Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6644c90e-aa81-3f62-8e27-15337d9d3835.roa
File: 6644c90e-aa81-3f62-8e27-15337d9d3835.roa (raw, json)
Hash identifier: CZYLRs98SqGjE0WT0ve3630DWWafco21o0YFgTepj+I=
Subject key identifier: B5:24:D2:09:2E:E0:C4:88:5A:BE:0A:A0:8C:9D:1B:F9:9A:32:28:34
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584075BC273C8AB039243F892F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6644c90e-aa81-3f62-8e27-15337d9d3835.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.170.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:75:bc:27:3c:8a:b0:39:24:3f:89:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Feb 8 05:00:00 2023 GMT
Subject: CN=fc8afb86-bfbc-4e2e-8455-5fd32f1e0938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:70:a9:4f:e3:8e:a3:9d:e7:12:a5:a9:b7:
ba:78:f3:53:1b:5d:09:8a:1e:27:95:0f:68:71:b7:
26:4b:79:8e:42:66:0b:15:27:ff:0c:bb:b7:96:fe:
e4:2f:9e:66:70:6d:0e:c8:d7:eb:0f:ea:37:35:64:
73:80:d6:4e:d0:84:93:68:e0:10:1b:d6:dc:2b:ba:
53:44:f3:90:ee:47:5d:5b:0f:b6:03:31:32:e1:1a:
e7:a0:a8:e5:3c:14:70:9d:2b:a9:c6:63:a0:da:d4:
36:d2:20:13:fb:24:46:20:27:02:d0:ec:22:62:32:
93:f5:c2:23:2f:6c:c9:65:a0:04:2d:8f:e3:ab:07:
ec:71:3c:ba:6c:c3:c1:5f:33:e2:39:bd:7e:e9:44:
c9:9d:54:19:c4:66:82:a2:6c:9b:cc:66:f1:fd:52:
80:ad:1a:10:01:60:0d:b4:bd:8e:d8:43:49:1f:f8:
82:46:13:07:1e:05:b5:19:f9:79:5b:7c:46:d8:1e:
2f:00:29:c6:0a:b3:5b:74:6c:01:22:56:6f:81:2d:
41:92:7b:cf:62:cb:df:69:6a:cc:0b:1e:8d:73:45:
78:88:fd:e4:34:b5:34:5a:07:ca:a6:21:56:20:1c:
11:5c:73:bd:c4:7f:e8:81:a8:a2:e2:82:df:5b:5f:
59:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:24:D2:09:2E:E0:C4:88:5A:BE:0A:A0:8C:9D:1B:F9:9A:32:28:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6644c90e-aa81-3f62-8e27-15337d9d3835.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.170.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:0a:36:b2:3c:67:a9:70:c6:63:ff:88:af:6d:7e:0e:31:90:
0d:d6:44:4c:0d:bb:b0:b6:94:f0:4c:9f:19:57:ea:40:f5:e9:
db:2c:01:c1:01:da:e7:58:fa:ab:c7:8d:2e:fc:64:65:ca:3e:
61:a6:a7:fa:9f:70:27:67:c1:2f:4d:cd:26:89:be:34:f5:62:
32:48:59:1b:a6:58:81:09:65:45:41:86:46:9e:d7:6e:cb:e6:
d5:ef:7a:1c:23:89:67:b3:83:2d:af:57:a5:bd:2f:51:72:f5:
8e:5c:78:44:14:d8:99:1c:55:63:cd:c3:33:26:51:99:15:53:
5c:3d:25:e1:b1:21:1f:25:b8:32:69:b4:8a:8a:74:b7:43:fe:
87:74:d9:ca:62:79:8c:8f:39:c3:61:c3:a7:2c:35:b4:51:4d:
c1:ee:11:30:e9:c6:e9:d1:27:6d:25:26:1c:9f:49:da:0f:94:
63:63:2d:86:3e:5d:0c:83:87:01:85:80:5c:76:7c:ce:af:82:
26:23:07:0b:94:04:5e:ee:e0:32:3b:79:15:9b:2d:6f:38:de:
b0:ae:37:1f:b9:aa:83:b3:d8:91:66:7a:fa:16:24:1a:3c:ad:
46:50:a9:9d:f8:cb:21:b0:a9:45:f6:8b:9f:cd:ce:23:08:aa:
51:88:15:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:22:14 2025 by rpki-client