Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/84e1897e-f2b9-3b2d-b22a-58bd91d8529d.roa
File: 84e1897e-f2b9-3b2d-b22a-58bd91d8529d.roa (raw, json)
Hash identifier: 6vIBk92eJCpZw/ksNKhXX2ru7zuH17vnSydhZcIMFRU=
Subject key identifier: 46:B0:1E:9D:13:4F:B8:FC:E5:5B:A8:53:1D:41:4B:91:85:C6:03:7D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF0235ED1689810DD9F20BDE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/84e1897e-f2b9-3b2d-b22a-58bd91d8529d.roa
Signing time: Wed 16 Nov 2022 12:00:00 +0000
ROA not before: Wed 16 Nov 2022 12:00:00 +0000
ROA not after: Thu 22 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.231.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f0:23:5e:d1:68:98:10:dd:9f:20:bd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 16 12:00:00 2022 GMT
Not After : Dec 22 05:00:00 2022 GMT
Subject: CN=b0a722e4-10ab-420d-a151-59ded64716c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:7b:a6:c4:2e:00:b5:d0:4a:5c:f7:0f:a4:
1c:40:36:60:57:cb:33:d4:c7:0f:2d:f1:fd:c6:81:
82:8e:ab:4b:b4:4d:75:ee:ee:15:dc:20:d4:b1:3d:
15:28:5c:7a:c5:13:c2:a5:4c:ed:7f:19:d8:c6:3d:
56:06:ba:25:2e:31:42:0c:ba:7a:e0:b5:fd:e7:89:
c3:a4:7c:08:c9:59:9e:9a:98:e9:b7:12:69:18:7f:
e3:54:86:33:cc:0e:35:58:69:2f:ed:9c:f0:39:6d:
0f:d3:16:c0:00:1e:56:00:4b:ed:6b:c7:79:d4:7b:
b6:b1:4f:a2:c2:d3:36:7b:da:ed:62:60:c0:ce:f3:
8e:89:ab:9e:25:b2:75:75:e2:99:5c:5e:6f:c8:02:
95:b4:aa:e7:e1:0a:cd:30:8d:9f:61:fb:73:36:3d:
70:66:bd:61:85:b1:38:40:e6:1b:8f:2e:8a:e1:8e:
62:75:b6:73:68:09:23:f4:c9:cd:8c:ae:b7:94:57:
b3:83:fd:9b:8e:a1:6b:86:4d:16:31:96:9a:d5:7c:
d1:ac:f9:b8:db:aa:9c:1d:cd:b2:4d:bb:11:62:4f:
d0:bc:15:65:47:0a:87:d5:41:b6:45:3e:4d:de:0c:
62:bb:31:da:8c:93:a1:cc:30:88:55:71:57:dd:2d:
40:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B0:1E:9D:13:4F:B8:FC:E5:5B:A8:53:1D:41:4B:91:85:C6:03:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/84e1897e-f2b9-3b2d-b22a-58bd91d8529d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.231.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:6c:88:57:35:6d:53:f5:ac:04:6e:e5:05:2a:93:2d:f5:e5:
e8:5e:7b:1c:50:fb:0b:75:a4:bb:ee:64:12:01:e7:d1:a2:d3:
73:08:b3:9e:18:4a:34:6d:42:15:4c:88:05:ca:0a:f5:04:41:
87:c3:9e:58:93:74:42:f7:10:09:8e:9a:69:63:56:b9:a1:54:
5c:b1:96:89:44:76:26:99:fe:ec:37:69:17:6d:ca:a1:01:d7:
a4:e9:57:0a:06:63:a9:67:82:03:5f:01:61:7c:cc:51:ee:4b:
b7:fd:d5:17:a0:2a:59:ad:0b:7b:26:03:2e:cb:4d:fb:8b:53:
46:62:af:97:75:03:35:1b:74:c4:96:13:98:7a:85:de:53:f0:
ee:d0:0d:21:a0:f3:2d:14:7b:5d:2a:ac:62:c0:0d:4b:7a:f0:
70:a2:cb:5e:8e:24:f9:0c:b9:53:44:96:b1:54:d8:b6:42:3b:
e7:a9:66:69:94:41:e6:46:93:91:55:74:6c:a1:df:86:ae:50:
a4:3a:83:ea:53:35:8e:e3:6f:06:60:00:5b:70:e1:ca:fb:c8:
79:60:4b:17:d3:1d:ae:d9:14:22:ea:41:1c:1e:2b:6a:ad:73:
5b:2f:d5:f7:21:f4:61:0f:c4:1c:47:49:d3:08:21:8a:74:03:
c9:1f:6d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:42:25 2025 by rpki-client