Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e7a31f7-8007-3fa8-968d-090ebbedc6a7.roa
File: 9e7a31f7-8007-3fa8-968d-090ebbedc6a7.roa (raw, json)
Hash identifier: uNNlUD5rEMiZBAuRIsWSMwpAGZF+jqfhUqyWFD409HM=
Subject key identifier: 55:63:0B:A5:93:B9:4A:BD:15:63:37:4F:17:E1:EE:56:75:AD:52:10
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409C8730619E38C93587CAD340
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e7a31f7-8007-3fa8-968d-090ebbedc6a7.roa
Signing time: Tue 17 Jan 2023 12:00:00 +0000
ROA not before: Tue 17 Jan 2023 12:00:00 +0000
ROA not after: Wed 22 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.255.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9c:87:30:61:9e:38:c9:35:87:ca:d3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 17 12:00:00 2023 GMT
Not After : Feb 22 05:00:00 2023 GMT
Subject: CN=f5b02c91-8015-4a2f-899c-c2b8f0df2135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:27:3f:3f:44:47:c1:e2:73:71:bf:e5:eb:a5:
01:9b:ba:ad:ef:4a:a2:39:d7:03:e6:2d:1a:4a:ba:
b9:50:d6:4e:fc:5a:df:37:10:b9:78:00:73:7b:14:
b4:03:cb:25:16:25:84:c0:3f:2d:f0:74:9f:4c:db:
24:64:2c:fa:07:5d:6b:95:dc:9c:8b:83:2a:4c:9a:
dc:d4:23:90:8e:f3:45:11:46:4d:e7:1c:d8:c7:1f:
7d:f7:2b:38:8e:74:11:63:37:59:78:a8:78:1d:86:
55:5a:99:6c:d6:a9:bb:04:93:b6:f0:ad:50:39:53:
f9:ed:d4:1d:ca:71:60:b2:46:e0:35:a1:06:46:89:
f6:55:b4:c3:6e:bd:47:df:8f:71:2e:97:98:11:7e:
b8:a8:5e:2d:db:2a:e1:9d:d9:52:d2:7a:49:6e:26:
84:13:35:65:a8:b6:b9:0e:6b:74:77:f3:9a:e9:5a:
bd:d7:59:d0:8e:ca:8d:8e:89:58:d4:72:35:35:62:
d8:1e:d8:38:8e:92:23:1a:5e:99:53:b5:7d:3f:c3:
0d:95:ee:7b:7c:7d:bd:fa:30:01:da:1b:7b:74:aa:
84:f6:e3:c8:1b:af:4b:a1:4a:76:b3:8f:15:77:a1:
dc:5a:30:ef:8e:6a:36:25:0e:44:e5:ce:e6:5d:6d:
61:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:63:0B:A5:93:B9:4A:BD:15:63:37:4F:17:E1:EE:56:75:AD:52:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e7a31f7-8007-3fa8-968d-090ebbedc6a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.255.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:5f:ea:2f:d1:ad:c2:83:cb:29:83:5e:e6:af:23:86:ed:00:
61:34:08:21:b0:14:80:e1:6b:e3:c7:77:ff:83:ae:fd:02:e6:
c3:80:22:ed:e1:df:90:c7:46:88:37:d4:75:53:95:87:fd:2e:
53:56:63:3e:fd:eb:2d:25:ad:3a:81:77:4b:cd:18:9b:d8:8a:
5a:1c:9b:c1:f4:a0:7a:b5:9f:1f:ba:09:38:f2:c1:d7:cb:2b:
5a:52:48:48:60:5d:c4:fb:5e:a3:39:ca:b3:19:73:5f:f0:2c:
45:dd:bc:eb:79:89:36:86:06:5c:a8:23:52:8e:64:73:ac:5a:
c2:1d:0d:84:3f:f0:9e:1c:2a:b0:01:43:42:3c:61:5b:92:58:
f0:0c:7b:67:d3:15:55:63:fe:ce:3f:4d:9d:f9:1d:d0:2d:39:
4c:85:ac:96:2f:91:fc:5a:65:1a:0f:d9:4e:f3:84:bf:38:1e:
70:27:46:bb:23:59:2b:75:db:ab:82:4c:b0:13:e3:ab:6f:78:
12:bc:52:01:e9:30:0e:ba:01:e1:a0:d9:63:b4:d2:1c:6c:b3:
b6:05:43:1e:31:18:40:cb:26:4b:a9:08:e6:05:f5:7b:72:73:
21:2f:9c:a3:f4:de:98:4f:e2:da:82:ac:28:14:44:ff:ad:76:
e4:2f:13:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:36 2025 by rpki-client