Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/099d5ee3-41ce-3123-8778-3cf6a4e8c5f0.roa
File: 099d5ee3-41ce-3123-8778-3cf6a4e8c5f0.roa (raw, json)
Hash identifier: nhA7sgX17O0TP6557ESOKP5/XylfBeFyTnuQaSSfEzo=
Subject key identifier: E3:69:1D:AE:1D:03:6A:6C:92:7A:2F:00:B4:27:0C:D7:18:8C:4E:47
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CB9E3DD7C93091DA8A4718660
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/099d5ee3-41ce-3123-8778-3cf6a4e8c5f0.roa
Signing time: Thu 27 Jan 2022 05:00:00 +0000
ROA not before: Thu 27 Jan 2022 05:00:00 +0000
ROA not after: Thu 03 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:b9:e3:dd:7c:93:09:1d:a8:a4:71:86:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 05:00:00 2022 GMT
Not After : Mar 3 05:00:00 2022 GMT
Subject: CN=28179723-3952-42e2-b694-48b9b7e43dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:33:26:65:cd:b9:78:fa:9f:2f:ac:1b:ea:80:
ba:61:50:7a:18:08:ef:c2:0a:f8:fa:ae:a3:af:e2:
27:1b:5d:5e:53:fc:72:dd:ec:99:2c:fb:6a:26:e5:
a1:23:c6:67:da:44:15:61:76:1f:5d:e5:b4:23:81:
a4:67:62:a2:13:07:5b:21:35:aa:20:d9:8c:b3:dd:
57:19:ae:3c:e5:45:34:ad:1d:01:9b:c2:44:1a:58:
be:b4:41:45:d8:c5:7c:83:00:27:bf:d3:43:55:cc:
3e:10:21:8f:dd:ef:c7:ea:30:e5:64:96:64:a0:f6:
b8:e5:59:c6:df:e1:cc:01:a8:3e:e5:06:39:dd:73:
a9:a9:38:9a:e8:78:14:ec:11:20:54:a0:59:a3:5c:
41:d0:30:8f:eb:b5:7b:a0:f9:10:a6:75:f2:60:9c:
bb:73:4e:f5:9c:9c:5c:29:9d:22:d1:5c:53:41:0b:
eb:e7:7c:fe:e0:e3:27:0c:52:e7:d8:16:a5:ac:40:
52:67:63:3c:c9:cc:c2:07:22:27:bf:6d:9d:86:cf:
d9:c2:32:d3:8d:aa:46:1b:78:3e:19:9c:79:61:c0:
31:aa:83:36:4d:c1:5b:f1:29:11:ec:45:01:ea:08:
b7:e5:8a:da:dc:f6:34:f0:b0:6f:78:09:91:e9:73:
f2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:69:1D:AE:1D:03:6A:6C:92:7A:2F:00:B4:27:0C:D7:18:8C:4E:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/099d5ee3-41ce-3123-8778-3cf6a4e8c5f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:9f:c3:00:8d:8c:13:78:38:0c:52:8f:6c:2b:09:36:1f:7e:
3c:2c:15:85:5d:e0:1e:bf:65:89:93:04:b6:d2:76:49:8a:72:
e7:61:2e:27:69:5a:a2:de:2c:06:b2:23:96:70:32:ce:3c:39:
a3:e3:b0:4b:a2:7a:24:8c:64:f2:74:a2:38:f0:9b:50:1f:f8:
d1:8e:64:59:76:89:1e:c7:93:43:51:bf:d4:8a:10:b0:ec:f4:
77:6d:3e:27:f6:c4:42:40:0a:94:57:a2:28:d5:47:ca:9b:45:
db:c0:68:e1:05:33:8b:80:d5:e6:84:a2:7c:21:b6:9a:91:0b:
9c:86:de:d0:2d:23:2f:7a:dc:e0:86:c5:4e:9e:3b:03:3e:90:
28:59:38:6c:81:8f:89:39:88:57:e8:6f:31:0f:08:8a:df:43:
8e:27:23:66:05:dc:5e:67:33:df:b9:48:52:85:61:cc:7a:b7:
da:84:49:fb:56:b5:2c:10:63:bb:bf:8c:bf:5d:76:1c:ce:39:
a1:0d:6f:0d:ad:54:53:13:52:da:7c:f3:c2:1b:1f:dd:7d:1f:
8e:f1:6b:27:09:78:1e:7b:20:db:b6:c5:1e:a0:77:fe:6d:03:
86:00:3b:7b:d8:7d:c8:09:3a:24:55:61:fd:cd:b7:b4:69:e0:
bd:26:c2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:07 2025 by rpki-client