Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf672f71-71c7-3a83-94ed-66ce26d3a20d.roa
File: bf672f71-71c7-3a83-94ed-66ce26d3a20d.roa (raw, json)
Hash identifier: zuvSy1EkXt/oIz3NG3nm4yOZlgMA4gAzsciIwJ4KisM=
Subject key identifier: 13:C9:A9:D8:66:35:2E:65:99:5F:44:2B:DF:63:60:CB:85:60:E2:B1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840755B2C6DFE80AAE5C6365C20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf672f71-71c7-3a83-94ed-66ce26d3a20d.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.144.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:75:5b:2c:6d:fe:80:aa:e5:c6:36:5c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Feb 8 05:00:00 2023 GMT
Subject: CN=0f762a70-2110-43c0-819e-4b510be97a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:07:70:e9:8c:bf:9f:b5:cb:51:fd:54:4d:69:
49:1f:b7:44:38:6e:b3:89:9c:c4:97:2e:77:fa:e1:
8c:b6:52:cc:d0:a5:91:2e:5d:1f:9d:05:e7:d7:27:
4f:71:91:5c:58:fe:69:d4:8c:db:c0:f9:de:b4:4e:
93:e4:d6:65:d2:76:80:09:bf:a7:a6:e2:ab:40:cc:
9e:84:bf:2c:6d:27:83:79:72:87:90:27:dd:46:c4:
d4:41:19:ee:f2:5c:90:67:66:03:fa:c2:f8:eb:0a:
82:d7:34:f0:a9:ef:74:9e:6f:b5:99:d4:90:b4:34:
cb:67:5d:b6:e5:5c:00:f9:4d:43:bd:1e:f0:cb:ad:
19:fb:59:c4:b2:6b:9b:2f:0c:17:ee:a4:de:c4:a7:
9a:97:c3:0e:a1:6b:2a:13:3d:78:be:e0:0a:2f:87:
5f:2f:a5:e9:e5:31:62:b4:96:19:8e:e7:68:a0:cb:
32:03:a5:8d:dc:c2:ca:be:dd:a7:6e:67:3e:a9:11:
8e:41:e8:23:10:08:b1:bc:cb:d6:8b:a8:39:36:5e:
b3:96:3f:fd:79:ae:0e:99:34:1f:15:9c:ed:4b:e0:
ed:85:ae:73:f8:d5:cf:da:cd:c5:fa:ef:38:e4:2b:
7d:c1:e0:ae:57:e1:ed:d9:17:f9:80:b4:22:6e:02:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C9:A9:D8:66:35:2E:65:99:5F:44:2B:DF:63:60:CB:85:60:E2:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf672f71-71c7-3a83-94ed-66ce26d3a20d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.144.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:c1:cf:39:65:61:44:f5:0e:dc:59:b7:fa:0c:91:ea:89:56:
f0:f6:de:00:f2:ca:db:fd:ea:5c:d0:cf:9f:c5:40:d6:e4:91:
a6:1a:6f:6a:5e:b4:e9:4f:27:13:d3:6a:2f:63:87:60:c1:0b:
e4:21:74:af:af:d1:d8:aa:a8:eb:65:8c:e3:5b:55:49:e7:54:
99:4b:6b:ad:82:ee:3d:70:6d:46:13:f6:07:1a:eb:f5:9f:90:
ed:da:f2:aa:31:53:73:17:28:eb:64:d6:a7:b6:6b:d3:9b:ee:
3f:19:00:50:03:44:a9:be:25:56:12:3d:62:68:f8:8f:9d:28:
18:67:87:f4:59:a6:3e:66:4b:ae:fb:d4:56:f2:97:1c:7b:3b:
7b:41:04:8f:6f:84:16:46:1a:c8:86:9b:4b:47:53:9e:0c:bf:
e4:04:62:eb:72:9c:b5:55:2d:79:02:9a:4e:08:1d:2f:2d:ac:
99:87:70:f3:e1:0b:93:85:9a:fb:ce:95:27:2c:58:5d:02:22:
0a:a0:e9:66:56:76:16:6a:ed:51:fd:ec:ce:ea:66:0a:01:6a:
49:26:59:36:82:6a:b7:5f:7a:f0:8c:b2:48:83:25:d1:79:14:
6d:79:5b:b3:7a:f0:f7:4b:f5:d8:4f:a8:65:00:c8:a0:8c:54:
bf:05:7e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:57:17 2025 by rpki-client