Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb00b55a-e2b7-3687-af49-d823335aff04.roa
File: fb00b55a-e2b7-3687-af49-d823335aff04.roa (raw, json)
Hash identifier: 5gJrSE3jVsmCorfmpc+gJXCqOcDJ5naEOfJO2c/gPpQ=
Subject key identifier: A1:76:97:43:8F:E2:A6:BE:42:4C:69:08:FD:57:EA:EF:BA:A5:D7:98
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DCC67D94894A17FD991E63E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb00b55a-e2b7-3687-af49-d823335aff04.roa
Signing time: Wed 04 May 2022 12:00:00 +0000
ROA not before: Wed 04 May 2022 12:00:00 +0000
ROA not after: Thu 09 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.184.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cc:67:d9:48:94:a1:7f:d9:91:e6:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 4 12:00:00 2022 GMT
Not After : Jun 9 04:00:00 2022 GMT
Subject: CN=0bd23c82-5c33-4072-8b0d-8a1b67e68290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c8:31:87:c6:fa:71:77:6b:c4:bd:24:94:b2:
01:63:bf:26:55:70:9d:5c:89:3d:53:47:ee:2a:75:
f6:0b:6a:78:7b:50:e7:f6:90:11:56:18:12:25:48:
a5:0b:2a:1c:aa:43:b7:84:8d:e2:d7:9a:af:68:9c:
6a:65:5a:fc:c5:c7:8d:c1:97:16:6b:6e:87:ef:6b:
3a:40:dd:ca:00:d0:6c:1c:6e:74:be:e0:da:8a:6f:
c5:24:0f:e6:9c:cc:f9:e5:a0:b1:f9:fa:b0:12:84:
e7:1e:a7:b2:c4:6b:7e:bf:20:4a:9c:4e:8e:d4:d5:
43:30:de:ac:cf:c0:6b:23:09:39:47:fe:c2:50:c8:
82:c8:24:a2:7a:b6:e4:d2:9e:65:b1:01:4e:d3:23:
71:46:26:f6:23:d3:94:ab:c8:59:22:f2:e8:7a:6b:
7e:6b:e2:fc:19:ad:d2:35:21:c7:59:85:a7:5d:79:
5b:fd:aa:9e:f4:1f:d8:38:f3:0d:15:78:e3:64:41:
59:ee:c0:f9:ae:f5:dd:ea:2a:dd:63:30:93:2e:1e:
b4:cf:04:12:0c:dd:09:5b:e4:1e:d4:7d:6c:63:3d:
a5:0e:ad:0c:d3:bd:c3:c2:33:53:9a:00:42:1d:aa:
23:bb:25:b2:39:37:b4:a2:90:fc:cb:ee:61:21:17:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:76:97:43:8F:E2:A6:BE:42:4C:69:08:FD:57:EA:EF:BA:A5:D7:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb00b55a-e2b7-3687-af49-d823335aff04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.184.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:76:1e:8b:c4:9d:fc:02:21:54:07:04:00:2a:1f:d3:99:53:
9a:bc:da:9b:e8:e1:1a:1b:79:ac:6b:42:fa:12:32:09:2a:b0:
d7:0d:cb:fe:5b:32:e6:ee:3d:f3:cb:9e:35:fa:31:11:3d:74:
e9:5e:b3:8b:0c:2b:3d:9e:91:c6:fc:41:cf:f1:c3:a7:cf:14:
ce:c3:93:95:66:85:79:8a:27:55:49:b3:5a:15:e6:a5:5a:ec:
b6:f8:72:93:e1:f0:9e:ac:fa:9b:21:64:6f:28:9a:fb:1d:52:
c8:21:bc:c0:d3:13:f6:b7:d7:b2:40:c7:8c:3b:9a:37:34:c6:
11:18:23:ab:1d:05:ac:18:f4:5f:ab:e2:bf:a3:38:5b:b8:0e:
1d:8c:f1:c0:e6:ac:37:5e:b2:29:df:f3:48:16:e6:b8:b0:3d:
2a:36:72:e8:b0:28:83:f3:c1:05:4f:75:4c:d6:f3:44:2f:e8:
a2:58:e9:51:b8:78:f4:1a:98:7d:d7:63:4f:8f:95:64:08:8b:
32:1e:34:56:cd:a2:2d:b5:c7:1b:a0:f7:3a:11:c1:95:ab:d9:
c1:5f:8c:eb:47:c4:16:fa:fa:f7:3b:2b:d2:7d:1c:be:4e:2e:
80:cc:75:6b:8f:22:c6:81:8f:5a:c4:44:a2:ea:78:51:36:74:
43:f8:62:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:24:12 2025 by rpki-client