Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9146d05e-4e8a-349b-9648-9ef5686ccba0.roa
File: 9146d05e-4e8a-349b-9648-9ef5686ccba0.roa (raw, json)
Hash identifier: QzpeDF9jpDEGptPwFSCuVjOPopEki5k4WqzZUX8Eb+k=
Subject key identifier: 91:DC:4E:84:A9:D9:10:A5:7D:1F:5C:97:27:9E:65:6A:B0:09:95:C5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FB1CA17A1742E9D6515E25D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9146d05e-4e8a-349b-9648-9ef5686ccba0.roa
Signing time: Tue 25 Oct 2022 12:00:00 +0000
ROA not before: Tue 25 Oct 2022 12:00:00 +0000
ROA not after: Wed 30 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.202.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b1:ca:17:a1:74:2e:9d:65:15:e2:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 25 12:00:00 2022 GMT
Not After : Nov 30 05:00:00 2022 GMT
Subject: CN=295c0eb2-2390-4589-af0d-73b6185c42c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:b8:1e:69:fd:be:6a:dd:06:63:17:42:73:
b7:3b:b7:0d:2f:71:12:17:8f:6b:dd:3d:ec:42:28:
a6:c9:3d:97:1c:9e:e5:4d:6c:18:be:73:77:6e:f7:
d8:da:e8:e1:4b:d6:e1:cc:7b:8a:73:8a:fb:46:33:
48:11:50:9d:64:dd:ff:c2:2b:48:72:2e:e2:1e:9f:
38:dd:af:1e:52:aa:a3:53:b7:e8:62:22:cd:ac:33:
da:79:2f:1a:51:8a:84:8f:10:b8:a8:46:2c:02:37:
91:2b:9a:c9:d0:0e:4e:03:8c:39:3f:d3:54:e4:70:
89:e0:d1:63:55:34:7d:69:42:ff:16:cf:b0:c0:d4:
9e:a1:c6:cc:a9:f2:70:26:f2:58:0d:e6:5f:09:17:
04:b1:2e:50:d0:4c:91:cf:98:3f:80:90:0c:c2:80:
62:07:23:af:25:3f:2e:68:8b:5e:7e:d0:9e:94:d3:
2a:5d:32:e1:8b:58:0b:6d:99:08:87:a7:86:f5:59:
7e:b0:77:93:f6:16:36:48:96:9f:95:99:06:bd:39:
06:63:11:4c:9d:95:45:b6:54:62:e6:22:0f:26:bb:
a7:77:31:2e:25:10:58:a9:ca:04:40:8e:69:60:b5:
e3:1e:b6:7a:8b:8f:ba:b4:3a:bb:a4:8c:76:1b:78:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DC:4E:84:A9:D9:10:A5:7D:1F:5C:97:27:9E:65:6A:B0:09:95:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9146d05e-4e8a-349b-9648-9ef5686ccba0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.202.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:7a:52:38:aa:56:0b:30:c2:93:88:37:fb:83:b8:4b:63:62:
02:29:67:66:c5:8a:38:5c:90:8e:21:40:4e:b1:b5:6c:06:e4:
87:60:f6:8f:0d:db:c8:84:46:ad:80:e3:b6:52:fb:4f:d6:12:
13:34:9d:c7:24:e3:be:fd:e6:d0:89:c0:f5:e3:b8:b5:f3:cc:
f2:18:5a:c4:f6:58:fb:e5:1b:b6:ad:52:fa:24:e0:42:0f:0d:
e6:28:7c:4c:57:2d:08:9b:71:95:6f:e1:b7:ed:30:e4:d3:86:
cf:fc:e0:06:6c:6b:0a:c3:bf:da:d4:c0:f8:19:6f:6e:5f:a6:
4d:bb:42:82:e9:e1:11:c1:5b:96:4f:64:db:38:03:ea:9b:3a:
23:c6:b9:c2:cb:c2:f8:8c:4d:62:cc:0b:da:74:b4:97:27:4c:
52:9f:df:ed:67:a8:7b:8c:4f:2f:8d:2f:9b:5e:02:68:e9:df:
39:da:34:68:d2:fc:4d:41:a9:0b:ad:46:03:25:2b:69:be:54:
c5:15:91:42:6a:39:ca:7e:0e:2a:48:81:07:ee:db:f8:88:74:
24:6c:bd:1d:89:9b:af:7c:7e:13:28:19:6d:0d:bf:07:68:92:
ba:e0:54:86:93:1a:2c:85:1d:0f:a7:c8:a0:e4:00:51:cd:95:
71:6c:ad:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:04:53 2025 by rpki-client