Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7a133320-2762-3c7d-9c13-4e1383209579.roa
File: 7a133320-2762-3c7d-9c13-4e1383209579.roa (raw, json)
Hash identifier: Lcrzc5hQvUutZgBSCo8mXKXN6Td42eRSUi1qdFIGgig=
Subject key identifier: F1:21:66:2B:D6:EA:97:F3:21:F9:7B:F0:2C:6C:FE:1C:98:6C:F0:75
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3F2019B7EBB92D941B368A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7a133320-2762-3c7d-9c13-4e1383209579.roa
Signing time: Wed 14 Sep 2022 12:00:00 +0000
ROA not before: Wed 14 Sep 2022 12:00:00 +0000
ROA not after: Thu 20 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.147.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:3f:20:19:b7:eb:b9:2d:94:1b:36:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 14 12:00:00 2022 GMT
Not After : Oct 20 04:00:00 2022 GMT
Subject: CN=108472f8-9af2-474d-a578-4bb1e5a3ef4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:72:31:4c:07:fd:37:ed:6f:df:24:54:de:
9e:30:36:3d:ce:54:c8:39:85:d2:68:4c:92:a2:f4:
d8:31:a2:35:a9:ac:21:8e:7e:8e:13:85:b5:76:1f:
02:4a:d4:72:85:26:28:40:89:3a:ba:28:95:47:3b:
bd:b9:4d:29:6b:24:5a:1b:e8:ac:8f:11:c5:61:d4:
40:d9:02:8f:fa:df:2d:47:5a:46:90:b3:57:e5:8b:
f1:9e:8f:a3:47:65:46:27:ef:35:fa:58:38:7b:95:
e7:f5:34:0d:41:41:d7:ac:bd:af:e7:0d:a8:1e:9e:
54:27:79:cc:b7:57:63:15:fc:a2:fb:01:46:a6:ad:
3b:92:ae:2c:d7:96:b4:1f:93:f8:ee:26:42:e7:26:
4b:7c:45:0f:52:91:4f:84:37:a9:f3:72:19:f2:f5:
45:26:b3:fa:e4:00:d2:f1:e3:c9:d0:cf:83:27:14:
de:44:f3:55:67:2d:bb:a2:9f:27:d9:7a:08:4b:b2:
f2:36:f0:ef:28:a3:bb:20:1c:64:a8:77:20:65:dd:
16:64:4c:28:bb:3f:98:1f:41:78:0e:6d:6b:a9:c6:
f8:51:dc:3b:29:eb:38:cb:ea:37:ab:01:c5:24:4a:
95:b1:d1:c8:54:47:e0:43:68:bd:b8:10:70:04:ac:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:21:66:2B:D6:EA:97:F3:21:F9:7B:F0:2C:6C:FE:1C:98:6C:F0:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7a133320-2762-3c7d-9c13-4e1383209579.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.147.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:f2:bd:55:9f:a1:a5:e6:4f:e9:b0:3f:3d:42:58:a8:67:36:
e5:0c:07:36:a6:5d:d8:e6:8e:c1:aa:74:9f:f6:0e:09:88:66:
a4:cc:a3:fa:80:64:4c:1a:c6:64:30:f1:fa:5c:c0:ae:de:1d:
28:f8:8d:ef:9e:7f:2c:90:77:86:3a:4e:be:31:c6:4f:e8:45:
5b:2b:28:6d:e9:d4:ce:16:20:f2:ec:6f:ae:52:b1:78:0d:0c:
29:c6:eb:31:86:92:b3:ec:02:57:ec:7e:c3:8d:cb:18:4b:8a:
8d:b3:60:5a:05:ee:05:d8:68:e2:28:b0:ad:38:02:a5:ec:ab:
f1:f1:6f:a6:e2:58:99:89:0b:38:ef:64:e9:ba:72:89:2b:9a:
c9:84:8d:fb:d3:dc:96:da:df:91:63:35:a2:66:1d:20:33:63:
e7:3c:b6:84:1e:b4:05:86:1b:7f:df:06:75:c1:79:c0:2a:d8:
a8:6d:02:20:99:cc:93:37:15:ae:9b:ca:35:28:90:04:e5:e5:
51:28:f0:a0:37:3b:03:6a:44:3c:9a:0b:47:8f:43:b8:37:4e:
8a:9a:0b:35:b1:5a:c9:bf:fb:ba:15:4f:c1:fc:7a:61:d2:9a:
ed:e9:79:1e:1a:44:19:a6:61:3f:b9:39:ae:87:be:3c:24:01:
d3:1e:85:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:48:46 2025 by rpki-client