2e:d3:4e:b2:65:41:8b:36:19:e6:03:
67:f6:a4:33:40:d0:4d:4a:dd:3a:56:7a:c9:0c:1d:c0:f3:12:
e1:b1:ab:42:ef:a2:b1:97:ec:7f:73:c8:3e:36:f5:00:c8:dc:
6f:d0:47:dc:f8:1e:da:ed:27:d3:c4:7f:2d:68:c6:04:d9:9c:
7f:97:53:15:d4:f5:52:42:aa:2b:82:00:7d:56:7c:4b:8d:e5:
08:bb:7d:42:53:4d:0f:3f:c2:98:99:08:e3:ae:47:41:49:84:
e8:a4:6c:29:d4:01:ee:64:39:70:01:ed:fa:5f:07:c7:5d:70:
a5:a4:c6:e9:59:76:de:f1:a1:f6:0c:a4:0a:6b:be:1d:c2:62:
b5:c8:07:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:33:17 2025 by rpki-client