Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/de64d9ea-b44d-302b-aaed-750b99a01852.roa
File: de64d9ea-b44d-302b-aaed-750b99a01852.roa (raw, json)
Hash identifier: fm89ItxUxjwm7PoLazhCz2k/7OosNz3LEylUpdD0ZoQ=
Subject key identifier: 28:B6:96:DF:E0:9E:6D:65:DF:FA:06:C5:ED:9D:A1:53:27:BD:B6:26
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6D946C9E5EE4D3B6BBD4ECB0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/de64d9ea-b44d-302b-aaed-750b99a01852.roa
Signing time: Thu 30 Dec 2021 05:00:00 +0000
ROA not before: Thu 30 Dec 2021 05:00:00 +0000
ROA not after: Thu 03 Feb 2022 05:00:00 +0000
asID: 3209
IP address blocks: 15.145.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6d:94:6c:9e:5e:e4:d3:b6:bb:d4:ec:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 05:00:00 2021 GMT
Not After : Feb 3 05:00:00 2022 GMT
Subject: CN=ce119b23-bac7-41dc-a4b9-50da4bdb936b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:a7:74:49:5a:ce:f4:4c:94:cb:89:95:7a:
1d:c7:fd:2f:bd:ae:8d:3c:7a:89:34:5e:a0:5c:1e:
1d:7a:57:bc:ff:1c:f4:9e:cc:7e:37:d3:be:00:27:
9f:33:d7:86:13:27:17:a7:5f:27:9c:c5:da:01:28:
07:13:4c:f8:a2:af:5f:9e:f5:4d:3f:c0:ae:8c:e2:
d8:06:37:79:6e:9d:21:c6:f2:f8:61:3c:da:a8:18:
8f:85:be:52:f2:c7:c9:60:f2:25:52:4a:42:df:6c:
96:7c:5f:c5:d8:73:1a:53:84:d6:e5:0d:be:c4:df:
57:b7:dc:30:a8:da:b4:8a:75:bd:30:17:b2:7d:43:
34:25:8c:9d:b4:56:b4:c4:6e:3a:ad:d1:2e:7a:9f:
0c:20:3f:cf:5f:14:93:68:41:fd:80:16:11:c1:81:
01:7d:f3:ae:43:34:d9:99:20:72:fc:0b:5b:15:b6:
0c:87:0c:ac:bf:ec:d7:a3:d3:95:d2:3f:57:ab:49:
35:42:9f:71:66:d8:ad:cf:4e:3e:db:45:83:4a:96:
a2:db:e6:73:9e:a5:ed:d1:50:7c:8d:2b:62:71:8e:
d7:4b:89:0c:d7:58:43:65:2f:7f:38:ab:40:dc:47:
d7:8e:bc:4c:89:d6:76:40:a9:a6:f6:72:18:d7:7b:
96:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B6:96:DF:E0:9E:6D:65:DF:FA:06:C5:ED:9D:A1:53:27:BD:B6:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/de64d9ea-b44d-302b-aaed-750b99a01852.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.145.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:0e:fa:81:9e:ce:b8:0b:c9:68:ca:b4:c2:3d:38:8a:4e:ea:
cd:66:05:5a:9b:5e:7b:19:fa:4f:a5:ea:35:48:78:6e:03:54:
1d:23:08:a0:13:66:82:83:31:a5:95:32:bf:24:25:c4:9e:7f:
72:86:98:91:bc:aa:6e:31:76:4e:75:45:67:84:29:7d:a4:2c:
1b:ef:37:fb:3f:60:8f:31:bf:2f:de:4c:8c:39:fe:fc:e9:70:
53:cd:4b:2e:b2:81:0c:ce:3b:f7:55:7f:55:07:b6:67:75:76:
ee:1d:59:29:ec:8b:81:76:4c:f3:5a:e2:f1:04:b7:6a:f1:36:
17:c9:16:a5:c5:ee:26:a9:e7:80:22:53:b9:3f:46:7e:da:2e:
45:4a:4b:cd:6f:51:e9:75:07:37:e2:b9:57:85:5c:6f:fb:f4:
96:48:7f:4c:f9:95:40:bb:ac:d7:7f:7c:75:04:46:f4:ac:d0:
a2:a1:f8:fb:15:9f:9e:3b:5f:1c:93:21:00:c3:b8:23:0b:4f:
63:af:d0:67:6c:92:ca:13:8e:51:ab:8e:10:14:6b:9c:46:de:
ea:a0:f7:9f:0b:e8:41:b0:e0:89:8b:ae:38:32:f5:bd:26:d3:
89:75:d9:3c:9c:46:7a:5d:37:00:a0:08:f0:94:c6:4e:5b:46:
7f:98:98:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:57 2025 by rpki-client