Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/77a9557d-1c83-37c5-8f90-4d538cb11af9.roa
File: 77a9557d-1c83-37c5-8f90-4d538cb11af9.roa (raw, json)
Hash identifier: xElZLx0p3zG7MAPqZwOR64gCiSc9ibjMWvoGyeSQnA8=
Subject key identifier: 11:6B:87:9B:73:0D:83:35:AB:F9:AE:FC:62:FE:07:DF:BB:96:01:55
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584016C20A01D551D36811F6E980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/77a9557d-1c83-37c5-8f90-4d538cb11af9.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.200.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:c2:0a:01:d5:51:d3:68:11:f6:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=bbb4aa18-06bb-4d28-89e0-f32ec00ef61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:00:83:b1:f0:16:61:48:fc:92:94:56:46:
e7:d1:e8:cf:37:ca:c8:ce:4b:ff:57:f3:1d:48:9f:
41:fa:4b:a8:23:04:8d:9f:52:15:fe:ea:63:55:a5:
3d:d8:be:31:66:79:74:3c:84:c4:e4:ae:97:dc:4f:
45:ba:01:ab:ff:1e:1a:23:b0:f4:e1:2b:30:20:bf:
ee:7d:78:37:2b:af:b4:13:3c:33:70:cc:c9:5a:26:
ea:3e:9e:de:fc:3c:8b:14:5e:dd:30:04:75:b4:89:
3b:9f:f4:dc:6f:6f:28:1e:d1:8f:a8:44:81:b4:84:
c6:61:00:bd:6a:5c:a0:00:db:02:35:89:c9:c2:37:
ca:c0:d3:4d:f9:ef:c2:80:a5:c9:a7:60:35:95:53:
6c:e0:65:14:97:bb:6a:91:84:aa:f5:43:35:51:10:
74:e5:f6:10:9d:f1:7c:29:01:0d:4d:a9:c4:62:95:
bb:52:13:30:65:29:75:00:06:96:97:4a:06:d2:84:
bc:e8:3e:86:7a:69:3d:73:3c:e7:93:e6:cb:e0:d4:
bc:07:db:30:73:db:37:64:38:98:38:77:8b:cd:2c:
12:66:90:7a:07:73:98:a3:53:dd:ba:08:30:45:27:
78:a6:58:8a:63:e7:18:1e:f5:e0:0c:c0:fb:0a:ec:
1a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6B:87:9B:73:0D:83:35:AB:F9:AE:FC:62:FE:07:DF:BB:96:01:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/77a9557d-1c83-37c5-8f90-4d538cb11af9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.200.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:b5:48:c9:59:7a:54:2d:74:bd:76:e1:b4:12:a7:26:c9:7e:
a9:bd:ed:04:9d:6f:db:2d:c3:dd:9e:3d:06:fb:96:e7:45:76:
da:01:40:1e:d8:cd:43:95:d4:48:8e:f4:3b:b0:37:af:4b:28:
38:23:39:7e:2c:8e:e0:53:09:73:5b:77:63:5e:e9:1d:ac:2d:
96:36:ae:52:31:9e:7d:28:b4:a6:9c:1a:bd:27:73:7d:3f:13:
e9:df:94:cd:d3:13:d9:d8:87:ed:8f:a4:df:17:c9:c7:f3:97:
93:ca:2d:fb:7d:0b:90:1f:b5:47:1c:f2:7b:13:c9:17:3e:3c:
0b:5c:8e:d4:61:09:00:a4:4a:f2:e6:a6:05:ad:04:c8:c0:c9:
55:5c:60:24:5f:35:d9:1d:04:4c:0b:3b:cc:a7:59:b6:70:16:
6d:73:bd:33:8b:8d:4d:cd:18:58:77:0b:11:7b:9d:55:7f:92:
5d:38:1f:64:80:f2:66:16:f5:cd:df:e1:51:ef:9b:70:ee:88:
1a:0b:9c:2c:b4:93:dc:56:ea:e3:81:89:7e:6f:3b:1f:00:5c:
26:0c:cc:ad:33:f8:4c:67:7e:f3:e7:17:a4:b9:dd:2c:61:03:
8d:e4:6b:88:6e:db:5a:1a:a2:c1:83:82:e4:9d:ea:ab:fa:26:
de:67:03:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:44:12 2025 by rpki-client