Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5bfa7adb-4ade-304f-be36-8b26f0284828.roa
File: 5bfa7adb-4ade-304f-be36-8b26f0284828.roa (raw, json)
Hash identifier: hH6uq/rQxPe3ZokWNhBxd0QsZe7gHZU5x7iahSVk0ps=
Subject key identifier: F5:E9:34:A6:4E:9A:88:04:3B:5C:3B:A1:AD:19:2B:C7:D2:CE:06:7C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858408C36E0306AABBC2CE838AC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5bfa7adb-4ade-304f-be36-8b26f0284828.roa
Signing time: Wed 11 Jan 2023 12:00:00 +0000
ROA not before: Wed 11 Jan 2023 12:00:00 +0000
ROA not after: Thu 16 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.198.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8c:36:e0:30:6a:ab:bc:2c:e8:38:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 11 12:00:00 2023 GMT
Not After : Feb 16 05:00:00 2023 GMT
Subject: CN=c29621a3-0f2c-45d6-a7c9-c31869361efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ee:ec:ba:56:94:41:eb:a9:66:f1:ae:e4:8f:
6d:34:4d:6a:90:6e:47:f7:5c:51:ae:ad:f9:77:5f:
15:5d:18:e0:1b:1f:74:2b:68:66:b6:ff:c3:50:0d:
94:67:8e:76:49:36:62:69:af:cf:cd:95:02:19:96:
2d:33:9d:dd:f9:f7:f2:22:11:88:e9:18:35:78:ef:
80:05:df:52:15:1c:aa:c7:df:bb:69:67:07:2b:dc:
15:d7:5a:6c:96:89:9c:64:ca:06:54:dc:26:0e:52:
7d:31:7c:c6:96:f2:7e:50:7d:b0:21:15:0d:8e:05:
6c:59:b9:15:9d:3c:4f:39:fd:37:ca:40:20:14:0f:
32:df:9c:83:c6:82:80:24:f9:bb:eb:23:5c:6f:58:
a1:99:3e:c5:60:20:41:92:b4:d2:9f:7c:c8:e3:b3:
6d:00:39:7c:3c:ee:5a:b0:41:31:c6:92:67:2b:5e:
b1:c6:eb:b2:b2:70:2e:ec:55:e8:ea:a6:e1:d7:f7:
ff:92:76:f1:59:1f:69:d6:28:56:26:28:10:cc:32:
8c:ad:d5:14:ea:af:93:75:61:69:92:b8:ce:9d:93:
34:ad:50:ec:d8:89:37:c5:58:20:7d:6e:38:18:d3:
3b:57:e0:f2:3e:99:3e:cc:4a:b7:93:e3:dc:b0:0a:
99:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E9:34:A6:4E:9A:88:04:3B:5C:3B:A1:AD:19:2B:C7:D2:CE:06:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5bfa7adb-4ade-304f-be36-8b26f0284828.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.198.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:d3:34:7f:99:5a:83:be:1d:a5:f7:a9:d6:f5:60:b6:29:d0:
14:ce:1a:15:83:6f:93:62:1d:81:1c:91:2d:86:2f:d7:f7:8d:
33:7d:4f:65:29:0e:ff:21:cb:a2:e2:76:4e:0c:41:f3:47:e6:
5b:8b:d4:8b:6f:4e:a0:33:21:e0:c8:e6:4d:1b:f3:2e:9f:45:
d4:57:64:e8:81:83:64:ac:0f:5d:80:de:00:6f:01:1c:66:5a:
98:9b:f9:1e:79:7c:78:5d:30:a4:50:85:90:2d:3f:41:e9:70:
a5:17:b5:c8:7c:77:43:a4:8e:a5:ef:64:96:bc:eb:10:bc:aa:
9c:76:ad:a8:09:00:4a:28:62:0e:3c:65:bb:f3:13:a0:13:b3:
d3:00:c4:c2:df:c3:f4:64:cb:65:e1:11:6f:f6:75:c2:b6:d1:
aa:bd:ea:56:94:13:89:14:27:3c:18:ba:a6:36:09:4e:19:56:
a3:d2:e1:29:8b:ad:c3:54:cb:6b:9b:96:c2:01:e2:7c:02:cc:
9f:cc:af:df:41:12:4e:a6:4b:c1:66:9f:b0:9e:21:a0:91:e0:
ae:7d:bf:77:fb:90:98:27:e0:b8:1f:64:96:30:df:a2:24:42:
f3:12:e1:32:ec:35:91:21:64:3c:43:f6:ce:ed:1f:ca:71:00:
25:0a:f1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:30 2025 by rpki-client