Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f9be90d-4673-3923-a47e-263e793dbf49.roa
File: 0f9be90d-4673-3923-a47e-263e793dbf49.roa (raw, json)
Hash identifier: MjyJnFtyCN0iM6+K72qSUugEvfRpF7xwfMEOmJi5Iw4=
Subject key identifier: EE:96:29:A7:E5:1B:B3:4C:F9:7F:73:43:66:D7:DD:FA:E1:2E:09:5A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3F2013675BD98D99BDE7B880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f9be90d-4673-3923-a47e-263e793dbf49.roa
Signing time: Wed 14 Sep 2022 12:00:00 +0000
ROA not before: Wed 14 Sep 2022 12:00:00 +0000
ROA not after: Thu 20 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.147.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:3f:20:13:67:5b:d9:8d:99:bd:e7:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 14 12:00:00 2022 GMT
Not After : Oct 20 04:00:00 2022 GMT
Subject: CN=6bd78b2d-2f75-4e6a-9bb7-0f4588b72236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dc:55:4c:ae:d9:52:80:61:98:50:1f:23:d7:
85:9b:18:53:c7:06:94:6c:5b:f7:13:0e:52:ac:0f:
d6:0b:fe:0d:b7:45:7d:0d:d6:20:59:e9:cf:21:61:
b8:9d:21:18:83:2b:55:39:5d:74:bb:72:3d:b1:bb:
70:be:47:55:57:d8:30:e4:23:75:5f:e7:48:88:5a:
67:13:31:ce:0d:e9:2b:3b:47:a4:4f:58:56:f2:6a:
42:87:3d:ee:0d:de:d9:74:ab:b6:cd:a1:6d:0f:88:
e6:34:8c:27:7e:d8:12:b3:b7:ae:1f:97:54:fc:03:
0e:ad:a9:0f:fb:a3:23:a8:03:a5:82:a5:14:3b:16:
e6:82:e9:09:ea:b0:80:6e:c6:e6:12:22:5e:a9:d2:
74:4e:b2:ad:1f:e7:b9:f3:1e:b4:e0:8c:99:0b:c0:
52:8d:e4:53:72:29:98:6b:55:c1:ea:f0:c1:4d:32:
56:d2:9d:44:f4:96:04:ff:12:75:22:eb:a5:ae:38:
64:2c:75:a4:90:25:15:b6:a3:fb:d4:97:80:26:a4:
ba:44:f3:2d:e1:21:fb:f6:a6:15:de:c6:90:b7:93:
52:11:f3:a1:cb:b0:b0:98:eb:cf:cc:77:59:66:26:
e1:a8:b8:c7:fa:49:65:b9:2a:aa:8c:a9:a3:72:ed:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:96:29:A7:E5:1B:B3:4C:F9:7F:73:43:66:D7:DD:FA:E1:2E:09:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f9be90d-4673-3923-a47e-263e793dbf49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.147.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:e4:6b:1d:94:30:64:07:e4:ca:f3:ab:04:ed:c8:38:bc:63:
38:39:f5:b5:11:35:16:80:41:6c:8c:94:b3:55:f6:e8:19:85:
87:88:99:ff:1e:0e:89:9e:b9:a4:f8:c6:8e:a1:b9:4d:74:2f:
87:20:a1:2c:e8:06:d1:0f:23:21:fe:db:9b:c9:61:5e:ec:8a:
28:85:0a:95:cb:7e:1f:21:1d:a6:cf:71:67:1a:7b:df:cc:21:
0b:be:3d:68:b6:4c:be:94:f3:5c:8a:a1:88:bb:c6:98:99:c4:
2c:ac:ba:e8:9a:d2:98:b7:0e:d1:39:b4:8e:a1:9a:f7:cb:73:
52:85:74:dd:a1:a2:24:95:ee:ab:b0:70:d9:5e:c3:88:02:e0:
31:c5:7a:ba:9c:f7:61:b2:bb:1b:ca:58:28:fb:c5:9b:6c:16:
ab:20:c5:50:fc:15:d4:77:3c:5b:c0:9b:20:69:1a:6b:6f:4a:
0a:6e:60:81:f7:57:ed:a5:7e:65:2e:cb:ca:a1:ba:35:be:ad:
e8:16:32:74:df:74:ab:b8:7d:a1:8a:6a:97:ed:fb:f5:44:3c:
1b:d8:85:e4:43:90:f6:a6:10:10:bb:59:84:86:ea:e1:06:5a:
88:96:e6:4a:2d:6a:42:87:fa:41:cb:97:97:09:41:f9:57:3f:
e4:1b:a9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:47 2025 by rpki-client