Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f267952c-df06-3fca-bb19-e59de494757d.roa
File: f267952c-df06-3fca-bb19-e59de494757d.roa (raw, json)
Hash identifier: MihCn1wtGX4rkGqk+K/mRuu+HGD+pYGJdRiHwT6X2Tg=
Subject key identifier: D8:89:DD:E1:DD:50:CF:D9:86:0D:CE:AE:14:67:63:E4:F9:2A:C7:C9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E68297516F34F32C775CD9250
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f267952c-df06-3fca-bb19-e59de494757d.roa
Signing time: Wed 29 Jun 2022 12:00:00 +0000
ROA not before: Wed 29 Jun 2022 12:00:00 +0000
ROA not after: Thu 04 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.192.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:68:29:75:16:f3:4f:32:c7:75:cd:92:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 29 12:00:00 2022 GMT
Not After : Aug 4 04:00:00 2022 GMT
Subject: CN=445676c8-acd4-40ce-a622-261816aacd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b1:09:18:6b:6d:19:09:b4:5f:32:03:2b:c0:
0f:a5:0e:ac:1c:5c:18:7b:ae:6c:07:3e:0b:93:70:
2a:1d:66:2c:32:72:3f:f3:4a:78:5a:51:1d:f3:10:
2c:0e:36:c7:9e:bd:d9:46:77:25:6c:0d:9a:49:10:
b3:cf:76:34:e3:ba:28:21:ff:06:c1:5d:e2:00:c3:
c4:b7:1c:43:60:ee:5e:5f:c8:c9:68:c7:bf:36:76:
43:94:e1:e5:28:95:5b:3c:4d:26:c4:81:0a:cd:a5:
1f:b2:27:b1:80:f2:64:b8:8c:ca:2e:0a:4f:34:9d:
2d:cf:aa:c2:35:d5:ff:cd:3b:1a:a4:11:0a:27:b6:
54:ba:e7:18:1c:b5:90:75:18:bf:0c:26:ef:2a:fa:
de:59:21:d8:2e:eb:4c:ac:66:7c:95:75:d6:52:7c:
76:4e:ae:a5:7d:f3:ed:61:e3:f0:19:f4:f0:33:3c:
ce:ca:2c:64:7b:2d:d3:67:06:2e:df:41:6f:48:0c:
cc:06:b2:17:bb:23:c6:22:af:e1:c2:91:b4:a2:fe:
dc:b5:0d:7d:b4:96:60:41:c7:b2:e6:d0:95:f3:26:
4f:95:a5:90:1f:c4:a5:29:8b:7c:fd:e8:24:af:f2:
03:6f:5a:62:a6:ec:a4:ef:cd:af:91:8e:8e:07:95:
0e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:89:DD:E1:DD:50:CF:D9:86:0D:CE:AE:14:67:63:E4:F9:2A:C7:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f267952c-df06-3fca-bb19-e59de494757d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.192.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:46:a3:4a:f0:9d:7e:d4:e3:a9:7e:2d:48:79:8b:6c:d0:e1:
9e:88:f5:a3:a6:c8:a3:c4:1f:89:94:1f:32:f6:7c:0f:ee:8a:
9f:fc:f3:30:92:c3:fa:b1:64:1c:62:db:2a:57:b6:aa:11:5d:
8b:ef:da:51:dc:1f:4e:a1:8c:a9:68:ef:2b:4e:c2:7b:a7:71:
98:67:59:0e:9c:37:13:65:0a:1c:f0:52:4a:fd:82:ed:e4:65:
c7:f2:d5:40:03:d2:6e:9e:6a:ba:e3:98:df:ea:2a:5c:92:7e:
26:32:f7:47:b2:11:6f:4a:b0:59:2d:ed:0f:0f:6c:1f:1b:5e:
75:22:fb:c2:34:ac:c3:e8:86:a4:ee:8f:43:85:40:97:4c:37:
13:06:35:99:24:c5:c7:d9:c2:3f:8c:a7:fa:65:69:e3:6b:12:
01:40:fd:d4:ad:fa:7d:c5:72:ed:57:88:e1:0a:96:9a:d3:f2:
42:1b:2f:55:e7:ee:27:f3:24:77:1d:5d:c4:b4:c2:cc:d2:6c:
18:15:ea:39:c3:8b:11:1c:e1:f2:5f:dc:0c:f5:06:23:49:b5:
aa:40:3a:41:5b:d3:4c:42:e6:68:a8:21:62:43:22:67:63:65:
19:4c:d3:cf:d4:d1:66:23:ca:07:ce:3e:1c:96:cc:3c:7f:08:
e7:9c:f4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:02 2025 by rpki-client