Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d10e01bc-13f2-3223-a745-d67fccc38943.roa
File: d10e01bc-13f2-3223-a745-d67fccc38943.roa (raw, json)
Hash identifier: SDHcDlFqZpPdCk0srm5CDZe99ujIBwxzLRqnKc1LmE8=
Subject key identifier: CA:19:CA:38:85:3E:BE:12:F7:B1:4E:44:02:D8:7E:D1:12:A2:FF:C2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6BA8DAFC50D84A636D320820
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d10e01bc-13f2-3223-a745-d67fccc38943.roa
Signing time: Thu 30 Dec 2021 05:00:00 +0000
ROA not before: Thu 30 Dec 2021 05:00:00 +0000
ROA not after: Thu 03 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.161.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6b:a8:da:fc:50:d8:4a:63:6d:32:08:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 05:00:00 2021 GMT
Not After : Feb 3 05:00:00 2022 GMT
Subject: CN=f6576be9-d877-4c22-ace5-2a623d2545e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:04:03:1d:3e:45:7a:b5:b1:97:d1:8a:a2:c7:
41:cf:b4:91:07:9a:cb:33:1f:1b:c0:e9:4e:aa:7d:
0d:49:15:dc:2e:3c:0e:82:1d:70:3e:eb:31:52:c0:
cf:c9:f1:a4:3a:51:ec:ce:d1:4d:2e:df:81:6e:0a:
25:30:08:3f:83:45:a1:86:f6:8f:89:00:25:8d:fa:
4c:9f:eb:f9:00:bd:8d:5b:5f:68:db:99:f6:f2:a7:
a7:84:4e:b5:a2:22:05:ca:10:35:e7:22:e4:f5:82:
93:b4:54:d6:18:e5:eb:fe:de:34:77:fe:59:c5:5b:
aa:59:99:eb:e5:ad:14:84:02:fb:bf:f2:93:08:b4:
67:19:33:33:17:4d:35:44:b4:ac:8d:1e:9a:95:d7:
96:2c:8f:02:94:27:f5:14:ac:ac:41:74:85:40:0e:
55:17:0e:d4:fc:59:b2:69:a2:31:57:8e:40:01:c0:
96:ca:92:61:f4:2e:3a:e5:ab:88:3b:f6:50:09:0c:
a8:75:38:0d:6a:78:07:70:f3:02:9d:7d:2d:e9:10:
38:05:7f:16:ca:2e:d3:cc:25:a1:40:bf:e4:61:2f:
7a:09:f5:b1:32:34:f8:03:3a:c8:5e:44:b1:bb:71:
2d:e1:b6:bb:36:45:8c:71:aa:3d:07:62:17:2b:a3:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:19:CA:38:85:3E:BE:12:F7:B1:4E:44:02:D8:7E:D1:12:A2:FF:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d10e01bc-13f2-3223-a745-d67fccc38943.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.161.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:44:94:d9:56:5a:73:96:2b:9f:22:8d:2f:fa:43:6e:66:ab:
2d:34:79:d8:b6:2d:47:98:aa:ac:3a:b9:d3:5e:99:9e:37:a0:
0d:df:6a:4a:67:0f:8e:47:4d:77:f8:3d:c0:ba:65:80:09:aa:
41:a9:bb:9f:fe:7e:4d:04:77:4d:18:83:fe:5d:ef:2d:36:88:
01:b5:5f:dc:34:7c:b7:57:94:87:78:c1:c6:57:52:8c:cc:44:
bb:af:74:16:f0:cb:e8:c3:75:fb:6b:04:e0:e3:76:78:05:6b:
47:71:42:cd:23:b4:81:68:14:d4:b0:b9:48:73:f2:92:3c:e9:
19:80:be:a1:38:f2:3c:c3:02:c3:fc:7a:68:b7:3f:09:79:68:
14:d6:48:03:c1:c8:e8:9c:95:56:2a:fd:80:19:ef:b7:21:a6:
13:38:af:7a:d2:bb:34:c9:1b:2b:32:c3:a5:d2:f5:7d:36:0e:
d7:57:f0:c0:39:bc:58:3c:b0:c6:af:39:28:f9:05:0c:fe:db:
bf:70:b3:02:f7:65:f7:67:e2:9b:dd:fa:cf:33:a2:2a:f6:db:
ff:07:ce:89:54:76:e7:a7:79:22:b7:4c:58:f0:c8:db:bf:6f:
42:0b:ea:0c:04:8f:db:5f:64:97:1f:fa:97:23:df:2b:26:72:
25:89:8c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:23:13 2025 by rpki-client