Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/819b1a53-90d5-3b01-94b3-fc3d5b325b7c.roa
File: 819b1a53-90d5-3b01-94b3-fc3d5b325b7c.roa (raw, json)
Hash identifier: 9Q0E4VOlfu2UW3GBpOY/dkrwX5N8q8UFwlIh0TmS0n8=
Subject key identifier: FF:D2:0D:56:B6:92:CB:AF:19:E9:3F:7C:F6:95:CD:81:36:45:B5:1F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584003D3883BCB630FC6F17A6AC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/819b1a53-90d5-3b01-94b3-fc3d5b325b7c.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.169.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:03:d3:88:3b:cb:63:0f:c6:f1:7a:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=a1e14f5a-d6d8-434c-a517-dc4c75d33863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:99:eb:8a:94:a8:8a:49:64:c0:99:df:27:54:
2f:fe:50:79:7a:88:ae:9a:ba:65:ee:62:83:de:b1:
87:88:dd:7d:8d:e7:c1:45:b9:ad:27:3b:98:a6:50:
da:d2:1f:16:80:85:42:65:5f:33:0c:d7:c6:6d:fc:
24:f6:9b:07:7a:1d:6e:03:19:59:22:f7:05:70:aa:
70:ef:7a:f0:f1:c5:88:6a:58:6c:58:4c:d6:eb:8c:
a8:e7:90:5b:4b:e4:83:2f:fd:37:0f:8b:59:95:25:
a6:09:e8:53:60:48:bd:b5:df:1d:bf:7e:fa:2f:72:
0f:b8:7d:1a:a5:15:76:b5:3b:0b:ad:e6:ab:58:7f:
3b:82:fd:79:3d:2f:a6:d1:4d:f1:0f:2d:12:f7:34:
0a:ec:36:c6:41:3f:1e:92:ff:b2:9f:60:f3:46:e9:
de:d5:0d:2c:d3:53:a8:b9:a8:8f:fa:75:bc:89:14:
94:69:9d:15:fa:9a:bc:4c:f5:74:fa:cf:b1:b5:eb:
a3:15:8d:59:93:71:ef:f0:61:f0:90:f5:85:90:6e:
a8:73:52:d6:46:f3:60:4b:9e:0a:08:74:47:7c:e1:
33:82:8e:0d:21:01:3b:8f:9f:b8:f2:44:19:d2:e9:
40:5f:35:03:50:a7:c1:7f:14:cb:f8:ad:0a:e9:f8:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D2:0D:56:B6:92:CB:AF:19:E9:3F:7C:F6:95:CD:81:36:45:B5:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/819b1a53-90d5-3b01-94b3-fc3d5b325b7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.169.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:98:92:71:94:6c:59:50:86:77:26:74:53:06:23:a2:7f:00:
1b:41:03:5d:f8:ad:53:57:86:c8:cb:19:45:c4:2a:37:5c:7a:
5d:4f:8a:9c:31:cd:68:91:73:53:b1:2e:3d:5b:e6:03:6e:5f:
43:14:e4:86:2a:c6:a8:48:31:b3:2e:66:ba:83:d5:23:43:47:
19:57:af:a6:13:c3:7d:13:6a:57:96:b6:c6:75:1a:09:fc:57:
e3:53:6d:ce:36:1d:f2:04:f8:68:e1:55:4e:38:1f:99:a7:46:
dd:98:73:3f:dc:c1:f8:5c:fa:2b:3f:cb:61:2f:fe:ab:b0:d4:
34:0b:99:c2:c2:c9:88:fc:9f:05:08:1e:b6:ba:72:10:e7:d5:
f7:7e:be:99:30:f7:6d:83:e3:b2:e2:ea:50:3a:78:71:7b:08:
ce:12:01:44:5d:1e:d5:73:d3:72:f2:84:2a:a5:27:f2:1c:04:
d0:b8:82:47:18:b7:74:44:76:8a:b8:10:e9:31:73:89:56:f8:
07:6f:c6:d6:0b:c5:19:af:e5:27:30:55:ec:f4:17:c4:9c:e1:
96:d4:ad:eb:a7:cb:9a:1d:fd:c5:d6:e5:5e:5d:90:dc:a5:71:
4d:51:7f:60:b8:c1:c8:6b:a6:5b:6b:fd:aa:9f:1d:9a:f6:0e:
f6:9c:5e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:49:22 2025 by rpki-client