Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ac405b28-cb7e-334a-8856-f5831f0fb944.roa
File: ac405b28-cb7e-334a-8856-f5831f0fb944.roa (raw, json)
Hash identifier: xsvwbmIt8zCCIsAFHLHU8qPfANjsaorqkGW8wDIfiWU=
Subject key identifier: 65:0D:6B:88:A6:76:D9:70:54:BB:77:B1:19:E0:79:92:A7:29:EA:D8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840C37EE5598B8636B0C432E1C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ac405b28-cb7e-334a-8856-f5831f0fb944.roa
Signing time: Tue 31 Jan 2023 12:00:00 +0000
ROA not before: Tue 31 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.202.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c3:7e:e5:59:8b:86:36:b0:c4:32:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 31 12:00:00 2023 GMT
Not After : Mar 8 05:00:00 2023 GMT
Subject: CN=17df2de4-4aec-4c79-9413-76ce2a62a331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c3:68:de:4c:df:ff:e2:5b:5b:42:af:2e:a0:
2b:01:a3:d2:29:98:b9:e3:c2:73:45:b3:65:af:df:
87:a0:b6:67:3d:26:78:7c:77:ee:0f:5d:9a:00:9c:
7f:29:b4:fb:47:12:f7:86:d6:7b:82:72:5c:04:2f:
0c:2a:5d:c3:6a:9a:2b:6e:76:37:ba:8b:88:e9:48:
3b:fe:84:64:9c:77:02:e3:58:04:13:0d:86:74:e8:
3f:8f:e2:1c:04:75:8f:31:e4:3a:08:1f:f2:ae:23:
9d:65:2c:7b:2e:8b:6a:31:7c:49:2d:61:08:b1:2c:
a3:9c:98:4e:0a:18:d3:33:1c:43:e0:62:b9:e0:8a:
0c:8f:a6:ae:f0:4d:2b:93:32:58:78:72:0c:b9:95:
0c:58:d7:c2:6a:5d:6f:88:cd:6c:61:1c:c6:bb:02:
bc:b1:97:e7:e6:fb:bb:02:38:b3:b9:06:2b:9c:9f:
dc:9b:7d:20:1d:65:b8:14:11:fb:af:4f:0e:d8:9e:
d8:ce:39:c6:b3:cd:df:ba:97:1d:fd:7f:0f:a5:b2:
16:8a:d9:de:f6:5c:9d:9c:77:46:fd:a7:08:e6:6a:
3d:9c:c8:1e:1c:cb:50:97:8e:ff:aa:d2:86:ab:5d:
26:76:22:62:e9:e5:81:55:8f:e3:08:08:9c:07:0a:
1f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0D:6B:88:A6:76:D9:70:54:BB:77:B1:19:E0:79:92:A7:29:EA:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ac405b28-cb7e-334a-8856-f5831f0fb944.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.202.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:2d:93:cd:d0:6c:46:4f:2c:11:fc:a8:ff:47:2f:a3:39:b1:
ca:7a:62:34:80:2c:43:5e:61:69:f1:0c:a2:78:80:b6:ce:de:
f6:a5:bb:9c:cd:83:d9:95:b9:85:53:9c:60:bd:d6:0f:de:1a:
66:9e:59:a2:71:f1:7a:51:1f:6e:68:7c:8a:f3:55:83:0c:ed:
82:12:0b:e4:b1:93:12:cf:9a:dd:b1:1d:f9:07:01:2f:7c:18:
25:56:6b:71:9b:f6:6a:76:b7:f3:66:b4:67:dd:c8:a6:90:52:
8b:96:e9:54:6d:d5:44:36:45:ab:fa:6b:ac:23:fe:78:2f:02:
ec:b1:6d:a3:af:8f:30:fd:4e:4d:8e:1b:cc:46:61:c6:9a:ea:
ee:25:0b:5b:a4:83:53:a1:d9:1e:0a:7c:80:fd:51:2f:6f:8c:
4f:20:79:04:a0:e7:bc:5e:e3:ef:6e:6b:35:cc:be:d3:03:2f:
fe:5c:a9:98:9d:71:b5:da:c2:b3:ae:d4:a0:ac:3c:5d:bf:50:
9a:23:0e:8a:87:32:09:6c:ae:b1:41:23:78:54:3c:49:52:f2:
8d:38:d9:f0:d5:18:47:91:cd:54:2d:f0:c4:c9:ae:b7:6e:69:
7d:aa:09:b4:18:06:a6:be:56:a7:a4:39:8f:03:46:d3:f7:13:
00:51:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:30:04 2025 by rpki-client