Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5686c04c-6b18-361a-8cd4-152928d9d8f6.roa
File: 5686c04c-6b18-361a-8cd4-152928d9d8f6.roa (raw, json)
Hash identifier: eIqcSHQBD4ARl8m+kyGL9TFq/BivQebH4jpXTmVsJTk=
Subject key identifier: 5C:FC:32:80:E7:05:53:3B:CF:2F:B5:28:AC:99:3F:6C:CF:5F:FA:10
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840A06579B1A0415F7B5618D300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5686c04c-6b18-361a-8cd4-152928d9d8f6.roa
Signing time: Wed 18 Jan 2023 12:00:00 +0000
ROA not before: Wed 18 Jan 2023 12:00:00 +0000
ROA not after: Thu 23 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.147.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:a0:65:79:b1:a0:41:5f:7b:56:18:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 18 12:00:00 2023 GMT
Not After : Feb 23 05:00:00 2023 GMT
Subject: CN=506cd874-5617-4c30-a3be-de2f46ba5e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f0:6f:7c:a5:cf:e2:87:06:54:b5:7d:1c:56:
58:8d:0c:5b:75:0d:f0:dc:b2:7b:4f:eb:a5:92:f3:
b1:4a:5e:16:86:6a:0e:f7:48:64:61:64:4a:c3:e4:
a6:7f:7f:4b:5a:94:09:cb:64:c8:70:f4:0b:31:f9:
02:14:52:5d:51:c0:0b:cb:f9:9f:43:64:1f:2b:27:
c1:5b:15:12:ce:6a:8e:d7:c3:55:2f:a2:7b:b1:53:
04:23:4a:4a:50:eb:ae:c3:77:7e:5b:1d:11:82:fa:
48:b3:91:c6:9d:4f:bc:a0:7c:9f:80:d0:71:66:6d:
43:db:02:d2:ae:31:51:47:53:85:c7:d0:75:32:e8:
97:1c:78:52:4d:75:88:4e:0e:d4:49:7f:aa:a1:cd:
7d:ef:31:56:c2:4b:df:59:a0:bc:35:f8:95:0a:0f:
0a:cd:18:01:64:17:a7:34:c4:05:f4:4a:77:3c:57:
6c:58:c9:2c:b6:e9:68:ca:f4:66:81:37:c0:f0:e1:
d0:5f:dc:d7:80:30:d1:78:52:c1:86:0c:7c:fd:b4:
b5:9e:26:7e:91:e5:5b:c5:42:f8:56:4a:cc:dd:58:
e7:59:f5:96:be:05:f0:2a:97:95:1e:05:5c:88:aa:
18:26:0f:a6:63:a5:d6:08:10:21:ab:bd:d9:cc:41:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FC:32:80:E7:05:53:3B:CF:2F:B5:28:AC:99:3F:6C:CF:5F:FA:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5686c04c-6b18-361a-8cd4-152928d9d8f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.147.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:ad:2e:23:c7:dc:8b:6d:dc:16:5e:dc:d0:00:76:d0:47:74:
5c:29:98:d9:54:03:b6:c6:45:e2:c8:b0:a1:f4:db:a7:b9:a4:
05:dd:38:be:6d:8b:37:28:44:52:f8:6b:1d:0f:82:2e:12:11:
ac:b0:43:ee:f2:1c:3a:72:00:3c:16:fa:64:85:27:7f:cd:54:
9c:32:d1:ba:2b:a6:13:0b:09:d7:38:b1:7a:81:b9:a8:ce:56:
cb:95:db:7b:4f:fb:e6:b8:1b:54:da:54:ca:46:ed:ba:c7:45:
7d:b6:b8:98:a0:41:92:d9:c3:4e:68:8d:90:1d:9c:0b:5e:6b:
9c:66:2f:de:96:d6:19:ea:6c:c5:b7:66:da:d8:9a:2c:7e:d9:
07:04:b2:46:32:d6:e9:27:06:ee:68:90:bd:8c:d5:1e:9a:0d:
c9:21:98:d9:82:71:76:aa:c4:2f:a4:c9:06:02:15:76:e2:33:
97:ec:f8:51:b6:77:9a:bb:20:32:62:92:ef:67:2d:a6:ff:70:
10:c2:1b:b1:d0:b7:e2:15:55:cf:2f:4f:ea:0f:b8:71:c5:d6:
40:53:01:a4:ea:30:ae:75:03:17:b7:33:23:31:b2:79:88:82:
a7:29:4e:ac:ef:60:60:b5:8e:3d:9c:41:48:c9:c8:b8:86:77:
4d:03:8c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:25 2025 by rpki-client