Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a0bb50c-e1cd-3d48-b807-6cc29879ad72.roa
File: 4a0bb50c-e1cd-3d48-b807-6cc29879ad72.roa (raw, json)
Hash identifier: 3rt7lSzBMp85c9lHzEMXUFmTl4UGhjLnqVAhdHnrHVQ=
Subject key identifier: C0:07:79:04:B0:A0:42:14:48:47:4E:6B:D7:78:14:04:86:5B:08:B1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B379200400E7AB3E3282A6F0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a0bb50c-e1cd-3d48-b807-6cc29879ad72.roa
Signing time: Wed 25 Jan 2023 12:00:00 +0000
ROA not before: Wed 25 Jan 2023 12:00:00 +0000
ROA not after: Thu 02 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.197.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b3:79:20:04:00:e7:ab:3e:32:82:a6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 25 12:00:00 2023 GMT
Not After : Mar 2 05:00:00 2023 GMT
Subject: CN=bf91385a-8305-440d-a15c-0ffb4efa5d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:ed:18:ec:07:0d:89:b7:3d:1c:a6:4e:f1:
aa:e1:cf:33:3c:69:c0:f0:80:e6:ed:45:f1:c1:e6:
57:5c:bd:c0:ea:eb:b0:75:76:0f:90:a1:fc:7f:32:
88:90:bf:37:49:fc:be:7c:8a:ea:97:91:30:b9:91:
91:8a:b1:21:09:1e:5d:48:ee:84:59:80:14:16:d8:
b2:5e:c0:82:a4:f4:90:8a:b0:0b:6d:52:98:cc:e6:
89:13:9c:82:d9:0f:97:40:6b:82:38:fe:39:5c:52:
df:b7:bb:7d:b8:78:46:1b:83:f2:d7:bc:74:57:56:
09:2b:14:fb:c0:04:fc:65:b8:fe:02:92:4e:09:1b:
8e:1d:9b:80:5c:01:3d:a6:52:e3:ec:42:77:89:b6:
9b:f3:8e:1f:c1:9c:50:cb:9c:0c:7f:73:4f:3e:98:
2f:46:97:85:26:76:34:80:d4:6a:2a:74:00:bd:c9:
4e:be:cc:7d:c9:f7:2c:1f:42:19:76:75:7a:a6:62:
6a:51:5e:9d:9f:9e:04:0b:74:ca:aa:36:5f:f5:80:
b0:0b:11:1d:7b:85:51:70:18:35:61:d5:46:99:94:
6a:c0:d2:5e:45:91:0d:b5:88:6d:0c:1b:34:19:e2:
85:d5:28:56:d1:3a:22:4a:b0:88:ba:9b:c0:da:bb:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:07:79:04:B0:A0:42:14:48:47:4E:6B:D7:78:14:04:86:5B:08:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a0bb50c-e1cd-3d48-b807-6cc29879ad72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.197.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:2f:13:0a:86:80:d8:7c:b7:49:6e:cb:ff:ad:df:11:ba:1b:
1a:12:75:fe:e0:c1:6a:2c:a1:6d:2b:b9:5c:26:14:35:96:8c:
e0:f4:5e:77:68:8f:c2:40:ae:2f:64:53:ae:d5:cb:6a:2f:5b:
b1:db:e5:bb:0e:8c:89:5c:08:b0:63:fa:35:1d:92:bc:01:1e:
96:82:b8:77:89:b2:cb:47:c3:7d:96:98:30:f7:f4:5b:03:1d:
40:a0:d9:31:79:fb:de:09:cd:87:33:4a:03:f9:10:71:f2:c3:
f0:74:a7:8d:9f:d0:a1:fe:ae:10:a4:8a:88:d1:73:30:aa:eb:
8c:7c:7a:70:25:8f:e6:bb:71:7e:ad:f4:8b:81:fe:73:b1:47:
5e:0b:d5:38:06:34:f8:80:7e:23:a8:6c:ec:19:3a:ad:53:0e:
df:e0:04:01:15:34:2e:bb:ce:82:75:39:8f:e6:bc:9c:23:ac:
71:55:47:56:13:d8:18:fa:44:49:03:dd:fa:6b:84:db:8c:48:
62:ac:05:e1:38:b2:90:df:9f:d6:b8:cc:4a:f9:66:12:12:75:
af:7d:1b:bc:9b:ef:e0:96:89:bc:1a:1e:d8:f6:02:e1:cd:1c:
45:8a:86:33:9d:62:86:11:d7:de:5e:09:34:16:4a:f1:22:f3:
d8:f5:3d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:16:41 2025 by rpki-client