Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6e0c7e4b-b9e5-3055-b991-6d3e9ccb17c8.roa
File: 6e0c7e4b-b9e5-3055-b991-6d3e9ccb17c8.roa (raw, json)
Hash identifier: Cm8EsVYSczJIHaB3OkTyaNlvG0PvYLTTlXNlD+UrA4Y=
Subject key identifier: 8C:89:A8:C7:51:FC:87:76:80:98:57:11:56:BE:5B:4C:0A:27:57:4A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858407940F13DDD1140DABC72BF00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6e0c7e4b-b9e5-3055-b991-6d3e9ccb17c8.roa
Signing time: Wed 04 Jan 2023 12:00:00 +0000
ROA not before: Wed 04 Jan 2023 12:00:00 +0000
ROA not after: Thu 09 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.213.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:79:40:f1:3d:dd:11:40:da:bc:72:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 4 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2023 GMT
Subject: CN=f02f1a80-ad77-47b3-b663-d6beddb7b08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:bb:82:63:12:87:1c:c2:bb:b9:41:84:7e:
bc:5d:b8:f0:4c:37:50:e2:3a:6a:7d:7e:65:81:ab:
9d:36:2a:2f:ef:fa:2a:1e:64:99:0e:8e:ca:97:a4:
92:08:88:ed:72:9b:7d:93:e7:9c:65:68:52:0e:85:
1d:5e:e9:3c:48:fe:b7:4e:35:20:46:63:92:51:f2:
f9:4d:15:b6:f0:9a:4e:ad:c4:6f:e3:20:68:f2:8c:
24:85:1c:5d:1d:ef:28:7e:6a:70:1e:64:31:23:3a:
a5:a0:51:97:89:c6:a4:0a:06:c9:0d:fb:fe:a2:75:
35:e6:2c:cc:3f:25:07:90:06:eb:97:e8:17:8a:50:
77:51:c8:aa:fb:55:a5:32:40:7f:00:bf:11:28:7a:
8b:9b:6f:11:9e:25:e9:0d:b4:d8:16:2d:ee:87:b2:
78:cd:3a:21:10:e2:ca:7e:52:83:75:e4:b7:f5:f7:
91:3c:1a:3f:19:d3:58:88:d3:97:bc:24:e4:55:0d:
f9:c7:78:04:e3:16:a7:e5:1b:2d:05:b4:68:f8:93:
be:63:6d:1e:8c:7f:cd:c8:da:cb:e8:4b:7a:53:dc:
39:77:61:4b:df:6e:e4:ba:46:8f:bc:18:ed:c3:5f:
ed:82:24:4d:f7:ac:d6:8c:80:72:ab:32:f6:4e:4c:
a8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:89:A8:C7:51:FC:87:76:80:98:57:11:56:BE:5B:4C:0A:27:57:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6e0c7e4b-b9e5-3055-b991-6d3e9ccb17c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.213.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:41:96:d6:0f:dc:c0:59:16:27:b9:cd:ef:ac:0a:4b:73:bf:
50:a9:38:80:ab:a7:bf:16:58:79:21:e2:2c:e2:b4:d3:2b:c6:
0d:2b:60:63:af:4e:3d:7c:d4:4e:19:45:5d:3b:be:23:e7:de:
82:ba:fa:3d:d0:97:d2:23:3f:c1:5b:16:26:dc:02:2c:c2:6a:
fd:69:ad:0b:50:c1:b4:06:37:9c:db:08:77:25:bb:7c:41:df:
d3:3e:77:d1:c9:60:b3:f1:72:36:7e:6a:51:e1:a6:82:fd:90:
9f:0b:b1:96:33:9f:0f:17:87:e8:4d:86:ee:55:12:64:8e:dd:
2d:59:fe:01:2b:2a:07:fb:c4:03:cb:b4:95:16:15:3e:23:bb:
76:c1:30:fb:78:a5:6e:cc:58:34:94:f1:55:4d:ac:e4:8d:34:
f7:b7:b8:7e:28:5a:c1:52:04:f2:98:02:0b:75:d9:5b:4a:8a:
b5:fe:29:af:84:69:fb:cb:7e:d2:4b:ae:71:4f:04:d6:40:64:
23:ce:93:06:fb:38:55:9e:0c:33:ac:84:51:2c:c9:48:73:8e:
d2:33:5a:f2:4d:6b:9f:9a:43:c8:18:f4:43:71:af:8b:62:bd:
49:8f:ca:a8:65:67:47:9f:d8:bc:24:8c:01:f8:95:cd:a4:0a:
f9:7a:84:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:10 2025 by rpki-client