Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ce27ef1-d73f-3636-ac90-e45caf96b2fd.roa
File: 4ce27ef1-d73f-3636-ac90-e45caf96b2fd.roa (raw, json)
Hash identifier: 98T6aTnxnd1durKl2S5XKMrGXn9Bg1tjaFjKZFhCEBw=
Subject key identifier: E5:E2:F2:85:E8:B7:AD:92:8E:91:29:1F:2C:92:92:C3:B3:A0:E6:51
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409C5A99B28F368A3147688A10
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ce27ef1-d73f-3636-ac90-e45caf96b2fd.roa
Signing time: Tue 17 Jan 2023 12:00:00 +0000
ROA not before: Tue 17 Jan 2023 12:00:00 +0000
ROA not after: Wed 22 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.153.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9c:5a:99:b2:8f:36:8a:31:47:68:8a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 17 12:00:00 2023 GMT
Not After : Feb 22 05:00:00 2023 GMT
Subject: CN=68c789b9-7deb-4f7d-8cb2-7c804b5d0c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:6a:3d:2c:8d:26:d9:d8:ae:96:7a:ee:ba:
9c:cd:33:d9:88:69:cb:2d:92:c9:e9:c4:cd:67:9c:
07:af:90:50:6d:d5:67:ea:e5:8f:54:e4:f3:e5:5d:
ac:3a:88:7c:9a:5a:82:d6:2d:cd:05:d6:69:82:8b:
14:f4:92:82:26:17:f6:fb:42:bd:30:2d:65:e1:86:
c2:73:3b:68:be:59:29:ff:00:76:62:72:cc:19:10:
35:5d:72:d6:d8:3b:b7:5d:82:0a:23:46:54:f5:97:
8c:4a:e6:85:1f:a1:ba:5d:4f:9e:c2:ed:a3:48:19:
e1:dd:cb:d1:ec:f2:3f:6a:7e:bd:13:98:5c:14:8b:
fd:bd:94:44:96:c3:49:9c:c7:e7:90:3b:5a:65:89:
b0:82:53:b0:da:ca:fb:b5:59:7c:76:47:63:01:05:
be:ed:3c:dd:a1:37:6b:28:c3:7f:86:de:4e:81:e9:
11:9e:78:7c:95:8b:78:73:a5:38:f8:db:23:51:d7:
2f:bd:10:25:17:16:80:fd:83:f1:0d:e8:8e:99:28:
10:2b:91:0c:6c:ad:d8:53:82:cd:c9:96:85:67:3c:
8c:bc:3a:30:19:41:c8:b4:f0:c2:35:48:3a:9b:de:
d9:b7:e7:c6:2f:10:b1:38:ca:24:d9:7c:1e:ee:d1:
79:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E2:F2:85:E8:B7:AD:92:8E:91:29:1F:2C:92:92:C3:B3:A0:E6:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ce27ef1-d73f-3636-ac90-e45caf96b2fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.153.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:40:9c:6d:04:f0:83:b3:98:57:82:bf:ae:70:ae:e4:00:27:
e2:22:b4:25:fd:c8:55:6f:39:4f:26:e9:72:8d:0f:db:c5:03:
2f:48:6e:bf:5a:19:18:fd:12:b0:53:13:9d:2b:f6:0a:47:69:
7d:9d:2f:82:34:64:09:76:55:a1:e1:7f:7c:77:0e:4a:ff:e3:
7d:13:46:8a:3f:66:64:46:77:cd:90:87:94:18:32:e0:0e:be:
ba:f5:78:60:25:f8:8e:db:5e:84:1f:ee:b4:5d:a7:f4:f8:5e:
ad:12:bf:10:81:63:c2:58:3c:1e:fb:91:ce:14:04:c2:6c:c6:
22:51:15:cf:45:7a:4b:53:20:29:8e:e9:b8:c1:3e:2a:a7:0c:
b6:76:b5:c5:c2:e5:29:75:5d:5d:16:2f:42:59:94:91:eb:09:
0e:ba:74:8b:ec:8a:ac:83:ec:18:38:bb:bf:c9:15:4d:f6:fd:
18:a1:e6:7b:13:a9:4c:0a:c5:7c:d5:15:2d:c6:88:65:bf:b3:
7f:68:1f:4d:01:c7:55:13:74:c8:d7:cd:5b:ee:1e:43:71:03:
e6:61:1b:48:5c:6d:e1:f7:ed:ba:ff:d7:5c:15:55:51:8d:c2:
b2:e1:0d:06:90:de:c9:bc:ed:83:62:08:8e:5e:d0:1b:5a:0c:
bf:58:21:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:49:16 2025 by rpki-client