Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b331f083-3275-36e1-b356-a3cec5630c4f.roa
File: b331f083-3275-36e1-b356-a3cec5630c4f.roa (raw, json)
Hash identifier: OTgrdU8Kk91OPjeQu1tsHuz0ZHWZalnA4RnuS5bOmc0=
Subject key identifier: 2E:78:45:F2:BC:D8:D2:D9:A5:0A:04:55:50:56:60:58:A5:AB:F2:90
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840787F2D102846E93776981680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b331f083-3275-36e1-b356-a3cec5630c4f.roa
Signing time: Wed 04 Jan 2023 12:00:00 +0000
ROA not before: Wed 04 Jan 2023 12:00:00 +0000
ROA not after: Thu 09 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.171.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:78:7f:2d:10:28:46:e9:37:76:98:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 4 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2023 GMT
Subject: CN=6cd15c69-60d3-460e-8897-a41527123607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9c:80:ef:6a:51:80:5e:f4:82:3c:34:69:fc:
a2:ea:1a:f0:14:70:ad:ce:7c:a3:69:00:1b:65:d1:
6f:61:7a:fb:82:f6:d2:e5:60:09:3e:25:4f:e3:46:
2e:aa:7f:17:39:98:88:d4:80:a7:ac:ed:f7:5d:e5:
d0:a0:a4:9f:99:97:cd:0a:b8:da:23:90:75:36:81:
04:be:6e:e7:6c:4b:7b:d8:28:8d:cf:10:97:80:26:
c0:ff:d5:23:49:5e:b9:0d:f2:fc:70:03:38:91:ee:
e4:40:1b:a8:6f:f1:9a:d7:09:5f:eb:46:7c:58:60:
bb:0e:a9:6e:b8:8e:cc:29:10:2a:40:c7:ff:e3:4c:
79:40:ca:61:c0:e2:42:d8:05:1d:d9:d8:c4:f4:1d:
0d:ab:d3:0e:f3:76:91:fc:e8:40:7d:49:37:42:fe:
d6:29:11:74:41:62:f4:6a:ed:af:a0:30:a4:18:58:
47:52:20:1c:9e:a4:23:d5:ef:48:8b:d2:4d:a9:c6:
73:20:77:1c:89:97:8f:28:8e:b4:a9:9c:f3:0f:3f:
01:72:f0:e3:5e:22:9b:65:19:46:00:51:08:d4:08:
a0:a2:28:f2:22:96:13:b5:50:f9:5e:b0:70:12:a1:
a7:9b:ef:ee:d3:1e:cb:f4:c2:ff:de:46:7e:79:91:
75:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:78:45:F2:BC:D8:D2:D9:A5:0A:04:55:50:56:60:58:A5:AB:F2:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b331f083-3275-36e1-b356-a3cec5630c4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.171.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:cc:e1:20:ec:7a:11:27:19:02:e4:10:ae:31:26:f4:c0:9f:
66:0c:2b:11:11:7b:37:72:16:69:3d:4c:00:da:cb:e8:64:30:
ad:23:c6:3e:a0:4d:0d:be:db:22:71:74:95:58:74:4a:e5:79:
b7:8c:78:e0:9f:66:62:1e:05:6b:3c:79:18:51:7a:6d:cd:f9:
36:0b:7b:3b:5e:ad:72:a2:c3:fa:93:85:50:38:1f:db:c0:b9:
46:f9:c4:c0:54:32:34:a6:d6:08:ba:cc:80:55:7f:a0:6c:ca:
71:77:c9:e3:87:1d:cf:af:46:5f:3b:1a:e1:ce:42:e2:a6:86:
0f:42:be:f4:a4:2e:82:b4:ab:6a:75:bb:97:34:15:8d:7a:cc:
71:00:62:2f:97:cf:e2:37:fe:7e:76:5f:83:71:58:34:d5:67:
2f:67:b8:3c:6c:50:c8:7a:36:22:1c:b1:38:13:55:c1:f6:61:
ba:e5:0c:6d:2b:c2:73:b9:ba:4d:58:d6:72:e0:b7:04:12:93:
82:11:88:f2:db:49:be:93:15:41:ca:c2:45:07:64:e4:53:ca:
b4:3e:c7:3c:59:79:c0:2f:6a:8a:7c:dc:f8:cd:de:3b:7b:85:
45:55:84:aa:47:a6:46:79:ab:89:05:8e:57:ea:8d:29:9f:a8:
7b:f8:5b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:47 2025 by rpki-client