Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d3d1e7e5-7818-3dcf-ae57-7fc2bf2fba48.roa
File: d3d1e7e5-7818-3dcf-ae57-7fc2bf2fba48.roa (raw, json)
Hash identifier: yxX22+3IRWgfC3BUXnZXQ4r+32+dTOACmMxv880z6E8=
Subject key identifier: BC:8D:6D:46:56:FA:98:1E:BC:8B:20:07:94:0E:96:69:2E:DB:27:EB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FC8A5A52C82BD70AB09FB7DB0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d3d1e7e5-7818-3dcf-ae57-7fc2bf2fba48.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.190.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c8:a5:a5:2c:82:bd:70:ab:09:fb:7d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=6394cf96-c5e5-4085-a322-aac0fac86963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:e6:1e:c4:14:e6:39:38:89:08:74:f1:c1:
6f:c1:74:06:a1:f2:23:58:14:e5:71:a4:e2:2d:24:
b9:7e:33:58:c0:bf:4a:5d:65:1d:1d:3a:02:a5:f8:
99:d4:48:f5:df:ab:c1:9a:e4:9e:ee:9f:30:b3:9e:
8f:98:b2:11:d6:12:82:6e:db:cc:36:e4:d0:32:46:
82:7d:ab:c8:59:4c:30:b5:67:26:49:0c:3c:03:e3:
03:07:85:ce:f3:59:89:a8:4d:3f:95:a3:9a:1b:f1:
78:4d:b7:bc:0f:c5:fa:5b:f3:92:ed:fc:bc:71:57:
9f:0d:32:0c:b0:4d:03:07:6b:a6:20:0f:ef:51:5b:
4c:5e:3b:ab:65:78:74:fa:38:e2:d5:40:0b:05:70:
02:54:f0:e3:51:6d:4c:47:47:f5:75:63:49:01:08:
fa:54:53:41:2d:38:93:8c:a9:13:13:10:5b:45:52:
57:e9:7a:7f:06:a2:72:1b:49:58:f4:d5:63:8f:f9:
fe:5d:1a:69:24:5c:32:d2:99:30:11:5f:ef:77:54:
94:23:02:b2:e0:92:d6:b8:bb:7e:eb:72:a9:c9:1c:
f5:99:43:55:81:74:f3:39:94:db:e6:8b:b8:e1:b0:
fe:84:61:81:5f:4e:6f:a6:41:b8:51:2a:dd:f4:b3:
52:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8D:6D:46:56:FA:98:1E:BC:8B:20:07:94:0E:96:69:2E:DB:27:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d3d1e7e5-7818-3dcf-ae57-7fc2bf2fba48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.190.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:f0:3c:8c:8e:48:fb:1a:41:e7:a8:54:b0:48:a4:13:cc:f4:
84:ed:44:41:f8:5c:ba:d6:5a:ec:d5:9e:0c:a7:c3:50:3b:54:
24:03:69:cd:e1:60:10:e7:d3:8e:2b:67:96:6b:99:0d:27:46:
9f:8e:43:e3:1d:0c:4a:3f:a6:63:8a:b3:8d:13:ee:0e:f5:6c:
3c:3b:d2:9f:d8:e9:e6:1e:d2:de:6f:dc:26:15:cd:49:4a:c9:
58:fe:0f:b3:43:51:5a:56:92:0c:4a:7d:9f:5b:74:70:37:ea:
19:52:8c:25:c4:c1:32:fc:8a:0d:fa:af:c1:47:47:7a:b7:ee:
e6:4d:33:0e:0d:39:fc:62:7c:c3:98:55:13:7e:23:52:18:ca:
6b:77:cd:60:6a:a3:fb:05:8d:59:bc:8a:f5:52:71:15:42:91:
b0:a8:e8:5e:dd:dd:f3:73:e9:4c:1e:ad:f5:7a:4d:40:e8:e1:
43:6a:9e:69:5f:70:9c:bc:69:d8:6e:64:d6:39:84:21:e3:c5:
b6:4b:5b:47:3e:43:4c:cc:da:56:d1:74:bd:6c:9a:0a:34:ca:
ef:ba:5c:d6:d0:fd:30:2e:8c:ac:cf:de:58:b3:95:ea:21:8b:
4e:92:d3:82:86:19:84:50:30:9c:d8:9b:e3:d5:be:94:c9:6a:
e8:28:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:52 2025 by rpki-client