Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3dbbf9a6-2418-3410-86a9-f124018a5734.roa
File: 3dbbf9a6-2418-3410-86a9-f124018a5734.roa (raw, json)
Hash identifier: jPxid5p8TFArK1V/TCvyK0exxD/TwX8GrPu7w/WprNI=
Subject key identifier: A3:BB:C9:D4:BA:90:D9:53:C0:BF:92:F9:B8:49:69:41:90:F6:3E:44
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858405223F38316F7186DF2F86800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3dbbf9a6-2418-3410-86a9-f124018a5734.roa
Signing time: Wed 21 Dec 2022 12:00:00 +0000
ROA not before: Wed 21 Dec 2022 12:00:00 +0000
ROA not after: Thu 26 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.141.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:52:23:f3:83:16:f7:18:6d:f2:f8:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 21 12:00:00 2022 GMT
Not After : Jan 26 05:00:00 2023 GMT
Subject: CN=98f2085e-bc06-4752-a21e-b945b09b1cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:0d:25:82:b7:96:92:21:9a:27:09:fd:c8:
ed:d3:36:31:7d:f3:0b:10:87:27:7c:2b:5c:6c:8f:
05:3c:1d:95:03:c0:08:a6:a6:68:96:c3:ca:dc:a8:
b3:e8:f0:07:5e:61:21:da:5f:1f:44:d1:d8:ac:e1:
92:d1:be:53:e0:54:7a:52:c9:00:f6:0e:83:7d:06:
65:97:f7:86:4a:60:a3:19:b7:42:0d:90:0e:3b:e2:
09:cb:ab:e2:94:6f:8b:50:7f:a4:4e:31:f0:a9:2f:
8c:e7:fd:a3:20:88:6d:5c:fe:9f:b7:87:cb:0b:c9:
0b:27:43:ae:06:f6:75:26:58:1d:be:37:0b:e9:fe:
a2:d2:a4:a3:5f:c4:d4:ca:f6:f5:d8:2f:63:4b:2e:
c2:61:1d:e7:8d:fb:22:d9:ef:2a:1f:f2:54:5f:2e:
61:8c:5e:a5:8c:b4:45:17:4b:55:b9:ef:ed:f2:50:
0d:1e:3d:d2:36:a3:0f:c7:c3:16:8b:e9:23:f1:af:
34:29:7f:25:ca:83:b1:4b:c2:12:bb:78:e7:b8:69:
66:be:3e:47:ba:36:63:e2:3f:90:b1:0d:fa:ec:ea:
11:c5:08:a1:2e:6c:7e:be:3c:dc:ba:b2:f2:f3:04:
11:6e:a6:14:80:72:38:c0:a4:71:00:b6:80:2e:a3:
9b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BB:C9:D4:BA:90:D9:53:C0:BF:92:F9:B8:49:69:41:90:F6:3E:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3dbbf9a6-2418-3410-86a9-f124018a5734.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.141.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:12:13:56:29:b6:32:32:ce:1e:52:6b:96:f2:2e:95:88:48:
03:c9:d7:1a:51:8e:04:69:3b:97:35:f8:7a:5f:78:fa:ab:7b:
93:fa:2b:e1:2d:46:1d:b9:f5:c6:6e:bf:60:38:70:4c:9c:2e:
97:7c:8b:5d:f6:1b:79:6f:44:ba:16:a4:c4:94:ee:54:91:fc:
45:9f:b2:fd:fc:28:d7:3a:73:18:05:51:c7:66:48:f4:87:dc:
13:fa:d9:f0:2e:fa:f8:c3:13:e6:e3:d0:a6:f8:d5:55:48:0d:
f7:ee:3d:4f:e6:d4:16:6d:1d:09:0c:a2:f6:08:b3:7d:63:37:
20:55:dc:d8:25:20:19:80:d9:a7:12:cb:90:6c:94:71:d3:9f:
6f:7f:02:2d:51:e2:c6:37:ff:ce:8a:e8:a4:aa:26:b5:80:cc:
f0:5d:a2:b1:03:59:d9:62:4a:60:f1:4f:22:78:59:bc:70:6d:
be:51:ed:b5:e3:bb:1a:26:72:6b:c3:8f:bc:47:83:2d:81:fe:
7b:da:df:66:b6:80:31:8e:34:9a:e2:9a:58:b1:80:cf:6e:f3:
1c:de:89:44:33:33:5f:02:f9:fb:ed:63:d2:a1:b9:86:29:a2:
60:3b:9a:2f:89:4f:13:83:4f:cd:0c:07:79:10:34:9b:56:a9:
cb:72:67:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:58:21 2025 by rpki-client