Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b02fcb26-98f8-36b2-b8b1-3304c4927929.roa
File: b02fcb26-98f8-36b2-b8b1-3304c4927929.roa (raw, json)
Hash identifier: ICVOoatt5pEc1NQVgGKOJlBX8VA1PHp1HRMjqYGZf6s=
Subject key identifier: F7:88:76:09:63:01:3B:4C:38:7E:21:F0:1E:07:E0:E9:11:F7:A1:93
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858400320AFCF3838BD11A283C400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b02fcb26-98f8-36b2-b8b1-3304c4927929.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.171.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:03:20:af:cf:38:38:bd:11:a2:83:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=cae47e6b-71fa-4add-bd2e-a1b4dde4c4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b2:ae:f0:39:b3:5d:20:d0:11:9e:5c:0f:e8:
e2:a9:d1:9e:db:4e:a1:71:21:8d:a3:81:c9:52:36:
3c:23:80:ea:af:a4:1e:b2:48:83:59:74:17:de:c1:
49:93:92:19:69:1f:9e:54:7b:b4:3c:96:be:2c:d9:
21:ff:c0:3f:bd:af:b2:9b:34:92:26:ac:69:cb:5d:
54:23:40:c3:fa:c3:13:e7:f1:80:73:77:c3:14:7d:
23:6b:00:82:0d:5c:d9:46:09:a7:ba:96:20:0a:78:
37:5a:59:04:f3:e6:f6:f9:ec:d0:36:f6:33:34:d6:
b9:13:f6:3d:4e:9e:23:b8:bc:59:6b:3f:c3:73:3a:
1c:cf:e1:0f:8d:0b:84:ba:40:99:92:17:a3:f8:35:
21:42:9d:0c:ce:89:17:0e:bb:f7:c7:2f:90:20:0a:
9f:ee:95:24:87:ba:2b:44:a0:44:9f:23:95:2b:b6:
dc:44:c6:bc:21:73:c7:9e:b2:ee:f6:1f:d8:cf:b4:
e1:39:94:54:a2:db:5b:d0:8b:50:6e:d9:cc:bb:0c:
bb:ce:8a:fc:69:b1:55:c8:71:31:10:c1:ee:56:9d:
74:0a:7f:d9:60:d8:2d:8f:9e:28:08:97:f4:7e:c6:
e7:ed:14:89:c9:68:73:8b:57:cd:83:fc:98:16:9a:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:88:76:09:63:01:3B:4C:38:7E:21:F0:1E:07:E0:E9:11:F7:A1:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b02fcb26-98f8-36b2-b8b1-3304c4927929.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.171.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:01:aa:fd:cd:c3:1a:f4:8b:b3:42:cd:70:ab:14:e2:bc:38:
de:bd:45:9c:f7:f1:e0:e7:92:fc:5d:5e:b1:09:bf:73:3f:70:
70:0e:9d:35:5b:de:23:6d:9d:c4:17:77:b5:ab:45:43:4e:b6:
e1:71:a3:8a:c6:39:2e:69:eb:5f:99:1c:7b:08:c2:1a:93:72:
85:91:0d:6b:f4:1f:09:dc:4e:38:aa:fa:b0:2b:5e:9b:69:40:
70:03:11:3c:03:20:74:01:81:0a:4f:f7:df:95:5c:6b:48:a7:
eb:1b:2f:a7:be:f6:15:de:1c:2c:00:3a:69:19:02:f0:2a:7d:
91:ec:54:a9:6e:e8:22:aa:40:ef:36:43:83:34:fe:f9:4d:b0:
85:bd:b1:12:81:85:4c:19:f3:57:81:07:43:79:52:b8:1e:0a:
e2:08:2b:d8:cf:10:1a:85:16:83:68:25:52:48:1c:c8:4f:50:
c2:9d:7b:8b:25:e6:e1:56:32:cf:ff:40:3c:a0:39:26:80:11:
4f:9e:56:09:35:4f:e7:8a:c8:c2:44:8d:9c:70:41:1b:36:d0:
fd:89:9e:e8:ed:a3:a6:ec:f1:14:98:51:45:12:89:ce:2f:ac:
82:8c:d4:0d:1b:6f:23:3f:10:02:6b:64:9a:e0:cd:32:b8:cf:
e8:9c:78:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:07:17 2025 by rpki-client