Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/97a921c9-b194-33ff-8809-01140ffb4ed0.roa
File: 97a921c9-b194-33ff-8809-01140ffb4ed0.roa (raw, json)
Hash identifier: oTz267LGVnzzaBh+VvAMpK2pzT7ZLj2ekOGccMxfccg=
Subject key identifier: CB:BE:DF:12:EC:DA:0A:89:D4:F8:D2:9C:92:64:99:33:6E:BA:2D:89
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FB47737215E411665FF7C7F60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/97a921c9-b194-33ff-8809-01140ffb4ed0.roa
Signing time: Wed 26 Oct 2022 12:00:00 +0000
ROA not before: Wed 26 Oct 2022 12:00:00 +0000
ROA not after: Thu 01 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.131.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b4:77:37:21:5e:41:16:65:ff:7c:7f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 26 12:00:00 2022 GMT
Not After : Dec 1 05:00:00 2022 GMT
Subject: CN=a40699a0-a40f-402f-a756-486884d02b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:98:ba:f6:5c:a0:5a:ff:e9:00:e3:98:1e:
5c:ad:d1:e7:84:05:d5:1c:72:fb:46:01:87:35:5c:
b2:6e:48:13:e2:5c:58:6c:dc:02:6a:01:da:e3:8f:
17:37:ac:4c:5a:f2:19:75:e5:88:6d:29:4d:8f:6e:
09:ae:5a:6a:d1:e0:15:d3:49:45:16:98:c9:03:80:
e9:f2:ab:49:5f:44:76:ee:de:a6:6a:91:1c:51:e0:
b3:49:a9:c6:4f:47:23:d7:a8:7c:e4:48:5d:4b:b6:
71:38:ce:96:45:82:0e:6e:ba:ab:27:ef:f7:da:63:
8c:40:d8:24:38:a5:21:8a:62:78:29:3d:03:19:50:
61:13:f2:cc:e0:40:1a:3d:aa:0b:67:2d:6b:a2:89:
9b:1a:bd:9e:cc:6a:b0:7b:0d:bf:19:3c:25:69:e1:
d5:5c:bf:3c:75:36:d6:a9:7b:a6:f9:1c:af:91:3d:
dd:3a:ac:0c:e8:27:1b:6c:6f:c2:b0:fc:e2:3e:9a:
9f:ab:f6:72:fb:69:67:89:a9:43:9f:24:1a:d2:6f:
c8:37:54:fa:a0:11:6a:11:fc:ef:f8:77:e7:7f:d2:
00:36:f2:a0:88:af:22:84:b5:c9:6e:91:fb:e2:98:
78:08:df:c4:cc:a8:1e:dc:ab:1d:16:da:5b:00:98:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BE:DF:12:EC:DA:0A:89:D4:F8:D2:9C:92:64:99:33:6E:BA:2D:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/97a921c9-b194-33ff-8809-01140ffb4ed0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.131.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:b5:8a:26:67:68:65:83:28:de:9d:ba:c7:2a:4d:58:03:72:
5b:a1:00:dd:69:8d:6b:14:2b:1a:9e:fb:67:70:9b:8b:ef:85:
04:66:2a:7f:e5:a4:a2:55:54:4a:57:ac:46:3c:a4:26:c2:22:
77:c7:c9:92:ba:80:3f:74:96:84:2c:33:b2:52:24:74:37:29:
6c:ea:11:63:07:4d:fc:77:54:5d:33:3b:b1:e7:6a:38:dd:1d:
03:62:c6:db:56:9f:ce:51:3b:ec:72:d4:c3:03:5c:a4:49:a6:
b7:19:b1:d5:19:23:0e:fe:c7:79:38:7c:ed:9d:12:55:21:59:
39:1e:8b:51:62:72:bb:9d:a3:b8:fe:60:85:a4:98:b1:a5:d8:
22:66:ae:fc:df:aa:a6:7c:d7:08:75:83:aa:66:63:65:8a:fd:
41:a8:08:10:2d:31:37:52:2c:4e:cb:0d:61:e2:89:df:00:df:
55:b4:ce:91:b3:fd:88:9c:a7:c5:94:2e:b7:68:93:69:54:85:
c7:10:95:68:f7:27:d7:70:99:5a:ca:80:02:22:02:de:6b:7d:
41:9b:c7:99:45:17:af:9f:10:a8:0f:79:f5:89:21:9d:9b:cd:
d0:7f:24:9a:8e:0d:06:bb:38:35:fd:c9:7e:87:c5:da:0b:a2:
f8:03:9a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:36:47 2025 by rpki-client