Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9fd769d8-a071-3812-8fbd-e53f9db041d3.roa
File: 9fd769d8-a071-3812-8fbd-e53f9db041d3.roa (raw, json)
Hash identifier: 5yyt6mg562C9rrGBmPHd7NtQOrZFK/CRlgVWh9Z30iQ=
Subject key identifier: 4F:41:19:89:DC:8F:4D:04:37:B1:3A:15:A0:75:6B:8E:4D:D6:E9:A0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FDCE336A0DC69B159EBA3E880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9fd769d8-a071-3812-8fbd-e53f9db041d3.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.147.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:dc:e3:36:a0:dc:69:b1:59:eb:a3:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=40c5be2c-0f9a-442a-9387-eef24080fb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:33:a5:11:76:7d:b5:16:57:0d:b9:fb:68:
03:d8:d8:fb:fa:25:ce:d0:b8:12:2b:2a:2a:04:d6:
3c:a3:f5:32:a5:9f:df:a5:35:c1:8b:90:f1:b3:29:
41:72:b3:ad:c4:a2:b7:cc:1d:cf:7e:c4:d0:b6:58:
dd:f3:37:3f:39:35:cd:b6:e2:ef:ea:ca:be:8e:ac:
42:de:b9:31:bd:60:3a:09:9d:fb:22:fc:5a:4d:50:
42:59:ea:ff:85:63:cc:4b:f5:c5:78:43:59:8e:92:
c6:a6:a8:7c:98:a2:19:f1:98:17:d0:e1:4b:06:d5:
9d:51:5f:ee:b5:8a:7f:23:a6:e7:db:92:56:de:dd:
0d:4d:2d:80:d4:1e:df:8e:2f:ec:07:92:c9:16:3e:
47:c1:5a:47:ad:65:00:be:e5:f5:1b:49:19:37:bd:
cd:d3:1d:bb:a9:b9:e7:8d:ea:a0:62:77:d1:7e:14:
c1:04:54:a4:02:2b:b1:18:80:64:36:96:ec:9d:2a:
c6:72:30:d6:9f:01:c2:3a:a6:a9:3f:15:d6:a1:70:
9b:e1:9d:26:87:50:6f:d2:38:36:a7:aa:53:9d:cb:
d5:e4:2a:51:79:60:53:0e:a0:0e:e0:74:fb:10:37:
07:35:50:16:10:09:3e:98:c9:0a:c6:3e:2c:68:f0:
d8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:41:19:89:DC:8F:4D:04:37:B1:3A:15:A0:75:6B:8E:4D:D6:E9:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9fd769d8-a071-3812-8fbd-e53f9db041d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.147.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:ea:cf:b4:7c:8f:af:2e:11:90:93:fc:e3:ce:3e:a1:8d:0e:
64:96:81:ca:af:8a:8b:a5:9b:a0:e3:2a:db:bc:4b:79:72:dd:
67:be:e4:94:e9:11:d5:16:b6:2a:bb:91:7f:ae:10:02:5d:39:
1a:11:75:88:2f:32:e1:17:83:07:84:ce:84:8f:bc:78:a8:f1:
16:5f:46:3c:6a:c6:0d:98:4f:62:2d:61:e8:01:c6:c6:4d:01:
58:79:ed:2f:1e:67:ab:6a:17:48:cf:95:9e:60:03:0d:3f:be:
20:8e:4c:5f:7a:3c:88:0d:c1:86:7e:29:13:8f:f6:fd:e7:cb:
c0:5e:11:76:fc:fc:cd:a7:32:3c:95:81:e2:cc:19:5f:30:e5:
2f:c7:e0:40:3e:48:92:d5:ba:48:f9:27:64:14:5b:a9:32:c0:
cf:4c:fb:58:3d:01:e9:e7:f2:99:63:81:9c:eb:d1:c0:da:60:
ac:87:a1:26:5d:4c:72:fd:3f:62:61:93:c4:76:61:f7:54:ac:
36:82:02:39:4a:66:28:13:0f:e2:9a:4d:95:c7:a0:fb:dd:11:
0d:c5:48:8c:1a:c3:49:d2:14:e5:b1:a5:a3:fa:bf:00:37:6b:
4a:59:c9:33:40:61:d5:b2:08:5e:a7:43:79:bf:44:d8:37:b3:
17:75:11:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:50:20 2025 by rpki-client