Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/395dabf9-638c-3b62-a6e5-e86f9cc704a6.roa
File: 395dabf9-638c-3b62-a6e5-e86f9cc704a6.roa (raw, json)
Hash identifier: /MseGzwH0UGUy6oVCjHdEJDwLg/TUsaXqGrBdYNqPss=
Subject key identifier: A1:16:65:B4:8D:24:CF:E5:B5:78:4C:56:E0:3E:0D:D4:0A:9E:83:27
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858408C637BB962368624C02BA120
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/395dabf9-638c-3b62-a6e5-e86f9cc704a6.roa
Signing time: Wed 11 Jan 2023 12:00:00 +0000
ROA not before: Wed 11 Jan 2023 12:00:00 +0000
ROA not after: Thu 16 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.197.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8c:63:7b:b9:62:36:86:24:c0:2b:a1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 11 12:00:00 2023 GMT
Not After : Feb 16 05:00:00 2023 GMT
Subject: CN=3741d882-3fcb-4f2c-b928-cad692066f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:44:56:7c:b9:13:bb:2f:57:52:4d:74:a2:
5b:1b:03:09:f8:e1:6d:12:78:45:1c:0e:49:37:73:
a1:f8:59:28:7a:60:1e:13:09:42:28:c7:c7:6d:aa:
57:e7:c2:2b:53:7d:af:3f:80:70:36:c1:f6:3b:22:
6b:68:7f:bc:ff:9b:cc:17:40:a9:39:20:85:94:75:
c5:63:5f:55:05:37:d2:a6:11:cc:c4:e4:59:a2:41:
18:cf:84:f7:18:86:3c:b2:84:ca:7a:e7:c5:a7:88:
64:0a:26:ba:ed:91:e2:0f:b5:8e:9b:17:c9:4c:87:
ce:36:81:fb:b5:5b:42:a1:56:7c:06:97:32:2d:07:
62:a3:cf:14:b2:3d:2e:b9:c4:f7:59:07:e3:0e:26:
15:5b:fd:1f:a1:b3:b9:91:f7:b9:f0:85:3a:c2:1c:
e1:29:28:d5:a6:06:b7:0f:59:53:42:9f:23:20:06:
fc:a9:ad:8e:57:92:75:c4:17:4d:86:0c:6f:a4:13:
73:d1:c6:52:8f:dd:46:56:9b:1b:87:5e:06:fd:18:
62:21:7c:af:93:24:bd:5c:9f:29:ff:d9:cd:85:8c:
89:d5:d0:bd:be:22:0e:03:c3:bb:08:db:15:19:af:
c3:a7:82:6b:5c:11:0b:5f:02:7f:7a:db:ae:05:a7:
ed:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:16:65:B4:8D:24:CF:E5:B5:78:4C:56:E0:3E:0D:D4:0A:9E:83:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/395dabf9-638c-3b62-a6e5-e86f9cc704a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.197.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:db:c0:4c:0c:56:99:03:6f:16:bf:f7:e6:56:d4:f3:3d:ed:
84:4b:3c:5c:b8:30:f9:03:d8:e4:71:02:05:2e:89:1d:68:10:
b8:28:e8:99:7b:19:f2:e3:01:37:f4:41:72:2f:23:46:40:ba:
99:b9:cb:9a:ff:be:87:0d:1a:31:86:f1:4d:bf:72:df:a7:f4:
79:7f:44:ad:0d:73:67:43:c1:90:1b:34:f1:4d:72:08:61:ee:
14:c4:63:b0:6f:dc:f0:fd:e9:01:c2:af:16:48:ce:65:69:bd:
7e:1d:8d:d5:ce:0c:dd:9b:60:ca:09:3f:71:9e:c1:b6:0e:cf:
b2:0f:3c:06:b3:97:f5:a1:77:3a:58:02:bc:0a:f2:6a:f5:c5:
38:8f:a1:8b:92:e8:cd:50:8b:a4:c3:57:63:af:87:cd:50:11:
bf:39:5f:09:c3:01:42:7b:9d:11:1f:8f:51:3a:27:b8:f5:db:
15:65:e1:f5:66:10:b0:f9:3a:9a:88:a6:47:38:e0:3a:84:d1:
94:5c:c1:79:0f:37:1d:79:c2:c5:d1:57:f0:c6:c3:12:57:1a:
c0:74:19:5e:82:25:65:f7:af:14:82:ee:cd:f5:58:9a:39:c4:
76:f7:41:58:13:34:3a:22:34:0b:a3:42:7b:d2:dc:b4:cb:b8:
3e:19:5d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:18:52 2025 by rpki-client