Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e40a5286-bdec-3a0e-90bb-e469030b449f.roa
File: e40a5286-bdec-3a0e-90bb-e469030b449f.roa (raw, json)
Hash identifier: 8KanLPHOrCn/NObufbBRX0hi629BKBjWgCLJAKC4GD4=
Subject key identifier: 1C:4F:75:10:EC:E1:CE:A4:CA:46:6C:21:AC:1A:A0:B8:A3:4B:D5:96
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE10EA8AAC68AA901EF1EDFC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e40a5286-bdec-3a0e-90bb-e469030b449f.roa
Signing time: Thu 10 Feb 2022 05:00:00 +0000
ROA not before: Thu 10 Feb 2022 05:00:00 +0000
ROA not after: Thu 17 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.228.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e1:0e:a8:aa:c6:8a:a9:01:ef:1e:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 10 05:00:00 2022 GMT
Not After : Mar 17 04:00:00 2022 GMT
Subject: CN=e17a4580-14c6-46de-b5e6-5bfa8bc0bc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8d:70:6c:4c:d2:ac:2c:e2:b0:55:6e:62:75:
3e:45:13:5e:87:b3:d7:c9:f1:3b:85:0f:ad:3f:11:
5f:6b:ed:53:78:44:b3:2d:06:70:79:46:a0:32:88:
ef:e0:52:50:7f:ee:2f:cc:ea:01:0b:55:47:c3:18:
9c:a0:bf:64:0e:3c:d6:e4:ee:1e:95:ec:86:b3:5c:
ca:a3:ff:81:dd:37:27:ba:b6:41:6e:8d:30:bf:ba:
a0:fa:41:44:4b:e5:9b:09:75:bc:f9:e4:95:bf:ee:
e5:ca:e6:fa:70:3b:a6:b4:1a:f9:cf:df:21:ac:ad:
7b:78:18:6d:82:08:95:35:9b:1b:ed:13:4e:96:47:
26:07:13:e9:29:db:75:9c:27:a4:f9:57:22:51:fc:
b7:40:cc:f6:bf:eb:d4:e5:33:ad:0d:fb:5a:34:12:
e9:d9:5d:1e:d9:73:f9:87:8f:fd:5d:b3:a4:74:3b:
09:74:02:d2:b5:bd:0e:7d:d4:f0:75:16:8a:8e:97:
57:4f:8f:1d:4c:ca:19:0e:80:41:07:22:be:7a:a7:
59:e4:63:fd:58:ff:08:f5:6d:03:fb:66:35:2f:d3:
a2:5f:eb:cc:1e:e5:ed:01:f8:2b:b3:ce:b5:10:64:
99:07:78:d5:c5:d5:aa:54:b0:47:ec:6c:f5:34:47:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4F:75:10:EC:E1:CE:A4:CA:46:6C:21:AC:1A:A0:B8:A3:4B:D5:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e40a5286-bdec-3a0e-90bb-e469030b449f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.228.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:e1:4e:b3:50:8f:79:21:8d:bf:9a:37:b5:ad:f5:26:80:16:
83:10:e8:2b:ae:4f:07:7f:37:56:e7:f4:eb:25:21:f7:98:48:
57:63:71:9a:bf:d7:f4:8b:42:54:67:0d:9f:d2:c2:e6:28:21:
21:6b:7f:5e:dd:69:22:52:64:f0:d6:86:01:ad:1c:14:1c:ca:
97:ac:39:14:e4:20:7a:3a:de:69:28:c7:09:a6:7a:c5:b9:b9:
66:f3:b4:97:e8:7b:fb:18:4a:2e:f2:97:3f:f9:20:bf:fb:71:
8d:0f:c2:de:5b:6c:1d:9e:b0:43:37:43:78:e2:23:be:23:df:
b2:4f:67:ef:92:46:66:34:2a:e3:c4:ad:2c:b8:3a:6e:97:b1:
2e:4c:3e:1e:9f:fc:0f:c5:bc:fe:33:fa:91:8e:88:84:7b:e4:
6d:46:a1:8d:41:87:1f:35:42:a2:b3:cf:95:5c:b9:b0:fc:7e:
79:41:39:6f:b6:db:6c:9b:95:ff:c2:ad:a9:10:c5:51:15:4b:
85:6b:5d:58:89:4f:51:df:5f:75:d6:28:f3:cf:b9:70:6c:19:
e5:4e:ff:3c:95:06:22:ec:ec:b2:12:de:a1:f9:5e:af:54:4e:
87:15:f8:78:7c:f3:1c:90:78:ba:3d:ee:4b:7e:44:08:cc:06:
8d:50:23:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:15:57 2025 by rpki-client