Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a0d47cd0-f561-37df-92c3-d1ba43711548.roa
File: a0d47cd0-f561-37df-92c3-d1ba43711548.roa (raw, json)
Hash identifier: O7rDtgqGoXw7qXftY8NE/Wp0aqbtTbw2S6rfPLUc+oY=
Subject key identifier: 99:66:C3:49:0B:21:87:3F:B9:33:7A:8B:79:F1:EA:6A:89:D9:B3:12
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858402A27B69D5718696E77106300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a0d47cd0-f561-37df-92c3-d1ba43711548.roa
Signing time: Wed 07 Dec 2022 12:00:00 +0000
ROA not before: Wed 07 Dec 2022 12:00:00 +0000
ROA not after: Thu 12 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.133.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2a:27:b6:9d:57:18:69:6e:77:10:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 7 12:00:00 2022 GMT
Not After : Jan 12 05:00:00 2023 GMT
Subject: CN=a299b5e6-dcbb-4b37-9ba9-3aa50b30de64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:88:b3:26:6b:0a:46:88:f9:a4:05:81:1f:
ab:c3:f2:a7:9c:bb:6b:fa:11:df:c6:81:c7:e3:be:
3e:73:fd:61:b9:6d:3e:e6:cf:eb:4a:be:6f:67:1d:
1c:fc:27:2d:79:5a:4d:b8:36:a0:51:92:0e:11:8a:
84:99:c9:2f:0a:ef:a7:30:8d:c4:60:58:15:93:ed:
b5:ab:67:b3:14:9c:03:e4:8b:86:4a:0e:e3:8f:ee:
41:a0:00:3a:e8:03:20:f5:f7:ff:de:4e:05:cd:0d:
60:70:25:0e:73:71:cb:fe:87:bb:f1:7a:54:c9:a4:
9a:70:cd:7a:20:ed:8e:79:fe:ba:e2:7b:1e:89:70:
72:74:6b:5e:34:18:18:b6:01:a4:14:c2:7b:df:ae:
e2:0f:d1:54:c9:9f:04:7c:f6:b7:81:c0:91:ab:69:
e6:b5:15:15:16:3c:7b:52:3e:a1:2c:41:6a:e0:b7:
41:43:f1:75:44:64:2c:63:0a:f4:0c:d1:65:0a:6a:
9b:46:cc:e2:8c:92:37:69:78:02:27:b5:61:a2:c5:
70:34:7b:f7:e0:34:4c:85:fe:dc:09:62:e9:cf:4a:
a5:76:8a:90:76:f8:14:92:36:38:ee:de:31:84:64:
6d:b2:b7:7d:0f:99:54:fd:e0:ba:aa:87:80:16:20:
c3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:66:C3:49:0B:21:87:3F:B9:33:7A:8B:79:F1:EA:6A:89:D9:B3:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a0d47cd0-f561-37df-92c3-d1ba43711548.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.133.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:8d:64:05:9c:df:cc:0b:40:0c:6f:6e:b2:dd:e7:65:7c:93:
d2:96:e9:df:13:99:c9:97:13:45:2e:3f:92:f4:49:fa:53:3b:
96:bd:92:4e:6d:89:99:0c:0c:7f:4f:a7:09:65:60:56:22:e5:
34:8b:a1:fa:ae:09:d3:43:22:d1:44:d5:c5:b7:c0:b4:aa:24:
94:a9:c0:29:cd:d2:8f:ba:e8:5a:f9:f3:f5:0f:e8:dd:48:94:
8d:b0:55:ef:f3:fa:67:f6:bc:92:c4:e9:df:03:22:56:57:ca:
53:19:9c:8b:c1:3d:31:80:77:bf:ae:26:a6:cc:10:54:c6:d2:
5e:68:40:4e:08:2e:d7:0f:47:2b:81:cc:d4:be:e2:f9:65:6c:
8e:62:c6:99:c5:62:25:f7:60:e4:fb:e3:53:dc:4c:f7:13:9c:
29:72:f0:da:da:20:39:c8:ba:d1:bf:85:77:1f:a4:ab:2e:56:
c8:db:53:36:40:80:1e:ef:19:c9:39:0c:ca:ea:ab:30:c6:5d:
10:9e:9e:1a:26:24:36:05:db:fc:16:2a:82:1e:25:3c:ae:83:
e3:e9:55:2f:a4:fb:fd:75:41:3c:32:e2:1c:80:b5:2d:67:fb:
fc:c9:75:e1:4f:af:bb:bd:71:a4:08:84:19:e5:87:0b:50:6a:
3a:5f:84:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:20:22 2025 by rpki-client