Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c9d87ac-501b-351c-813c-9b9187ae00c1.roa
File: 4c9d87ac-501b-351c-813c-9b9187ae00c1.roa (raw, json)
Hash identifier: 6+Wzp9C8LdGNMEf0qFhSkh9a0NyfHyTkh5VEB8sJgaI=
Subject key identifier: F1:A3:6E:F5:D9:4B:66:D5:20:43:70:BE:4C:A3:99:F7:75:0F:62:11
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F176E045DDBDA83204A639B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c9d87ac-501b-351c-813c-9b9187ae00c1.roa
Signing time: Tue 30 Aug 2022 12:00:00 +0000
ROA not before: Tue 30 Aug 2022 12:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.170.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:17:6e:04:5d:db:da:83:20:4a:63:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 30 12:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=dc291617-30b6-4c25-9e9d-109b6742c8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:f8:b1:be:9e:bd:34:1c:46:8e:c1:37:ad:
37:d5:6e:1c:3c:67:2f:50:2d:f0:5c:c6:66:d2:22:
fe:7f:be:68:b0:9e:bc:ff:d8:76:8f:ed:a7:ee:8b:
20:ed:ba:d1:59:4a:27:27:a9:a0:62:5f:fe:d4:ab:
49:4f:c9:58:24:2f:33:4e:78:20:67:9e:ec:41:7c:
a2:b6:da:64:35:2c:42:87:88:ce:18:79:34:11:07:
2f:8d:ed:11:c1:de:0d:82:10:51:07:cc:c7:42:79:
e3:a4:0c:ed:5b:63:8b:1e:71:cb:83:00:77:a4:81:
7b:6d:1d:0e:ab:79:c7:21:9f:70:9f:53:77:32:59:
bc:5d:89:7e:92:b9:3b:67:06:c2:3e:fa:18:11:15:
49:4a:20:c1:53:f6:d7:2d:82:34:b4:fc:08:91:7c:
a3:1f:17:51:9e:0f:e5:23:70:97:9c:f4:b4:a0:ba:
e5:26:30:5d:de:3c:5e:4d:a3:91:e8:54:a7:ee:8a:
ce:e0:5f:a0:8b:11:15:62:a2:99:fd:7e:99:f4:ab:
39:0e:0c:f9:ff:6e:7b:32:1d:e7:7d:c2:6e:75:39:
a3:59:50:b4:f5:7d:34:72:9f:5e:08:7e:df:41:68:
58:84:0e:0c:77:16:7f:eb:9c:4d:3a:c1:5a:31:f4:
35:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A3:6E:F5:D9:4B:66:D5:20:43:70:BE:4C:A3:99:F7:75:0F:62:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c9d87ac-501b-351c-813c-9b9187ae00c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.170.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:73:bb:68:77:06:46:9d:19:92:5d:33:1f:85:8a:41:e0:cd:
8b:f5:d2:b0:aa:3f:82:df:9e:28:ed:fd:7f:c5:b0:20:c8:6f:
51:2d:6b:db:d6:0b:35:11:b0:0c:0c:77:87:fa:8d:93:01:54:
4b:d6:c9:11:41:4c:ff:e2:2c:9a:12:c5:86:cc:74:e6:f8:32:
81:05:07:57:77:c8:6d:69:4f:c1:e9:56:c7:85:58:60:ed:ca:
5c:d1:c8:3e:52:4f:1a:29:e3:81:86:31:3e:90:18:e4:e5:f8:
16:d2:fb:8a:4b:1e:ed:6d:93:4b:be:65:1b:e0:6a:26:3e:4a:
f1:e9:90:ed:ab:de:d8:b8:78:2e:74:76:49:9a:56:01:c7:8b:
e4:95:ec:90:c5:12:86:b3:03:c7:a9:38:a9:64:06:5a:a8:94:
24:3a:bd:bf:0b:27:e9:ed:d0:4a:84:1f:39:8f:5a:10:39:d9:
b2:09:8a:fd:61:bc:ca:5b:4b:b2:ab:ce:6d:88:5c:ad:6d:bd:
59:f4:ff:9e:a3:87:4f:ae:47:30:2b:a2:47:a0:fd:db:dc:9c:
ad:20:07:fa:48:bb:78:b0:a6:a5:b4:8e:31:ef:c7:19:b0:e4:
93:61:fa:8b:12:03:2c:ae:fb:a9:73:25:e3:81:e7:0f:e3:0d:
b8:a3:4e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:49:23 2025 by rpki-client