Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ecfd7dc9-e5d3-3bce-abe7-7d5f9ebea135.roa
File: ecfd7dc9-e5d3-3bce-abe7-7d5f9ebea135.roa (raw, json)
Hash identifier: Qf5iTJOGs5kY0EaDkCkjRJKYOtx8q6gX8GcoTX5NhYk=
Subject key identifier: 7C:C9:A1:6C:ED:EA:E3:69:FB:B8:CE:E0:82:A1:60:CC:1B:2E:3F:DD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D33CAA2FDFE03EC588C938D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ecfd7dc9-e5d3-3bce-abe7-7d5f9ebea135.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 3209
IP address blocks: 15.145.0.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:ca:a2:fd:fe:03:ec:58:8c:93:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=ac7dc021-4c26-48a4-aaaa-36e5b4e8b6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:06:03:81:55:ba:3f:37:39:b5:00:aa:ef:92:
92:93:64:f5:43:13:1b:e7:c3:c4:0f:8b:39:52:21:
4c:7c:6a:39:dc:b4:a8:8e:00:f5:45:e6:33:a2:6a:
e5:cb:a3:5b:27:d4:6d:d8:39:7c:c8:78:2c:c9:af:
eb:1c:e7:cf:52:25:ee:1a:8c:db:5a:28:aa:18:4e:
fc:0c:8b:68:a1:65:44:e3:5c:e3:15:27:3c:b3:fe:
df:7b:f8:48:3b:58:8d:f6:b1:7f:3f:d1:51:5b:f9:
6b:f7:ba:f0:63:1a:25:19:31:52:d0:09:90:5a:78:
28:c5:c5:59:5b:c9:5c:c2:1e:ae:01:86:95:6e:3d:
66:e1:72:10:09:34:3e:1b:ab:fd:72:6d:44:56:25:
b0:64:15:a5:64:66:9d:31:36:7e:f5:b7:33:5a:9e:
23:fb:65:aa:70:16:f8:51:66:7e:21:fe:ab:4f:fe:
c6:9e:95:05:44:6c:d5:d8:cb:d7:d6:7a:b7:5d:e3:
3a:c8:58:3a:9b:27:fb:d2:4d:3c:50:60:1f:b2:8a:
50:90:26:e4:c5:ff:99:67:ec:ec:a9:14:88:be:13:
fa:d2:e3:ac:d8:9b:c1:b7:7b:8a:ab:07:e7:25:6e:
af:b3:de:82:9a:c2:b7:af:d4:72:4c:d4:44:f0:47:
03:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C9:A1:6C:ED:EA:E3:69:FB:B8:CE:E0:82:A1:60:CC:1B:2E:3F:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ecfd7dc9-e5d3-3bce-abe7-7d5f9ebea135.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.145.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:2b:79:6f:49:ec:d7:d9:11:8c:ce:74:aa:68:47:4f:b8:16:
90:8d:d7:1c:98:b2:33:a2:99:86:0c:9a:53:5c:b3:30:1c:de:
40:64:42:f3:72:72:7f:f5:e0:7b:ff:6d:b0:c4:d8:e5:92:1f:
75:08:2c:45:fa:31:c2:4f:94:fe:1e:13:54:b3:a3:27:86:8b:
07:31:dd:f7:ae:44:c8:70:f0:e0:98:f9:41:ee:a1:e3:a9:08:
e0:3e:89:ea:66:ef:3a:9f:a6:3e:9c:e6:23:99:bc:39:5e:4a:
c0:1b:9d:cb:db:fc:dd:c9:c3:c8:a5:d0:19:ec:14:e8:c9:13:
f2:85:1c:bb:cb:06:6c:de:06:8e:89:5d:b2:57:d4:cc:70:33:
c3:f2:29:02:b1:95:a1:24:48:03:05:a3:55:e4:6c:77:6e:2b:
10:3c:7f:a1:71:55:fe:fc:46:3c:d3:55:76:38:d9:4f:19:02:
8d:1f:85:e3:c6:35:82:2d:8f:63:20:eb:d1:55:da:2f:f7:48:
f2:06:07:9f:89:d9:58:40:fd:1b:97:74:13:ad:60:9d:d9:bc:
14:4a:ae:f3:90:1b:a2:1c:a7:fc:cb:bb:f5:d1:fd:29:d6:a8:
f7:9f:c6:1b:26:37:76:e2:1d:21:d8:b9:44:95:cf:1f:bf:36:
fa:85:3a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:27:05 2025 by rpki-client