Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f669137-cb33-359d-8c47-4bb4b542523e.roa
File: 6f669137-cb33-359d-8c47-4bb4b542523e.roa (raw, json)
Hash identifier: 1HXYNggvUQ0pyI1kVeRCDl/iXd+d7Rhvj7l8KrttX9k=
Subject key identifier: 5D:55:0F:7A:FA:A1:D1:22:70:C9:76:78:58:59:FE:14:D9:E2:05:FD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403D7E0910BE9F270F6D2F5E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f669137-cb33-359d-8c47-4bb4b542523e.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.177.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3d:7e:09:10:be:9f:27:0f:6d:2f:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=8b5c3bbd-33cd-44c7-9a87-29558b658703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:84:16:4a:fe:78:66:cd:03:7b:f0:47:25:
84:94:bb:27:c0:93:a1:44:af:22:60:b0:dc:16:fe:
ea:02:c8:54:6c:65:d5:46:94:55:f1:ef:91:7d:f2:
70:3c:84:65:5b:4e:71:dc:18:0e:4a:e8:5e:0a:c2:
8b:d4:ad:fc:d0:2b:64:69:ac:bb:5e:59:af:8b:c0:
52:29:43:c7:ea:d6:cd:ee:35:b2:51:4a:b6:6e:48:
79:30:e7:d8:4d:61:19:3c:08:5a:06:44:9c:95:e0:
c4:57:d2:50:1b:43:27:0b:fc:c9:3a:c6:14:f1:6f:
d7:59:0b:ec:9b:83:c1:b6:9d:36:77:4c:33:6d:81:
55:d6:04:0e:b0:4a:60:69:ab:11:33:d6:93:8f:f6:
4c:fe:6d:c1:2f:61:c2:08:d6:90:9f:80:51:2c:75:
26:f9:ae:5b:bf:88:7f:f3:49:13:de:b8:a4:be:62:
6b:d0:c2:1c:3a:ad:4e:c5:4c:5d:4f:ce:15:b3:a2:
48:4e:07:18:65:4f:41:97:6c:09:8d:40:fa:10:ca:
71:09:3d:89:33:b1:ea:35:e4:33:6e:7d:c7:f8:3e:
62:09:d8:0d:45:19:3c:5e:3a:70:98:53:bd:d5:45:
a2:db:e0:b8:58:74:78:e7:12:41:dc:54:71:d5:2a:
90:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:55:0F:7A:FA:A1:D1:22:70:C9:76:78:58:59:FE:14:D9:E2:05:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f669137-cb33-359d-8c47-4bb4b542523e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.177.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:08:f6:9b:7b:b0:06:e4:b6:e4:eb:1a:98:3a:a4:78:fd:58:
2d:c0:bb:54:f6:46:dc:03:cd:69:cd:ca:dd:e3:d5:0b:8a:29:
0c:c4:83:cc:1e:87:05:29:ab:42:0a:9a:6a:16:b9:a8:0f:2a:
3c:91:39:7f:a1:33:81:1d:c4:b2:f3:b5:20:45:47:84:c9:ea:
25:5d:8d:26:d3:b1:40:11:be:f4:69:80:46:e2:c3:9d:1c:2f:
66:dd:79:38:00:f3:57:9c:78:70:56:7a:9f:1c:65:5e:79:fe:
d4:88:51:7f:ed:53:03:eb:0b:5c:1b:9e:34:5a:90:15:1a:9f:
60:0f:6a:48:4b:73:fb:fa:b7:47:d5:be:fd:a7:fd:8c:a7:0e:
bb:b2:59:bb:ac:d9:74:71:73:dc:30:22:f5:10:93:16:de:d5:
a0:7e:1f:97:d1:2e:bb:29:44:70:41:ee:41:72:05:57:98:2c:
66:7a:66:63:04:0c:29:32:71:72:48:70:58:49:32:cd:61:e3:
e9:f7:c3:35:6b:07:6b:cd:6e:c9:a9:60:6d:70:e8:05:20:92:
d9:74:64:f2:60:db:71:d8:1f:cd:3f:77:f6:e6:d0:ed:af:61:
a9:24:0f:46:26:82:9e:58:dc:3a:ac:0e:43:96:fe:78:d3:bf:
bf:5d:df:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:41:42 2025 by rpki-client