Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/78a42092-21fe-3342-aa9f-7c6c4c303803.roa
File: 78a42092-21fe-3342-aa9f-7c6c4c303803.roa (raw, json)
Hash identifier: jJiQ+zm1dcGadusYTFC4LcwFN1dFswE0T9XkI1AN+Cc=
Subject key identifier: 65:CF:64:24:CC:9A:8D:AA:AB:6A:68:AB:0D:0C:4B:10:D7:4D:83:3C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1BDA85C70D99D051ED1D1340
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/78a42092-21fe-3342-aa9f-7c6c4c303803.roa
Signing time: Wed 01 Jun 2022 12:00:00 +0000
ROA not before: Wed 01 Jun 2022 12:00:00 +0000
ROA not after: Thu 07 Jul 2022 04:00:00 +0000
asID: 3209
IP address blocks: 15.145.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1b:da:85:c7:0d:99:d0:51:ed:1d:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 1 12:00:00 2022 GMT
Not After : Jul 7 04:00:00 2022 GMT
Subject: CN=d62e7997-27e3-4bd9-af73-72b66a72c4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d1:ab:c1:6d:c8:47:11:84:cd:25:da:42:d4:
7c:07:db:79:e2:bb:cd:a5:41:12:f8:f1:d7:44:ba:
e3:c9:2e:c6:75:b5:a2:69:70:fa:c3:e2:5e:18:f7:
6d:c6:ad:9f:82:af:76:e0:98:f5:38:40:72:d0:44:
2d:c0:98:e7:fb:c2:50:1b:e5:80:db:65:35:e6:7a:
64:3d:33:4a:1e:39:60:64:56:04:4f:b6:8e:27:de:
d5:3f:ef:63:95:eb:ef:01:40:fb:c0:be:ce:f7:d8:
0a:f0:d3:12:63:8a:68:85:4f:1f:59:f9:b3:3e:6a:
fd:b3:a3:75:d9:b1:2a:8f:3a:89:e8:f9:cd:8d:1b:
e2:18:e7:48:7f:89:62:78:f9:0a:c0:41:84:84:48:
66:3c:41:c5:0f:27:e2:4b:91:7e:2b:e7:4f:49:8a:
1a:d4:1b:33:e6:0f:6e:8f:a5:3b:0d:d0:89:46:fb:
ab:b0:6a:0d:f5:aa:f1:62:4d:4e:cc:eb:7c:f1:6b:
a4:e4:fc:02:12:ca:0a:f0:2a:0a:8d:92:26:c5:51:
e2:bb:29:3a:c8:19:38:53:78:88:7d:eb:69:74:51:
4c:06:06:71:a7:19:6f:4d:fd:13:b1:fe:3f:7c:43:
e4:2f:93:eb:76:82:70:7f:a6:77:5c:55:ef:cf:a1:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CF:64:24:CC:9A:8D:AA:AB:6A:68:AB:0D:0C:4B:10:D7:4D:83:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/78a42092-21fe-3342-aa9f-7c6c4c303803.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.145.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:fd:5b:7c:d6:4f:60:e1:4a:a2:79:4b:a0:f8:c7:1c:96:5b:
71:a7:70:1f:73:f7:7d:53:de:f7:a3:70:e3:6b:df:05:5c:87:
4e:96:c0:46:6a:78:eb:be:52:13:52:59:91:c0:cd:42:c0:ec:
9f:77:8f:76:6e:09:70:9b:fb:9b:db:20:8e:2d:48:f2:38:f6:
8a:ec:f0:41:13:23:8e:5a:d5:ab:09:e9:d6:65:29:b2:39:85:
4a:0b:84:75:55:2b:50:3e:04:01:02:ae:5b:b1:bc:73:da:da:
84:37:e3:43:77:da:ac:11:62:19:e5:71:ae:b7:e3:ce:b1:fc:
09:c9:d8:fc:69:e6:5b:6c:74:b4:84:71:03:a0:e8:34:76:88:
43:12:26:c4:dd:94:76:ba:65:09:1e:54:aa:5e:3a:ce:bc:9e:
4d:c8:7c:8b:0b:7e:6b:e9:12:35:34:00:b5:e9:24:a4:9a:4f:
e7:ca:2c:1a:04:9a:e0:fe:5a:24:39:61:e5:54:bd:7d:ed:0b:
f4:b1:6f:bd:c7:80:bc:ac:f5:eb:c1:57:e3:03:6d:4a:dc:ea:
6c:f9:d6:ca:e4:ea:ff:e9:b9:5c:6f:0c:f7:17:d6:38:95:52:
1b:12:12:99:dc:d6:7d:68:8a:d6:52:35:d2:ed:51:e5:95:11:
d1:59:f6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:42:14 2025 by rpki-client