Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f8e17d19-a565-3be0-a86e-d83273762131.roa
File: f8e17d19-a565-3be0-a86e-d83273762131.roa (raw, json)
Hash identifier: nE3qNA4Tsvovj57VeczIEBId7mG0TE0a74nY9gdtHqI=
Subject key identifier: 54:09:3E:99:9B:4B:C4:9B:59:F1:DD:C8:E1:DC:CB:6B:E4:07:BD:46
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584017A89E6FE7D00D4FDD77DDA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f8e17d19-a565-3be0-a86e-d83273762131.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.221.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:17:a8:9e:6f:e7:d0:0d:4f:dd:77:dd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=2bbdb5b6-8e73-4280-9b14-53569bfef121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:32:de:4d:9f:fa:d8:8b:1d:59:f1:cf:0e:
95:4e:c6:94:82:21:8e:a5:df:a3:3a:87:c4:cb:61:
9e:c7:f6:e2:78:70:78:5e:99:94:80:ec:16:0c:f9:
fa:cc:7e:9b:eb:f5:ae:1d:17:8b:ba:ed:33:79:69:
4b:4a:1e:62:a1:17:86:b9:22:98:5e:51:eb:26:88:
76:58:94:0c:e3:ce:f3:bc:74:c7:1d:3b:e4:94:9b:
0c:55:e2:17:6a:31:b5:0b:71:65:85:b4:e8:d6:f7:
a6:e8:9d:f0:d9:e1:4e:9c:ac:06:bc:93:23:0c:e7:
2c:5b:0c:d3:02:c6:d3:c3:2e:a5:2f:82:37:92:aa:
66:8e:48:8b:c0:71:b9:e7:a0:d9:92:f9:ee:dc:b5:
e1:bf:d4:1b:79:c4:41:27:09:6c:71:e0:fb:95:fa:
f2:9c:ec:92:29:ee:6d:9b:df:b1:e6:97:5c:51:51:
25:55:f1:6e:1c:b7:93:8d:22:0f:a3:cc:f9:82:8e:
d1:90:94:2a:2e:99:2a:ce:3e:78:1a:d8:c6:83:c3:
e0:e0:21:8c:0d:d8:07:a5:00:4a:d9:15:2c:df:ad:
07:17:2c:34:7e:ac:0c:2e:8e:ad:10:39:60:23:b3:
a3:0d:25:f4:88:d7:18:a4:df:ae:69:ad:ce:a4:19:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:09:3E:99:9B:4B:C4:9B:59:F1:DD:C8:E1:DC:CB:6B:E4:07:BD:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f8e17d19-a565-3be0-a86e-d83273762131.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.221.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:75:a8:4a:a8:0d:7b:dd:b5:1c:b5:0f:11:96:f1:76:16:f6:
30:02:9e:54:9a:81:8b:eb:ed:72:16:a9:65:75:5f:88:63:6f:
64:1f:c4:ba:dd:ab:47:fb:45:6a:ab:0a:b3:50:5d:83:ac:a3:
e5:95:fe:14:7f:6e:24:35:1e:75:ee:ce:9d:84:db:03:34:3b:
00:d1:87:57:7e:90:ac:dd:3b:e3:4d:2a:39:82:1f:81:3e:1a:
cc:40:44:c8:74:59:be:24:86:e1:83:06:f5:ae:28:c2:06:89:
cd:b0:d7:7e:47:50:6a:7a:3c:d3:ec:9e:40:07:89:2e:df:31:
54:e3:bc:2b:3c:3a:a3:35:59:e9:b0:0a:35:84:3f:1f:10:8a:
cd:4c:2a:73:dd:4c:50:ce:4f:e6:58:8b:44:b1:c2:6c:bf:a5:
ba:8b:22:85:61:08:ee:75:50:c8:04:c0:31:c0:0f:43:9b:28:
65:e2:8c:d5:44:b3:44:11:c8:03:c3:ac:fa:8f:1d:25:c9:28:
b1:ad:ee:22:2d:97:a0:37:85:98:ab:48:9c:aa:28:fb:38:ac:
fe:e8:cf:a5:62:ad:2d:b5:8d:55:c7:d7:d7:87:6a:66:1f:7e:
e4:2d:d5:60:c0:f1:ba:3a:ba:2c:ab:c0:03:4b:92:46:eb:48:
c6:cc:ba:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:35:51 2025 by rpki-client