Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8bba723b-0f70-376d-88c3-c893ca007d11.roa
File: 8bba723b-0f70-376d-88c3-c893ca007d11.roa (raw, json)
Hash identifier: KnZzfeU1j0ADSsWTF0MA3+zGBLxgUnRc21XuxC8Mibk=
Subject key identifier: 75:2E:33:62:08:DF:2D:02:04:B9:66:80:E3:F3:96:2D:8F:1C:78:49
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CB9E2C59B1478E571D0846F40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8bba723b-0f70-376d-88c3-c893ca007d11.roa
Signing time: Thu 27 Jan 2022 05:00:00 +0000
ROA not before: Thu 27 Jan 2022 05:00:00 +0000
ROA not after: Thu 03 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 15.160.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:b9:e2:c5:9b:14:78:e5:71:d0:84:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 05:00:00 2022 GMT
Not After : Mar 3 05:00:00 2022 GMT
Subject: CN=0591bc01-7400-40da-b717-430ae22024d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:84:a2:de:38:85:c6:93:c0:fd:c5:bf:3c:
71:dc:61:6b:5d:13:fb:bc:a2:46:a3:2e:08:ad:94:
af:36:7c:2f:64:c4:e2:3a:cf:d5:64:b9:e0:84:dd:
98:26:a0:7f:08:87:eb:a5:fb:65:b0:7d:6e:f1:50:
b9:6f:85:1e:55:13:e0:a2:32:8e:fa:a2:6f:46:6e:
1d:1e:7e:51:0a:f7:b4:7c:26:77:95:4c:0e:57:ff:
e6:c8:af:a8:88:02:af:be:58:d0:60:9f:62:d0:9a:
53:75:39:04:de:72:9e:05:a6:b3:b8:75:57:f8:b8:
db:0f:4d:7a:73:71:32:5c:26:ff:1a:0d:2f:ef:42:
ae:31:77:19:f6:2b:a7:cc:5b:2d:83:dd:f7:78:2e:
a0:b6:15:14:5a:a2:52:e4:21:75:14:45:af:07:0e:
c8:2d:7f:ca:a7:81:12:d4:48:51:5b:4a:34:a2:8f:
0b:f8:d4:72:7e:7b:1a:62:60:a1:56:c6:35:07:34:
c1:ab:1a:dd:70:f1:6a:91:5c:30:02:d5:db:81:9d:
55:a8:0e:31:4e:c4:e3:b6:8d:f9:a5:d0:2f:9c:9e:
c9:3e:a2:ae:cc:3d:26:ae:d0:35:76:5a:ce:6c:85:
7f:bc:aa:7d:58:65:c2:de:a9:88:94:86:b5:59:db:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2E:33:62:08:DF:2D:02:04:B9:66:80:E3:F3:96:2D:8F:1C:78:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8bba723b-0f70-376d-88c3-c893ca007d11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.160.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:a8:ef:80:eb:6f:f1:fc:7c:76:f6:8f:e7:d9:46:e0:e9:88:
c5:5f:b2:30:d0:5b:1e:3e:6f:21:30:06:92:88:91:67:88:23:
50:e2:c1:be:96:50:3f:c0:fa:fc:30:75:3b:54:3d:89:7d:37:
7b:53:c0:53:88:7f:43:e6:18:44:40:29:65:09:4b:cf:8e:ae:
32:fb:d2:4c:3f:58:fa:16:cb:df:43:1f:c4:da:32:e5:bb:88:
23:d9:67:89:e7:e9:e0:dc:47:d5:69:a2:cc:3d:25:64:18:f6:
df:11:e5:d1:5f:eb:ca:6c:6a:6d:4c:e4:8a:4d:13:9e:0e:07:
1b:59:4e:bf:33:5b:06:f0:ac:e7:8d:04:24:37:56:16:8e:81:
4e:5b:91:b8:6b:3d:1d:34:e8:6a:42:00:13:10:4e:7d:76:20:
5a:0e:8e:a1:a0:a1:bf:af:da:a9:16:26:de:24:c5:03:c2:b0:
53:19:a5:0e:55:51:6a:bd:f3:29:c0:6a:94:a9:33:e8:90:f6:
29:bb:c0:b0:c2:5d:f6:4c:48:16:c0:a0:01:5a:40:df:b8:08:
21:de:b7:16:96:8b:1d:e7:cd:ad:24:91:3e:3b:51:57:3a:57:
83:c4:32:dc:d2:c9:a3:1f:57:3f:83:f9:ae:db:06:84:c7:b8:
34:7b:4a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:15:09 2025 by rpki-client