Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/16be0fd5-5a08-3eac-8729-a21cd1feeb7d.roa
File: 16be0fd5-5a08-3eac-8729-a21cd1feeb7d.roa (raw, json)
Hash identifier: tSXg8gNs1HSDBhud5vspbfFKW07VtMscgAABeyomf9s=
Subject key identifier: 95:8E:F3:36:07:A6:20:AE:1E:19:A5:35:1C:87:F6:F9:62:38:10:BB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584003F8E37BB5D431E348D9E200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/16be0fd5-5a08-3eac-8729-a21cd1feeb7d.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.147.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:03:f8:e3:7b:b5:d4:31:e3:48:d9:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=e0fb9ce5-31ba-4291-84f0-a45396d5701f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:b7:45:a9:5d:18:50:44:ac:62:75:23:46:
75:6c:58:9f:fa:fa:8f:c0:84:33:d8:68:02:6b:5d:
a9:78:c2:b5:b8:2a:ba:61:2f:17:10:dc:f7:ab:0d:
26:2d:51:9f:77:ec:dc:6c:cc:43:af:79:22:cc:b6:
e5:99:71:4c:4a:5c:ed:a7:21:5d:75:c2:35:26:28:
f5:a9:bd:ad:95:65:fb:3d:9b:b7:80:85:8e:1f:87:
5c:39:1c:3f:07:e3:e0:56:cd:0f:32:24:26:9c:4c:
42:1d:58:7c:1f:68:11:db:99:32:43:08:de:8f:59:
d3:7b:e9:59:1c:4f:ec:81:73:60:b6:00:34:e9:8b:
da:dd:38:ea:e2:7f:e2:76:a2:6e:b0:7c:ce:96:34:
74:87:c4:ad:a7:73:cd:5d:81:98:b5:0d:20:cf:9a:
97:86:f2:17:92:71:c4:04:ad:5c:f7:c4:a2:49:23:
7e:a7:21:60:e9:24:d9:17:ab:25:71:ed:13:43:af:
fa:ee:b6:0a:5e:94:fa:0d:79:53:58:a0:41:19:7f:
d9:4b:04:15:eb:4f:47:94:4e:77:f1:29:9f:2f:c6:
d0:b9:30:31:95:46:29:6d:cf:9e:42:63:4f:cb:9c:
66:5e:d1:09:ab:38:5b:6e:3f:0f:c4:e9:5e:d7:4f:
dd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8E:F3:36:07:A6:20:AE:1E:19:A5:35:1C:87:F6:F9:62:38:10:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/16be0fd5-5a08-3eac-8729-a21cd1feeb7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.147.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:c4:58:f6:e3:0b:ec:d5:f2:56:7d:24:f2:e8:f5:29:cf:38:
70:78:b4:f2:cd:a4:5d:54:91:af:5f:8f:83:4b:68:fa:e4:2d:
49:3e:55:45:0f:d8:d5:cf:6b:5d:9b:f5:c0:1c:7c:53:e8:27:
6e:0f:cf:c6:9b:37:ec:bd:6e:0c:12:0f:24:9a:fc:a7:c2:1a:
61:d9:ba:58:13:b1:3d:05:ff:63:a6:5a:0f:06:85:e1:13:bb:
4a:2f:36:5a:85:b2:5a:99:53:70:bd:98:51:fd:ed:ac:c6:f8:
16:ae:fa:1c:99:01:ee:34:40:59:bd:40:af:9e:8d:6f:76:95:
f7:23:54:61:87:54:22:8e:9f:1d:bd:52:69:b5:c7:c2:42:97:
5d:a9:80:0f:9f:19:80:ef:ed:fe:78:f3:33:35:d2:3b:5e:3b:
92:00:fe:01:a7:d7:30:69:8a:c0:81:0e:df:e2:b3:ab:b5:a6:
26:a8:4c:f5:16:30:e8:0b:01:54:a6:68:c7:8b:10:f7:06:98:
38:cd:9f:e9:54:52:9b:6b:d6:2f:17:97:29:21:a4:06:c3:7b:
71:81:c2:17:61:71:e5:53:ff:2c:34:39:45:22:3e:f0:7f:c4:
7e:92:6f:97:0e:d3:d1:08:80:e0:1b:1a:90:e1:6b:05:73:e9:
af:8a:62:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:13 2025 by rpki-client