Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fe6d6b52-0a46-3fe5-8995-f2127065d08c.roa
File: fe6d6b52-0a46-3fe5-8995-f2127065d08c.roa (raw, json)
Hash identifier: W8xumSydehxfFhJfU3VSBiQ0FUXh+abl5I5ueuiAZSQ=
Subject key identifier: 0B:2D:8E:F1:09:A5:4D:E4:33:C2:91:A5:95:36:0B:5B:76:A5:6B:E1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FDC98865E8B9835CC937CD500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fe6d6b52-0a46-3fe5-8995-f2127065d08c.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:dc:98:86:5e:8b:98:35:cc:93:7c:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=9306419d-c8c8-463a-b0cd-fd49f9a1eb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:87:92:ad:8f:26:b0:47:7c:56:e5:d7:86:99:
60:9c:68:a5:db:a1:ff:e9:ac:c8:70:fd:93:d1:82:
92:6d:44:36:5c:b0:12:6b:8e:51:9f:34:81:13:26:
c3:5b:16:cf:50:72:fe:e2:57:5c:32:12:62:4c:a5:
1b:db:99:09:65:12:81:e8:25:cd:47:a8:2a:08:28:
1e:0f:96:e2:e9:bc:05:20:53:c1:52:42:ff:fa:f7:
ef:f6:70:7e:41:39:89:e9:cc:89:c1:f6:d0:b8:c4:
27:be:49:82:81:f0:ca:be:22:73:ff:b0:d1:b7:be:
03:3f:63:be:37:41:54:c3:ed:23:13:80:65:47:08:
2c:01:fa:d2:42:bd:75:b2:14:5a:50:2e:21:b2:4f:
24:f0:e5:23:23:25:41:65:c9:69:03:cb:b7:68:1e:
ef:31:e8:10:3b:f3:61:2a:eb:d3:ae:0d:01:97:0d:
f8:ce:3f:49:bb:00:fe:86:8d:55:82:e1:99:15:fa:
8e:2e:92:ee:0c:a4:57:65:ea:eb:23:68:c1:9f:a1:
a1:9c:78:ce:5b:62:c2:15:60:df:e1:7a:db:11:fb:
02:aa:c0:32:69:d7:d3:58:17:9f:8f:68:d0:b7:25:
be:e0:9b:a4:6d:22:a4:ca:cc:31:a5:d2:9b:5b:6d:
0f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2D:8E:F1:09:A5:4D:E4:33:C2:91:A5:95:36:0B:5B:76:A5:6B:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fe6d6b52-0a46-3fe5-8995-f2127065d08c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:0c:b4:02:2a:98:9d:0a:c8:b6:dc:d0:96:31:0c:79:62:33:
80:51:81:11:69:5b:82:e9:29:a2:2c:ba:3f:b2:a0:eb:14:c8:
d8:40:2f:eb:21:5c:cd:f5:76:22:33:4f:44:8e:11:4c:cf:2b:
8c:5b:fc:60:bf:09:88:ff:40:03:f9:fd:38:b5:59:d7:76:1d:
5b:66:92:c2:84:2c:c7:00:67:06:2f:8e:ad:07:f6:68:b6:ac:
d6:f8:9b:12:6a:c3:43:ba:31:64:2f:69:d0:0c:f5:fc:32:fa:
27:f5:2b:6b:8b:a9:35:b5:83:6b:e4:6e:87:fe:cc:f5:e8:99:
15:07:76:fe:81:69:19:26:50:86:b6:d9:b5:fe:c7:0c:74:1a:
ea:12:af:2b:a9:9b:67:5f:54:f2:84:5a:53:b2:3f:3e:34:dd:
51:c6:ec:91:94:4a:37:cd:fb:e5:b8:ad:dc:24:61:50:f6:9a:
e6:f9:33:63:5f:05:4d:cf:7d:d4:04:3e:21:91:2f:05:f9:4d:
b3:29:96:f0:81:ef:71:de:eb:c8:e7:83:8c:76:bd:b9:e4:13:
88:6c:83:35:5e:8b:dd:88:49:d7:bd:cd:c4:83:08:b8:1d:1b:
56:1e:f1:b7:84:26:7b:89:89:c5:89:03:32:47:10:28:43:4a:
82:4c:f6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:48 2025 by rpki-client