Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e43ff6be-d4f2-3f1d-be2e-1a801064383f.roa
File: e43ff6be-d4f2-3f1d-be2e-1a801064383f.roa (raw, json)
Hash identifier: M6lUbmHBxI68KHC7XAneU/aBw8T758pkaMtDn/IxyK0=
Subject key identifier: 95:FC:AA:CE:57:45:F8:2A:D6:B6:D3:1F:5F:5B:D7:67:C4:78:D6:FA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F1819C1F2C97F5F1B18D08600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e43ff6be-d4f2-3f1d-be2e-1a801064383f.roa
Signing time: Wed 31 Aug 2022 12:00:00 +0000
ROA not before: Wed 31 Aug 2022 12:00:00 +0000
ROA not after: Thu 06 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.186.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:18:19:c1:f2:c9:7f:5f:1b:18:d0:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 31 12:00:00 2022 GMT
Not After : Oct 6 04:00:00 2022 GMT
Subject: CN=97fc7240-d5e4-491e-b1ad-c7b1bb4588c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:71:93:50:df:f9:71:06:d2:21:b0:c9:09:57:
a8:c7:e6:f8:0f:47:30:fd:0c:7b:c8:44:1d:db:6e:
2e:70:9d:64:da:ad:bb:3d:03:69:af:08:12:a6:f0:
4a:28:e6:ba:a5:0d:2e:e6:d6:aa:46:ee:d5:80:c6:
72:b0:06:b3:98:bd:10:c2:87:65:06:55:b8:25:dc:
4c:82:88:76:64:69:56:e3:99:a8:bf:97:82:1e:a3:
19:a7:89:00:4d:05:a0:68:45:83:80:e8:9c:ff:65:
f0:cd:df:05:a6:5f:d4:dc:d6:d8:a8:b3:36:67:28:
37:76:09:84:40:2f:e0:90:3a:ed:51:44:1d:3e:73:
7c:5d:b5:bc:20:26:52:19:8c:a6:c3:b0:bd:8e:81:
6c:cb:b3:0c:0f:dd:68:85:91:e9:f5:cf:4a:bb:21:
f6:7f:b8:5c:d4:5b:ea:9f:61:86:67:55:bc:2c:2a:
fd:45:f1:92:6f:c9:5c:8f:b4:22:6b:27:57:98:a3:
55:c5:50:58:ae:2c:ca:9a:4a:20:81:5e:f2:8f:08:
2a:09:9e:4a:35:1c:1c:0a:e9:d0:16:99:e7:1e:db:
e1:ca:79:dc:72:7d:52:e9:de:c5:f4:6a:2a:5b:16:
aa:69:2a:8e:06:06:fd:05:e9:72:5f:9e:b6:62:a5:
83:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FC:AA:CE:57:45:F8:2A:D6:B6:D3:1F:5F:5B:D7:67:C4:78:D6:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e43ff6be-d4f2-3f1d-be2e-1a801064383f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.186.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:a1:dc:91:30:f7:5d:0a:0d:50:90:92:4a:e9:ca:02:89:10:
46:ab:68:ca:5b:f6:f5:06:ab:14:0d:59:61:eb:39:9e:a1:b8:
2b:29:73:6b:38:f1:c3:7e:8e:93:38:dd:6e:d7:a3:a3:ba:f5:
dc:79:a3:fe:b4:7f:ad:2e:b2:9f:14:76:b7:26:eb:37:59:8d:
6c:6b:bb:ae:54:5d:e0:eb:a6:51:dd:4b:bd:ed:0a:c0:01:86:
5a:33:37:a7:7b:5e:0d:0d:0f:7d:4d:a9:97:20:1a:c6:3a:af:
a6:e6:7d:13:6f:b0:ae:13:70:de:e1:37:4b:70:1f:d8:53:79:
01:68:bf:38:9b:1d:f1:3e:d9:88:04:7d:63:72:3a:5f:94:1e:
f7:f4:e6:d6:c9:e4:a8:bf:46:83:9c:5f:85:a5:6a:a2:13:9b:
25:b7:d6:69:f3:bf:57:f3:3f:c7:d6:d5:3a:28:20:35:d5:0e:
f0:49:67:6e:9f:49:df:3b:8d:85:3c:8f:d1:53:d5:66:bc:bf:
e1:70:98:98:6d:22:b3:e7:c3:3d:52:84:f8:ac:45:7c:e8:2d:
ba:76:f8:3b:dd:0f:fc:eb:94:55:64:0b:b4:ab:ce:6d:ed:76:
0a:1e:c3:33:82:37:78:ae:8a:a2:dd:d4:0c:b9:2a:74:6a:9d:
81:c9:b2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:11:08 2025 by rpki-client