Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c89ffd0-b3fa-3ef4-bb1a-9329bf5cb8e2.roa
File: 1c89ffd0-b3fa-3ef4-bb1a-9329bf5cb8e2.roa (raw, json)
Hash identifier: CYAzjls1RbEtCHEIT+guw3LQ1D5ge026XMTghKhrYuE=
Subject key identifier: 1C:F7:57:28:AD:6C:53:ED:3B:11:FE:49:DF:CC:82:FC:A6:C4:74:E9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584078170F28E5042859AF50FA80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c89ffd0-b3fa-3ef4-bb1a-9329bf5cb8e2.roa
Signing time: Wed 04 Jan 2023 12:00:00 +0000
ROA not before: Wed 04 Jan 2023 12:00:00 +0000
ROA not after: Thu 09 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.244.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:78:17:0f:28:e5:04:28:59:af:50:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 4 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2023 GMT
Subject: CN=3fa7e75d-6ace-489e-b926-5d5cdfbcd547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:c4:57:ad:e8:f9:60:20:83:18:e5:09:f6:c5:
d2:56:b3:67:9e:8e:08:a7:ba:a9:9e:6d:16:f8:bb:
57:1e:c4:9c:9b:f4:1e:fa:74:1b:3a:af:33:ee:69:
dd:3d:70:51:87:d5:09:01:5a:93:09:eb:e2:de:2d:
c2:9b:a5:be:e3:c1:17:12:7d:f9:6f:bf:ad:72:90:
07:bc:ca:25:d9:6f:2e:69:13:e2:47:1f:18:a1:27:
5a:35:bb:e7:b0:27:e2:0f:c9:16:e5:af:19:49:8e:
55:b9:17:61:f5:50:46:a6:5b:07:9f:86:fe:43:47:
de:85:e7:25:40:63:86:32:48:b0:e1:4a:db:bc:8e:
b6:58:27:ff:26:4b:cb:a3:38:8f:f6:b7:6a:3c:64:
c5:70:a1:8b:38:c3:6a:80:59:f3:66:f1:fc:c0:7e:
a4:5a:d7:20:8d:ab:89:e6:18:ba:34:ba:08:81:e0:
0c:fb:7d:84:f7:c3:b2:46:c7:4f:d0:66:21:14:74:
9b:00:0a:1f:b0:48:75:49:80:3b:2c:1f:33:02:de:
3d:43:a5:21:bd:a8:c9:ba:2c:a2:53:4c:08:59:c7:
06:87:5c:75:97:d0:e9:a4:0b:07:90:1a:8f:4d:c7:
37:1f:37:6b:f2:f8:41:78:1b:b9:20:ff:35:53:78:
f0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F7:57:28:AD:6C:53:ED:3B:11:FE:49:DF:CC:82:FC:A6:C4:74:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c89ffd0-b3fa-3ef4-bb1a-9329bf5cb8e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.244.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:54:7b:c9:ea:c9:27:af:a5:cb:5a:03:42:17:b9:be:2c:6d:
9e:a3:60:0a:63:a6:f6:0b:6c:c8:42:9f:f8:36:09:d5:60:c3:
c8:a5:a6:8b:04:d3:ac:0e:a7:6a:60:9f:5f:ce:29:96:b8:b3:
4b:c7:d1:9b:82:50:f6:75:28:b5:88:8c:f6:13:d4:8b:d7:92:
2f:49:d9:b6:64:b5:17:7e:25:c5:28:e9:2d:c7:e2:b5:56:60:
03:7b:1b:8e:a2:f8:1e:f4:ad:f9:28:4b:47:7d:8e:93:39:31:
ab:01:38:16:3a:61:a5:91:54:a2:ea:cd:dc:66:a6:7e:55:4f:
91:fd:1e:17:dd:4b:04:33:ce:2b:da:25:83:e1:9f:ae:cc:d0:
e6:e4:49:a6:71:5b:b0:26:86:32:e5:a7:20:56:16:cb:b7:c2:
33:89:83:e5:01:c1:21:81:e9:b5:38:3e:c5:67:7f:7d:0e:a6:
df:7e:9b:d2:e5:56:e4:26:e8:41:4c:fc:45:97:f7:59:43:d7:
4b:54:9e:31:ec:d1:1a:e3:7c:89:5f:57:4c:a2:6f:00:ad:df:
58:98:6f:f7:45:c6:24:dd:69:00:51:f8:9a:bc:e1:1d:64:0c:
e4:7c:79:f2:5c:ed:56:bd:22:9b:83:6d:d3:9a:e8:37:0e:d2:
1e:81:0d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:58:18 2025 by rpki-client