Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e9abe62-a94a-320c-be7e-f26618db820c.roa
File: 0e9abe62-a94a-320c-be7e-f26618db820c.roa (raw, json)
Hash identifier: U/CUUdOU31B9TDxoMBsaEnqqTN5f5qngCsLvJwtvLms=
Subject key identifier: D5:B3:70:89:F5:6E:0B:DC:D4:42:4A:31:12:03:37:76:56:39:4A:0F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584016BA624126C9E32E40888F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e9abe62-a94a-320c-be7e-f26618db820c.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.158.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:ba:62:41:26:c9:e3:2e:40:88:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=2976ee84-3017-4300-8102-99ee5d443aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:2d:a8:65:f4:49:14:dd:e3:40:ed:1e:f6:
71:2d:2f:35:f2:55:4c:5a:1e:37:3e:00:c4:9d:60:
f0:bd:16:1d:cd:cc:af:d6:a4:04:59:48:42:da:1d:
de:7b:bb:40:af:74:aa:fe:91:a2:49:3a:7d:12:11:
26:7d:76:33:7c:9e:b5:87:de:6b:de:dc:c0:10:c9:
f5:21:82:2c:fb:a5:c5:1b:56:b7:ca:ee:e3:0e:cf:
89:23:be:3b:d0:d6:60:c6:e4:d2:17:29:2f:57:d5:
22:2f:81:60:0a:c8:6b:4b:83:b9:fa:82:71:9b:5a:
15:ca:4c:a5:a4:c2:cf:d1:b1:08:4a:9d:b4:16:96:
e8:9b:c3:90:f4:08:dc:93:c9:08:33:06:40:23:c1:
25:af:c2:d7:02:22:88:47:c8:94:60:8d:43:d4:38:
36:57:d6:6a:c0:7a:3c:f5:9c:2c:0f:1c:be:3e:2a:
21:fc:57:f9:98:21:ff:89:87:32:0d:84:5f:21:c3:
3c:ad:ec:45:7c:64:e8:0b:a7:ae:40:b7:41:da:0c:
8f:82:75:50:58:c2:cc:66:56:24:4e:a6:9b:28:9a:
5a:8c:d8:3c:ad:bf:9e:46:02:32:02:c4:4c:da:12:
b9:16:72:55:e1:48:10:e1:05:d4:78:2e:c1:33:44:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B3:70:89:F5:6E:0B:DC:D4:42:4A:31:12:03:37:76:56:39:4A:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e9abe62-a94a-320c-be7e-f26618db820c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.158.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:dd:14:76:fd:fd:61:5d:9f:96:a2:62:85:a4:c4:ab:e2:7a:
d8:89:22:f4:dc:72:83:17:53:cd:d5:48:53:21:fd:4a:82:fb:
b7:19:41:d3:ef:64:35:f5:71:72:35:ff:04:ab:6c:bf:b7:a2:
43:82:5c:8f:d4:05:91:63:a4:ad:d3:f5:4b:92:34:bb:39:a1:
5c:04:a1:a6:83:ba:9c:4e:ac:92:52:58:c4:88:aa:1f:a4:af:
64:24:94:9f:00:0c:25:92:90:cc:36:6e:a0:1e:7d:40:ba:f9:
77:4d:f6:07:8d:83:9f:31:a7:d3:2d:0f:12:37:8e:a6:48:ad:
4c:ad:51:74:ba:59:84:22:3a:e2:7e:5b:9b:dd:8e:4a:b2:aa:
cc:b3:59:db:e6:84:d7:5d:ad:10:ed:bf:4e:7b:84:8e:88:99:
bb:36:eb:ee:df:69:6c:6d:5a:85:70:74:16:25:df:36:3f:41:
c5:cc:03:17:8c:5f:19:d8:9b:a8:d1:21:45:81:51:39:4e:f5:
20:dc:c4:15:ee:48:4a:3f:dc:a5:3a:77:12:d7:de:f0:7e:e6:
67:7e:d4:6a:32:2e:0b:7a:7f:c7:1f:67:3c:88:55:30:f0:f4:
66:18:14:46:5b:08:36:97:ad:fe:cc:b0:c2:49:e6:7b:3d:67:
ff:62:c7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:58:23 2025 by rpki-client