Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f933d360-fdb6-3864-ba6a-ca366d7cdc32.roa
File: f933d360-fdb6-3864-ba6a-ca366d7cdc32.roa (raw, json)
Hash identifier: Ng5hqhm65lGKjD7xTZiV6XlzysuRVi2k/wQFDaBs23s=
Subject key identifier: 84:DD:FF:CD:09:70:96:61:91:9F:EB:95:90:BA:1A:D1:7B:43:1C:06
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EF06016391018B24C3D0AF920
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f933d360-fdb6-3864-ba6a-ca366d7cdc32.roa
Signing time: Tue 16 Aug 2022 12:00:00 +0000
ROA not before: Tue 16 Aug 2022 12:00:00 +0000
ROA not after: Wed 21 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.255.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:f0:60:16:39:10:18:b2:4c:3d:0a:f9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 16 12:00:00 2022 GMT
Not After : Sep 21 04:00:00 2022 GMT
Subject: CN=258c37ce-62c7-45c3-92b8-e249b61c951a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8b:1a:56:c9:2d:2d:6b:79:f1:7b:dd:cd:d5:
6f:92:e6:4c:13:05:e8:4b:39:03:bc:2f:bc:5d:2b:
66:cc:a5:20:52:f2:55:74:49:77:30:2b:ff:a3:0b:
38:3e:88:ef:e9:7d:68:18:e4:41:fb:d4:7e:a9:3f:
ae:b7:a5:12:1c:e2:e5:b9:5a:4a:01:a8:c4:78:83:
51:05:95:1c:fd:88:90:f9:73:89:66:8e:66:f1:51:
a9:48:fe:fa:ca:0b:c6:b1:8a:b5:a4:3e:2b:a1:cb:
38:a8:57:8a:e8:ae:5d:da:8d:6e:87:6c:49:e2:cb:
86:68:c7:1e:9c:d0:ca:07:32:62:7f:f7:d0:6d:c9:
68:d0:6d:0f:a0:27:4b:a8:d5:ae:4b:f1:3c:37:ab:
9f:ef:fa:3b:83:69:15:ea:7c:7a:c1:17:03:66:6d:
08:bf:45:b8:f5:21:ff:02:9b:05:6d:aa:f1:a6:af:
df:de:42:ec:dd:57:a0:c3:77:a2:f2:55:21:12:ca:
6e:39:29:b9:06:2b:07:b5:43:20:00:3f:1d:c6:7a:
32:cd:a3:c1:e1:0e:61:d0:c0:7b:cc:14:e1:27:3f:
23:bc:bd:f8:70:cb:2d:29:54:cf:8d:45:98:f4:ef:
2d:67:ed:29:63:a0:94:73:81:0d:70:1d:c7:ac:5f:
17:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DD:FF:CD:09:70:96:61:91:9F:EB:95:90:BA:1A:D1:7B:43:1C:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f933d360-fdb6-3864-ba6a-ca366d7cdc32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.255.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:20:f5:c3:d1:76:c7:1d:35:1c:b8:48:94:6f:cc:63:76:a3:
31:5e:63:c2:3b:32:79:28:cf:f2:be:b6:bf:9a:cb:c0:45:a9:
bb:89:26:d1:ab:14:f3:1b:69:b9:eb:0f:0a:f9:8d:f4:93:c3:
22:15:1f:29:98:fc:7c:60:9c:cb:90:82:13:0e:ba:9a:48:42:
db:ff:7d:82:f0:12:ab:5c:5b:9d:7a:69:6f:4f:a3:2a:3a:ea:
f4:ef:e2:45:a3:68:4e:c6:de:38:57:8b:f7:99:aa:68:b1:01:
98:b0:64:b0:03:c0:15:51:25:33:37:13:b3:1a:bc:28:6c:4c:
ac:e6:34:fe:01:de:6e:c3:97:7d:ea:f8:b2:a1:30:56:16:76:
36:ee:30:5c:01:f8:79:6a:46:68:ab:d6:d2:b4:27:89:79:dd:
90:6b:62:8a:6b:29:ba:7f:4e:18:57:4e:1b:d3:ae:e6:f7:19:
4a:ab:6b:01:0f:d5:90:30:64:78:be:0a:41:19:59:07:6b:cc:
36:66:e6:68:fe:8f:dd:8c:35:98:e9:fe:06:a5:ae:f8:25:c8:
62:fe:6d:ff:32:4d:b0:32:af:d0:48:67:3e:a2:b2:b8:94:37:
70:97:38:95:59:a5:28:9e:d8:73:f0:37:e4:ff:1b:61:2f:94:
97:80:a1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:04:46 2025 by rpki-client