Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9bb2d46c-5384-3d38-a787-298f3ad9afcb.roa
File: 9bb2d46c-5384-3d38-a787-298f3ad9afcb.roa (raw, json)
Hash identifier: PpVmMZqMP9vwOkHLIYF9Jcyg1S8py7pZ7E7GzQpVKQI=
Subject key identifier: 40:5D:41:FC:46:D3:8A:8D:59:81:0F:E6:31:44:0A:80:12:79:66:D9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858402B15CF102458E3EECE4DF740
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9bb2d46c-5384-3d38-a787-298f3ad9afcb.roa
Signing time: Wed 07 Dec 2022 12:00:00 +0000
ROA not before: Wed 07 Dec 2022 12:00:00 +0000
ROA not after: Thu 12 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.213.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2b:15:cf:10:24:58:e3:ee:ce:4d:f7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 7 12:00:00 2022 GMT
Not After : Jan 12 05:00:00 2023 GMT
Subject: CN=5e83ab78-0a6b-4272-8e54-68c4b35359ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:b0:bb:e3:57:e7:d9:67:2b:39:fb:96:16:
2a:40:22:00:61:d4:57:41:f4:8b:86:65:b1:94:3f:
74:a4:bc:42:1f:9f:df:36:bf:ac:9e:23:c9:bc:8f:
9c:f8:23:d8:41:65:35:d7:2b:55:64:d6:8f:3d:64:
92:71:f8:67:73:af:93:a4:c7:1d:fa:e5:5a:df:a7:
db:92:58:cf:2b:43:3f:30:01:19:1c:a5:e1:8a:8f:
87:68:94:ac:2d:e1:73:36:45:cb:a7:95:b7:cb:5b:
e8:96:58:1a:84:6c:7b:e2:3f:9b:e8:8f:1f:31:be:
b9:62:d0:40:a3:2a:dc:56:a0:db:ec:89:11:be:99:
fb:2c:28:f0:60:14:b0:30:c3:29:80:a3:ac:5a:bf:
99:19:f2:13:2f:43:1e:23:dd:f3:7e:28:3c:28:88:
ce:00:a3:c9:8d:ec:cf:25:42:57:0c:0b:44:5b:4a:
1a:df:49:ec:1a:20:a2:9a:2b:c5:fe:86:a4:eb:ec:
55:0b:e0:ce:ac:45:64:e5:6e:e8:12:3a:8c:9c:c0:
a6:c5:89:9a:4c:79:01:ee:6e:c1:d7:4e:02:3f:aa:
51:43:36:69:20:2f:ee:39:2b:3d:d8:81:3f:7e:b1:
ee:d8:f7:b2:81:42:d1:f5:92:5d:f2:a4:90:bf:98:
70:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5D:41:FC:46:D3:8A:8D:59:81:0F:E6:31:44:0A:80:12:79:66:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9bb2d46c-5384-3d38-a787-298f3ad9afcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.213.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:08:d8:8a:a9:26:9c:31:d3:0c:ec:30:c2:75:03:ac:d0:d8:
55:4e:ee:15:37:3e:6d:ee:d9:4d:44:6e:85:a5:0e:71:38:5e:
d9:c3:19:57:4a:5e:87:29:f7:36:aa:2f:63:1c:5f:8a:72:4e:
aa:07:b2:c1:e0:d4:12:73:49:70:9b:34:d7:49:33:d9:7c:41:
88:1f:e4:d7:e1:37:2a:5c:a5:19:57:51:ba:d8:0d:54:06:2b:
87:e6:b2:74:4a:fa:28:f5:81:3a:3c:1c:cf:01:fc:54:75:49:
10:0b:58:d3:dc:52:31:df:a3:96:2e:f8:cf:eb:38:a1:9c:e9:
fe:ee:23:ff:a5:9e:2e:32:9d:63:dd:6a:62:21:37:f5:82:8b:
3b:55:d3:42:bc:80:fd:ef:1f:1c:6b:97:0f:13:ec:d1:f9:35:
27:61:00:70:ca:16:85:4a:74:1e:69:01:91:30:a8:24:28:76:
a2:a6:54:ab:2d:b4:5e:13:24:c5:1f:1a:92:04:77:28:d6:11:
6e:0a:bc:16:7a:9f:fd:05:b2:ad:7a:69:bd:cc:81:58:b1:d1:
7f:f5:86:b7:a9:b4:80:28:d1:25:d8:93:0e:b1:df:73:7b:3a:
fd:b4:f1:37:ca:e9:47:9b:6f:bb:a4:89:f2:62:7a:8f:d2:78:
49:7a:f8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:07:05 2025 by rpki-client