Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aaffa70c-a86a-3acf-be80-ec8766f738e8.roa
File: aaffa70c-a86a-3acf-be80-ec8766f738e8.roa (raw, json)
Hash identifier: 4Nx9gXtqVUV5xQhJ1FSk8u0Z+TMKHUXUxCvulvAxd5U=
Subject key identifier: EA:F4:37:75:B6:24:5F:5C:92:2E:41:DA:55:71:C6:96:BB:9E:5B:08
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584002B875D433B95174356AED80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aaffa70c-a86a-3acf-be80-ec8766f738e8.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:02:b8:75:d4:33:b9:51:74:35:6a:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=98d7aa75-97be-42b1-bc4d-336d44a83808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:71:17:a0:b2:fa:02:2f:b0:07:36:ff:37:
be:e6:d1:3d:0c:39:6c:1d:f2:cd:98:79:59:ef:65:
7b:2b:0d:64:ba:09:82:92:ec:d0:70:1a:73:4e:6c:
ac:c2:c6:ab:42:37:db:d4:f2:ad:3f:6f:f1:f2:e6:
8e:a2:07:a2:d7:08:4e:cd:9f:85:e6:b5:c5:0c:4a:
a0:c9:ba:d6:37:b6:70:01:01:03:7c:99:70:94:df:
91:6c:f1:17:8c:e5:44:83:44:91:d4:c1:5c:7b:fc:
fd:6a:ce:fd:7f:74:f6:59:50:4e:41:47:bc:30:73:
d8:0f:b9:a6:68:ca:d1:f4:4e:ec:db:8e:a0:3a:17:
ce:08:72:4e:71:68:4b:10:6a:aa:1f:fc:80:f1:78:
9e:02:56:5e:62:bb:6b:ec:09:b6:b8:99:b1:f8:c9:
09:e0:4c:c4:73:82:c9:6d:43:fa:c0:43:ca:23:b9:
43:96:27:65:de:92:e3:66:56:ee:d3:42:6a:c8:bd:
af:30:66:ce:f1:63:e7:10:1e:72:ec:f6:f5:dd:d7:
b4:00:e4:bf:79:59:3f:48:33:c3:54:2f:aa:bf:ed:
50:1f:b0:82:ef:3e:23:69:7e:91:7a:ed:e4:5e:7b:
34:ca:aa:8a:0d:12:5e:2e:a6:04:b5:4d:4b:f7:b2:
cb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F4:37:75:B6:24:5F:5C:92:2E:41:DA:55:71:C6:96:BB:9E:5B:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aaffa70c-a86a-3acf-be80-ec8766f738e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:3d:a8:b5:51:f9:a8:2d:ce:98:1e:fc:f7:9c:ac:67:87:64:
90:16:1d:c0:64:0c:cf:ad:79:29:1a:ea:d3:81:22:ae:68:18:
9b:b5:99:74:16:bc:18:47:ea:49:04:e3:d4:9e:5c:fc:dc:64:
67:7a:4c:94:10:63:ca:1b:72:3c:28:34:4d:bb:8d:71:16:c4:
ab:9a:22:20:15:fa:d2:1e:23:8c:40:27:d0:0f:a6:b8:c3:8b:
e1:b8:4e:07:97:ac:3a:d8:f3:37:18:dd:fd:2d:d4:75:84:61:
55:8d:17:eb:84:10:4d:ac:18:97:23:36:46:1b:39:9e:bd:48:
7c:64:88:65:28:6c:01:78:a6:7d:95:22:a4:40:01:7e:b1:06:
f5:c6:1a:7e:1f:fa:a1:80:a9:90:5e:20:88:c5:5f:dd:05:e7:
38:53:d3:be:b9:ea:43:bd:9d:f5:db:7f:7d:7f:73:89:50:f8:
e9:49:fc:5a:00:d2:3d:3d:0b:c0:bd:28:e0:a5:da:56:c2:fd:
7d:d4:18:01:80:44:06:d6:b8:a0:1e:92:04:bc:6a:81:9b:24:
33:8a:a4:86:f0:54:ea:b2:8f:91:bb:d1:19:33:9d:ba:ca:fc:
23:df:e4:de:c5:2d:2a:05:ba:b6:2c:09:39:23:cc:d3:cc:10:
19:f4:76:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:04:55 2025 by rpki-client