Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/052b7533-5e6e-3030-89d1-786ee07c5aa7.roa
File: 052b7533-5e6e-3030-89d1-786ee07c5aa7.roa (raw, json)
Hash identifier: uV/SyPzCuMnV21Umbj47tY9kKGT5gNY7zDC6CoPfxLs=
Subject key identifier: F7:60:D7:F6:25:BE:D9:76:DC:D2:1D:71:EF:6A:6F:1D:BB:21:57:08
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F8B158075F573BE530514B740
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/052b7533-5e6e-3030-89d1-786ee07c5aa7.roa
Signing time: Tue 11 Oct 2022 12:00:00 +0000
ROA not before: Tue 11 Oct 2022 12:00:00 +0000
ROA not after: Wed 16 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.170.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8b:15:80:75:f5:73:be:53:05:14:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 11 12:00:00 2022 GMT
Not After : Nov 16 05:00:00 2022 GMT
Subject: CN=0da4f85a-e48a-462b-983d-a2eb3d3a3a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:10:20:b7:5f:5f:b4:d3:2a:f3:99:76:f9:3e:
19:d1:62:52:17:fd:d0:42:15:b1:50:1c:5e:fa:aa:
06:1b:8e:7d:ba:93:1b:9c:9d:79:0f:7c:93:9c:63:
7a:b8:ed:4b:8d:80:bc:c9:53:23:2b:2b:23:64:e1:
47:d6:8f:43:a5:4b:41:d3:e9:89:52:74:4e:f7:28:
9a:cf:62:e0:b4:22:f6:12:2f:19:83:91:f3:f2:49:
66:a3:2f:ed:40:a9:cd:48:ae:30:77:80:a7:5a:1f:
0e:16:2c:4b:ae:f4:09:24:98:b4:35:ee:14:05:25:
ea:f7:26:0f:30:a2:f8:86:d9:5e:20:32:ff:45:82:
b4:4d:da:b5:e3:5d:c2:7d:8d:d7:d6:fd:e4:a0:25:
6e:a0:6f:b5:dd:53:37:3a:86:b3:3d:21:9d:09:8a:
e0:e1:e0:f7:74:81:13:79:1a:1e:7a:be:ce:19:2c:
d1:e3:ae:fa:35:6f:b7:04:7a:62:4d:e6:e0:83:40:
03:b2:21:6f:0f:69:b5:12:fe:99:1a:d0:7a:ad:cd:
87:72:c8:b1:96:55:ab:9e:23:64:1a:b9:94:f4:cb:
4a:70:d9:74:6a:e9:17:41:c6:57:9c:3e:7c:76:94:
f5:19:27:32:3a:54:71:59:23:16:6a:67:0e:be:81:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:60:D7:F6:25:BE:D9:76:DC:D2:1D:71:EF:6A:6F:1D:BB:21:57:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/052b7533-5e6e-3030-89d1-786ee07c5aa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.170.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:f5:a2:a9:6b:c7:18:5f:dc:25:4b:78:39:48:f5:b7:46:da:
17:6c:13:e9:d0:29:da:ca:3d:db:da:5d:b2:52:03:46:fb:86:
24:bf:86:94:f5:47:4f:2b:8f:a4:f2:e7:24:ed:6e:d1:68:be:
be:5e:6f:11:f4:1c:43:ae:9e:a9:22:77:7f:b5:8f:66:2f:3c:
68:43:80:6e:33:ef:55:07:8f:a4:07:de:5c:7e:7d:fa:bb:b7:
44:be:8b:14:10:88:65:45:d7:9c:1b:0b:b0:e9:72:68:da:a6:
ef:da:a0:22:d3:d1:b2:15:a9:c8:b8:81:84:e1:6b:b9:98:78:
d0:cf:b2:21:da:f9:ab:04:62:17:6a:95:d1:74:33:7a:7f:ab:
ab:fe:83:aa:f5:64:af:25:5f:fa:7a:36:3d:e8:f4:a0:9c:c8:
12:da:86:b5:31:03:14:72:82:22:0f:93:5b:68:f7:28:1c:ca:
81:cb:bc:d9:7a:6b:75:5d:89:b5:6a:2c:e6:01:c9:59:fc:68:
d0:73:a6:4d:a6:2e:b6:37:94:e3:be:fe:48:dd:f5:03:b3:36:
fc:ab:3d:30:f4:7f:98:71:5a:86:e8:04:c3:f1:73:67:96:72:
bc:f0:04:ff:0d:5b:e9:cd:43:8f:2a:91:d6:bb:38:72:8e:7f:
e2:12:b5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:12:53 2025 by rpki-client