Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23646a04-5b5e-301e-a455-f3bf5d8d5386.roa
File: 23646a04-5b5e-301e-a455-f3bf5d8d5386.roa (raw, json)
Hash identifier: iFmhTkjdpJ6Z/JMU+Mb+k9hVzId15ujnMY8ww/F/CCM=
Subject key identifier: A4:DA:32:F7:0C:DB:47:A9:0A:17:9C:0B:6B:A5:45:B7:7D:E1:38:A1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E8FEA02ECDCE0997AAC2B6220
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23646a04-5b5e-301e-a455-f3bf5d8d5386.roa
Signing time: Wed 13 Jul 2022 12:00:00 +0000
ROA not before: Wed 13 Jul 2022 12:00:00 +0000
ROA not after: Thu 18 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.161.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:8f:ea:02:ec:dc:e0:99:7a:ac:2b:62:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 13 12:00:00 2022 GMT
Not After : Aug 18 04:00:00 2022 GMT
Subject: CN=019b13b3-3b29-4de4-84b2-0bbe39716a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ff:77:5b:af:32:88:5f:01:ec:e4:88:c8:35:
cb:ce:19:2a:a9:aa:3b:7d:d5:ca:eb:4f:cc:65:fc:
ed:26:b4:f7:38:6a:6c:9e:42:e3:2b:d9:93:f2:19:
36:b0:ba:50:42:cf:b1:e4:b4:45:0c:ae:40:01:4e:
b3:af:76:a0:48:93:ff:76:b1:01:ad:61:29:90:4c:
93:5c:d7:e3:53:51:e3:62:c2:6a:54:fc:0c:bd:84:
11:e7:96:35:32:e2:f1:1d:28:65:d1:47:40:ee:12:
40:ff:34:07:c1:47:87:37:35:b7:dd:53:cd:2b:f8:
aa:b8:3f:8b:3e:64:a4:16:cc:7a:97:e5:3d:eb:99:
b4:e0:53:a2:7c:0e:ba:5d:a7:85:7c:6e:5f:a2:a1:
ed:48:17:68:30:41:a1:2d:6c:28:9b:b0:6e:e9:15:
f1:57:09:d5:d0:4d:cd:6e:cb:e2:f2:cd:86:ca:98:
a3:29:d4:3d:9c:81:17:93:c1:2c:74:f3:e2:f0:fb:
6c:00:5e:52:38:fe:19:bf:ad:5d:96:b0:42:8e:9f:
7b:19:3f:c8:80:4b:9a:47:73:7d:8c:88:34:ef:c9:
77:6a:9d:9d:1e:80:d2:1e:75:34:29:66:2c:e0:af:
a2:30:fa:a4:08:07:86:a9:01:e7:73:9e:dd:23:26:
a5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DA:32:F7:0C:DB:47:A9:0A:17:9C:0B:6B:A5:45:B7:7D:E1:38:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23646a04-5b5e-301e-a455-f3bf5d8d5386.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.161.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:ad:b8:bc:5d:6e:c3:ef:d4:c7:19:8f:5b:a3:38:a5:93:b9:
88:fa:cd:d2:31:8b:07:ee:f8:e3:13:fb:fc:73:ca:9a:ab:04:
16:d5:2d:6f:97:5d:38:3d:eb:dd:ce:2c:60:b9:05:16:5a:58:
17:b5:a5:b4:80:4c:df:aa:ff:59:56:98:f3:93:c4:76:4d:2b:
bd:af:eb:da:73:49:0a:fe:d9:fd:3b:47:14:cb:d7:66:61:42:
d5:72:2c:72:40:32:98:3f:20:c8:5f:2b:67:a7:bb:85:a0:c2:
50:5f:aa:e0:29:4a:33:d8:1f:4c:9f:11:7e:84:60:e7:cc:4d:
d8:87:0d:d9:53:e2:f5:2d:55:16:f6:e3:48:3a:da:6b:01:2b:
44:24:4a:f5:e6:bc:f7:97:7f:a1:83:a5:80:6d:a0:44:28:73:
3a:83:2d:09:83:48:29:4c:ef:d2:71:69:03:d1:f1:f4:bf:a2:
3e:78:62:db:05:ac:56:9b:94:6b:d0:3c:7c:42:4e:10:7a:58:
55:e2:4c:85:b7:30:48:0c:1e:63:6b:6c:94:33:8c:04:19:1f:
86:50:a0:26:eb:2e:cc:e0:c9:c9:bd:82:ad:e5:8f:64:1a:21:
b4:de:e9:a5:e1:da:a2:f9:c5:12:0c:24:94:0d:3c:6a:f8:b9:
f6:b1:5a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:15:42 2025 by rpki-client