Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd3ba2dd-9b06-3052-b972-3e394ed1429c.roa
File: fd3ba2dd-9b06-3052-b972-3e394ed1429c.roa (raw, json)
Hash identifier: Uk1HcpeVIJMTZgzZWMv1hy1Tw8T3iNf+mswbtoWJTgE=
Subject key identifier: 31:8F:E0:8C:4C:AF:95:D5:D4:A3:2E:26:9E:D1:3C:44:65:39:DE:EB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E4199A3360021B4976731F980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd3ba2dd-9b06-3052-b972-3e394ed1429c.roa
Signing time: Wed 15 Jun 2022 12:00:00 +0000
ROA not before: Wed 15 Jun 2022 12:00:00 +0000
ROA not after: Thu 21 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.198.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:41:99:a3:36:00:21:b4:97:67:31:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 15 12:00:00 2022 GMT
Not After : Jul 21 04:00:00 2022 GMT
Subject: CN=06dee564-060b-40d4-b4f6-f58ea3335b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d3:c8:21:a4:4c:8d:b0:e1:88:86:7a:45:46:
19:2d:f0:85:c7:46:e3:7d:b7:6e:00:45:2e:8a:80:
d8:f6:6c:80:31:ff:30:b6:3f:d8:c6:6a:d6:6e:b4:
f4:d5:b6:1a:9f:93:e9:6c:ed:2f:78:30:4e:83:1a:
c9:60:e7:91:8a:00:5d:19:11:24:4a:b7:62:77:ba:
3e:76:92:bf:29:1d:f4:fe:69:55:58:b4:7a:e9:3e:
09:8d:3c:a9:0e:9c:94:a8:e6:e5:eb:66:9a:56:52:
58:70:cc:03:d5:fd:75:17:33:c4:fe:8d:03:5f:e8:
cb:f6:b7:2f:12:47:63:56:0b:59:40:eb:19:5d:c6:
d3:75:19:0f:37:26:64:99:2f:e6:ff:c5:56:da:ac:
b5:93:29:22:4f:84:f1:56:68:57:51:28:71:6c:38:
29:63:8f:2b:61:80:bf:af:52:9f:12:03:f1:3f:e3:
af:b4:d4:2c:db:c9:7d:21:03:ab:4a:31:10:51:dd:
3c:3c:46:68:39:83:bd:64:55:90:cb:41:cd:60:53:
f4:e7:ac:4e:c0:0d:05:e3:34:e1:b6:d7:a0:49:d4:
36:cb:2a:c7:1b:37:07:d5:e4:9d:e3:92:36:88:60:
0c:e1:55:5a:50:06:dd:41:cd:7c:a1:b3:25:00:d2:
28:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8F:E0:8C:4C:AF:95:D5:D4:A3:2E:26:9E:D1:3C:44:65:39:DE:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd3ba2dd-9b06-3052-b972-3e394ed1429c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.198.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:3a:28:75:63:ff:a5:1b:15:da:75:c6:cb:82:93:00:74:26:
f4:17:8e:b9:08:8e:76:a6:33:f7:5f:4b:13:05:90:e0:45:b8:
89:d3:ee:eb:9a:b6:15:e7:0c:c3:7e:f2:f9:12:9e:e5:3e:fc:
fb:85:4c:d1:56:80:66:84:66:09:c4:d8:4a:2e:b0:e9:7a:6b:
10:ed:c1:22:58:fc:22:a9:de:4c:c8:c0:34:c5:a9:81:61:92:
d3:fb:c3:bd:98:3c:16:5f:bd:fa:f2:27:67:96:df:87:11:2c:
ca:ee:0c:ac:8b:c9:79:1a:39:bb:ff:90:f4:f6:bb:07:28:68:
9d:6b:cd:05:88:82:6b:f9:ef:5e:17:13:8c:75:bc:fa:aa:8f:
2e:a1:0f:c6:32:7f:8c:ff:03:f8:2c:9a:e2:ab:3c:ec:39:4e:
60:72:54:6a:72:33:73:88:fd:cc:14:1f:36:81:40:df:a9:10:
87:8e:e0:52:86:dd:58:81:2b:11:8f:44:57:47:72:72:16:2a:
b8:a5:9b:61:4c:ae:19:28:ed:f1:62:e1:05:5f:6d:74:0a:0a:
0a:e1:df:2b:fe:3e:0a:21:73:ee:a4:03:ed:cc:6e:9f:ab:d3:
89:61:0a:a0:fe:e4:8f:27:a1:de:1c:95:5f:91:8a:31:09:0d:
aa:12:bc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:12:53 2025 by rpki-client