Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/544cef95-c974-3c43-b1ae-e7db2c9d1b11.roa
File: 544cef95-c974-3c43-b1ae-e7db2c9d1b11.roa (raw, json)
Hash identifier: NRnvGJdEL8YXigI1VjARvNEe00nVcNGTWxtd73AfuJ0=
Subject key identifier: 3E:87:5B:AA:92:79:79:5F:88:17:07:53:2D:22:91:98:F2:10:F3:CD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840C386670A7646ECF459C5B978
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/544cef95-c974-3c43-b1ae-e7db2c9d1b11.roa
Signing time: Tue 31 Jan 2023 12:00:00 +0000
ROA not before: Tue 31 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.144.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c3:86:67:0a:76:46:ec:f4:59:c5:b9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 31 12:00:00 2023 GMT
Not After : Mar 8 05:00:00 2023 GMT
Subject: CN=0190712a-1c9b-4a77-b016-0b67527a9f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ba:57:fb:28:27:51:8b:34:0c:f8:cb:aa:37:
07:f9:1b:3c:60:7b:42:29:45:90:1c:26:7d:6a:10:
c1:88:96:57:cc:74:07:b3:27:1a:08:78:8f:63:73:
ec:b5:b7:81:a4:dc:39:77:fa:ac:3a:fa:55:8b:82:
3e:2d:08:a4:19:e9:dc:e8:ae:c6:20:03:dc:30:a9:
42:ca:29:8b:d6:0e:f2:cc:8f:49:0d:f7:0f:d8:e7:
d5:83:1a:a4:d0:2a:d2:29:a8:dc:f3:18:55:40:41:
6e:a2:d2:c7:c0:03:b8:d1:5e:e8:dc:f3:98:02:5f:
3d:84:37:4c:6c:a8:36:23:1a:50:bd:40:2c:84:80:
b2:57:62:16:bc:e6:c6:4a:52:f7:28:07:45:2a:aa:
c5:5f:a4:64:da:04:5b:c6:72:ec:a3:5e:5f:15:ba:
0c:62:a1:c4:87:5b:b1:8e:02:ef:14:30:c6:09:d0:
f4:8c:77:f9:2c:61:67:53:9c:49:17:f6:39:e5:1e:
e3:59:1e:e0:c0:d9:d4:ba:45:f1:f3:7e:06:5c:f2:
e4:36:05:c0:84:37:ee:4f:29:6d:08:84:35:bf:b6:
32:5f:09:81:b5:cb:51:23:4d:3c:9a:68:5a:64:52:
36:2d:5c:d4:7c:a7:e5:ec:42:53:5b:e1:12:5e:c0:
87:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:87:5B:AA:92:79:79:5F:88:17:07:53:2D:22:91:98:F2:10:F3:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/544cef95-c974-3c43-b1ae-e7db2c9d1b11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.144.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:4a:22:70:65:fc:7d:4b:31:b7:a0:fd:73:5f:24:ba:4d:1f:
e5:1c:28:94:79:12:ce:91:9e:00:3b:84:38:9f:2c:9a:96:73:
cc:a4:7d:2d:fd:25:b4:a1:40:a0:d6:bf:d9:a8:de:55:46:f5:
f9:1c:ef:bd:53:d7:98:fc:05:f6:4a:5b:c8:45:a1:23:c8:ce:
9e:b9:5a:f0:a2:9d:98:3b:17:e9:b5:3a:f0:be:71:34:93:20:
91:76:85:f6:a2:7c:02:28:3d:ae:e9:ad:21:01:37:0c:8d:3f:
38:ca:36:16:c4:23:31:d3:6a:fe:93:ab:79:9f:e9:df:cf:67:
56:01:3e:19:2c:06:9e:b1:bc:51:11:ca:60:af:6e:73:05:b5:
c6:fc:7b:5c:f9:2d:26:be:dd:94:04:48:89:97:4b:2e:83:cb:
21:6a:d5:26:a8:aa:92:da:2a:21:9d:03:9e:cf:69:81:fe:8e:
06:b0:67:37:00:12:18:82:7c:f7:ab:3f:bc:c1:ad:0f:6f:96:
c5:e0:87:32:d0:b5:24:57:86:cc:da:30:91:9a:0b:f4:1f:05:
39:d6:f3:36:d4:10:3b:75:a8:99:c0:eb:29:53:dd:d7:66:b7:
ce:1c:8f:b0:96:88:bf:1f:ed:bb:44:8a:7b:02:be:5f:b1:e1:
6a:73:3f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:55 2025 by rpki-client