Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aebf4dfd-7dcb-3bae-b388-97230991d33a.roa
File: aebf4dfd-7dcb-3bae-b388-97230991d33a.roa (raw, json)
Hash identifier: gsjNp7qAAXEV8KRPZzJlA3RZT+hgRWt2QmDQ0Q9SErg=
Subject key identifier: 50:52:E9:DC:98:C6:BF:FB:F4:28:0B:78:BC:B0:D7:D6:4F:C4:FF:06
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584002F459446538E6ECCACDBA60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aebf4dfd-7dcb-3bae-b388-97230991d33a.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.133.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:02:f4:59:44:65:38:e6:ec:ca:cd:ba:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=072a9306-001b-4c85-92d3-4d151241b4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:7c:ec:a5:80:1e:8e:af:df:10:16:c5:c2:
d9:a6:15:90:ab:b1:64:f2:4f:42:2d:c2:4a:94:59:
e0:fd:cc:49:13:35:16:f9:4f:a9:41:ad:39:9e:71:
5e:9d:59:24:76:6f:97:4d:8a:d2:d3:ff:09:e6:f8:
8b:55:26:47:a1:35:80:0d:04:6a:99:c4:b1:22:22:
3c:77:be:ce:41:8a:94:ee:95:42:f5:80:df:92:d3:
15:35:08:c6:43:33:fa:c0:24:78:40:69:80:0b:ee:
38:d5:8e:4b:ef:49:c2:7b:cf:43:91:32:54:5f:15:
ea:b3:34:b9:a3:4f:10:ff:b5:ba:5a:f2:c1:83:9f:
74:07:92:48:ed:3f:f0:7a:95:40:3c:68:4e:ec:2d:
e2:82:d9:19:a8:c6:01:fa:1c:16:44:60:53:c7:dc:
7c:5e:72:63:8f:7a:58:ac:1a:8b:56:30:a1:e9:66:
ea:fe:fd:df:c4:50:3a:9e:88:f5:6c:76:98:0d:24:
2f:29:a5:f3:94:47:c7:62:19:30:dd:2b:bb:b5:a2:
27:29:e6:db:c3:d8:ae:02:f6:08:01:dd:10:31:b5:
ad:18:95:e3:f2:1a:f5:34:51:f5:9c:71:fd:31:06:
c2:03:44:e1:7c:0c:ec:74:91:9f:49:d1:1c:e4:8a:
c5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:52:E9:DC:98:C6:BF:FB:F4:28:0B:78:BC:B0:D7:D6:4F:C4:FF:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aebf4dfd-7dcb-3bae-b388-97230991d33a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.133.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:f8:c5:5c:3b:e1:8b:b2:b8:30:46:c0:da:94:e2:6e:ba:db:
3b:f8:4b:5e:3b:27:7a:1f:69:50:e6:dd:9f:f1:f0:6b:71:d8:
95:97:13:bd:be:e9:75:97:a4:52:32:20:b4:59:45:4a:c5:b6:
6d:b4:15:61:28:cf:7b:d9:0c:29:8e:35:ab:ad:81:88:22:09:
62:f0:f6:05:5f:e3:9d:91:8f:e8:8e:56:02:c9:8a:2a:3a:e0:
62:78:85:20:e1:88:b8:6d:72:aa:d5:de:c0:bc:70:35:30:99:
be:ac:7e:ed:d8:8c:65:6e:08:10:11:72:8c:55:fb:df:92:e8:
a6:64:d2:77:e5:48:89:a8:ae:95:94:20:ed:d4:99:62:4f:1d:
04:38:b0:36:d9:00:67:01:01:84:2a:7e:75:ec:43:38:fb:a7:
4e:6c:25:98:78:b9:fb:c5:45:fb:4a:63:d9:e3:32:94:fa:8f:
03:d1:18:66:4c:e4:25:a8:79:ed:ab:28:f1:1f:00:c8:5a:1b:
55:a4:77:9d:f8:67:82:21:53:0f:7b:2a:d8:96:cc:3d:78:e3:
10:c5:4b:f7:23:d8:ff:a9:0f:40:20:94:c5:c2:0c:27:94:ad:
31:d4:df:04:f8:b4:b6:3f:03:31:9a:ee:85:d4:0e:57:59:fc:
bd:24:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:45:12 2025 by rpki-client